Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa
File: 3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa (raw, json)
Hash identifier: 08v3qJE2gcKOrHSuTx0q0Q9WBeibI6d9fN3bNypHkqo=
Subject key identifier: D9:87:90:2E:06:89:F7:C7:8C:90:0B:97:A2:72:1F:43:EE:98:F4:D2
Certificate issuer: /CN=A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E
Certificate serial: 30B9EC15939FBAAC67B44893484AD7B2FE534014
Authority key identifier: A9:C0:D4:0A:28:14:EB:36:F3:DD:48:E1:6F:27:C5:CF:F4:1E:FA:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa
Signing time: Mon 02 Sep 2024 14:53:49 +0000
ROA not before: Mon 02 Sep 2024 14:48:49 +0000
ROA not after: Mon 01 Sep 2025 14:53:49 +0000
asID: 263604
IP address blocks: 143.202.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b9:ec:15:93:9f:ba:ac:67:b4:48:93:48:4a:d7:b2:fe:53:40:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E
Validity
Not Before: Sep 2 14:48:49 2024 GMT
Not After : Sep 1 14:53:49 2025 GMT
Subject: CN=D987902E0689F7C78C900B97A2721F43EE98F4D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:13:c7:f0:51:f9:59:09:1b:2d:e2:2a:49:
45:be:26:1b:23:ba:9f:53:b2:3f:75:c0:92:5a:7e:
f9:bc:25:d8:43:1a:b4:db:44:41:a6:a9:f8:e3:7c:
00:0e:42:e8:fc:2d:76:05:5b:9e:78:4d:4e:88:ee:
dd:bb:6b:7c:4d:89:93:b8:02:08:45:b9:22:09:ae:
1f:6d:80:52:2a:b3:b2:5e:9f:c0:6e:e8:b3:b2:7a:
f6:17:c8:83:6c:1f:5a:99:79:52:83:4a:94:ac:0a:
3d:a1:33:39:72:5f:b3:bc:5d:c7:b8:5b:72:dc:e3:
e5:87:1e:c8:bc:59:ca:ea:26:d8:2f:6d:75:16:e5:
f7:94:5f:26:95:f4:57:d6:d1:72:98:f9:65:71:05:
31:15:0b:ae:c5:55:6e:71:d4:eb:a1:1a:96:45:37:
d0:54:8d:f9:47:b1:1b:75:4d:49:a2:c7:16:36:c5:
a8:36:5f:58:6b:cc:a5:3f:d3:b2:ce:59:2e:e4:7d:
4b:87:89:ee:04:75:4f:83:59:c0:a5:1f:65:64:dc:
a6:af:95:92:0b:20:37:38:b7:8f:fb:f7:1f:67:21:
68:74:c6:87:cb:5f:37:39:ae:f2:c6:b0:28:65:e5:
62:e3:cf:08:39:8c:6d:dc:2b:b8:62:e9:40:25:ed:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:87:90:2E:06:89:F7:C7:8C:90:0B:97:A2:72:1F:43:EE:98:F4:D2
X509v3 Authority Key Identifier:
keyid:A9:C0:D4:0A:28:14:EB:36:F3:DD:48:E1:6F:27:C5:CF:F4:1E:FA:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f9:7a:88:3b:c0:0f:29:a7:94:b0:69:05:b0:f8:c2:67:9c:
e9:a6:35:31:74:54:82:fc:4e:be:21:84:e5:09:3c:ea:98:3f:
2d:bd:95:5f:94:9b:89:c4:c8:2b:ba:6d:0e:24:a1:00:21:c7:
e2:30:89:2f:de:cd:69:1c:37:33:18:c4:10:d7:d2:a5:a7:28:
57:ba:b1:89:ce:cf:9d:62:2a:3f:64:63:8a:1d:2e:4d:1d:f9:
b4:79:50:d8:79:34:7d:25:33:20:a9:1b:c7:e9:ab:de:29:91:
2f:22:bc:44:43:bb:62:2c:39:5c:65:47:70:b1:06:7c:32:6c:
04:3a:79:23:90:3c:99:f1:ea:65:54:4b:fc:bb:3b:27:df:85:
d9:89:e5:9a:06:06:a5:99:73:5d:e6:4d:c8:63:a7:fe:ed:0f:
be:41:47:d0:54:90:bb:75:85:52:e1:0b:12:e8:24:9c:99:7b:
8f:4a:c7:e9:de:30:64:42:6d:89:93:c7:79:4d:e0:47:ce:81:
f7:8d:b2:59:eb:20:7d:aa:f9:88:59:ec:7c:0d:58:c2:c6:79:
39:d1:74:fe:00:11:75:04:5c:11:6d:8d:16:3a:1f:10:80:e8:
7a:f1:f9:12:ab:71:8b:86:28:0a:7f:c2:21:9c:69:3a:b3:4d:
51:39:1b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:02:20 2025 by rpki-client