Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37362e302f32322d3332203d3e20323730333539.roa
File: 3139302e38392e37362e302f32322d3332203d3e20323730333539.roa (raw, json)
Hash identifier: xjeUA9h1LT3+sXxsBOwqqVyPDKKSlg9QJQLk//M0eco=
Subject key identifier: 85:EC:2C:C1:90:C3:94:A5:5F:C2:B7:87:5D:EB:3A:13:58:5C:B2:AD
Certificate issuer: /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial: 1449F332BB8DDA1C1912986C21A24ADC6C470318
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37362e302f32322d3332203d3e20323730333539.roa
Signing time: Thu 06 Mar 2025 10:25:30 +0000
ROA not before: Thu 06 Mar 2025 10:20:30 +0000
ROA not after: Thu 05 Mar 2026 10:25:30 +0000
asID: 270359
IP address blocks: 190.89.76.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:49:f3:32:bb:8d:da:1c:19:12:98:6c:21:a2:4a:dc:6c:47:03:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Validity
Not Before: Mar 6 10:20:30 2025 GMT
Not After : Mar 5 10:25:30 2026 GMT
Subject: CN=85EC2CC190C394A55FC2B7875DEB3A13585CB2AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:56:b7:93:f9:7a:10:45:8a:d8:86:fa:e6:
ee:8d:17:34:40:df:8a:d4:e5:42:b0:58:26:d6:42:
8d:ba:24:ba:14:cc:db:ce:75:a7:27:5a:a2:94:d5:
b1:e0:39:5a:50:ac:75:eb:9b:67:81:d2:66:d4:e4:
91:86:58:ad:24:48:cf:32:2a:ef:da:4d:50:f2:f9:
0b:66:67:d8:51:90:ad:a0:99:31:ce:60:d7:96:7e:
6f:6b:61:d2:08:fb:f2:23:96:17:9b:71:42:69:37:
72:ec:2c:70:03:72:a0:6f:53:b7:6f:d9:37:bb:cc:
f6:8c:aa:56:1f:80:f8:ca:43:c2:6a:e9:0c:5c:83:
9a:e4:29:68:4c:9f:35:b2:65:e5:2b:77:d8:2a:79:
ee:45:a8:03:47:1a:85:da:17:8a:07:60:e4:c1:cd:
f6:2b:f4:c8:8f:82:3e:f2:a2:eb:ff:2e:92:9f:da:
5c:20:ca:99:ce:9e:02:53:97:1d:41:c3:3c:4a:b8:
f2:f6:38:65:66:c9:e2:50:31:50:7b:87:cd:03:d4:
a8:95:d1:c1:89:33:2c:60:af:16:ee:30:2b:87:36:
c8:c1:ec:cd:77:ee:df:6e:78:72:56:ce:f1:25:24:
0f:ca:78:66:ed:09:4c:e1:94:ed:d9:46:d5:aa:5c:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EC:2C:C1:90:C3:94:A5:5F:C2:B7:87:5D:EB:3A:13:58:5C:B2:AD
X509v3 Authority Key Identifier:
keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37362e302f32322d3332203d3e20323730333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.76.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:e2:01:a7:4b:13:b4:38:1b:14:f4:66:fe:3e:0e:03:cb:2a:
3c:1b:4a:8a:2b:fc:32:4a:f6:cb:a7:14:c9:a1:a2:67:f8:00:
a6:cd:d5:85:79:74:f4:8c:a5:51:29:78:9b:30:b0:13:90:e7:
34:5a:8e:a3:9f:3c:e9:45:e4:87:07:55:38:c0:1e:94:d5:38:
cf:e9:a2:b0:e2:ca:3e:57:1c:19:c8:9b:81:80:1e:6f:f3:38:
b5:44:4b:0f:80:3a:ae:69:1a:83:39:59:a0:5e:7b:e5:d2:a3:
7e:5f:f0:17:7d:58:1a:2f:5e:7c:06:46:ba:62:a4:db:d4:a6:
80:c6:be:56:fc:19:23:34:95:15:3f:15:7e:e0:b3:bd:da:3f:
37:22:9b:6f:28:30:d5:c7:71:c3:a4:ba:e9:03:67:ac:3d:28:
ea:ae:e3:64:40:83:2e:46:15:14:c8:12:ef:66:e9:7f:74:95:
91:cf:5f:5d:c5:76:3c:51:ee:fe:16:2a:66:02:02:07:82:ed:
4a:ea:4a:8b:71:37:e8:4e:94:3a:b5:d8:50:05:4e:d2:ab:5a:
46:c3:8f:6d:c0:a1:5e:04:c2:db:a0:a9:fa:b1:c2:b5:30:d2:
1d:3c:f1:a2:e3:4e:af:2d:41:05:7e:79:a0:19:a8:dd:a0:1f:
94:5b:43:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:07:01 2025 by rpki-client