Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135322e302f32342d3234203d3e20323632373834.roa
File: 3139312e3234312e3135322e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier: AyK7RIjYsdDnRAfF+q/QfpCtv2HkU9NS7gJQdpPVw20=
Subject key identifier: 07:08:EB:13:6D:9C:BA:99:43:A6:B6:60:D2:EC:09:BA:A2:D3:64:CA
Certificate issuer: /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial: 29EB1EBFE2C1AD2C9AD0A3B02D43AA14A6E7B856
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135322e302f32342d3234203d3e20323632373834.roa
Signing time: Sat 22 Mar 2025 09:59:23 +0000
ROA not before: Sat 22 Mar 2025 09:54:23 +0000
ROA not after: Sat 21 Mar 2026 09:59:23 +0000
asID: 262784
IP address blocks: 191.241.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:eb:1e:bf:e2:c1:ad:2c:9a:d0:a3:b0:2d:43:aa:14:a6:e7:b8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Validity
Not Before: Mar 22 09:54:23 2025 GMT
Not After : Mar 21 09:59:23 2026 GMT
Subject: CN=0708EB136D9CBA9943A6B660D2EC09BAA2D364CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:fc:6f:9c:6d:db:fd:51:79:07:8b:8e:ad:
c3:35:54:34:bb:8a:49:b5:40:82:8c:43:fb:fe:f7:
9a:2f:93:d2:c4:65:48:96:5a:d8:a8:f0:d0:96:dc:
92:d3:4e:80:28:27:7b:f4:4e:6f:db:8f:11:aa:5b:
6e:57:57:0a:66:72:17:bd:ee:b4:70:c5:fd:fa:2c:
9c:7f:4e:7d:c9:ab:c4:2a:a5:fe:3a:ba:35:14:19:
a0:70:26:97:54:94:09:55:74:e9:a5:9f:95:e7:eb:
c4:10:11:b7:81:e8:bd:8b:a9:86:75:c4:c0:64:00:
81:bb:84:08:2e:9b:85:19:ee:96:45:4e:f0:71:d8:
bf:e0:f2:2c:47:7b:11:d7:e5:d0:c4:6e:a3:4a:75:
f5:db:04:e3:16:8f:fc:7e:72:7a:f6:3e:1e:32:af:
25:6a:2e:0f:8a:9e:4c:9b:78:e9:b9:ff:f2:fe:1e:
71:43:80:26:ff:da:87:b1:e3:17:82:04:20:f2:6c:
4f:2b:18:a0:85:07:d6:6a:33:a1:e9:33:8f:2f:e5:
f6:ee:f1:65:5b:27:4e:7b:1b:0a:99:d4:5d:cf:fb:
c3:98:d8:8a:1e:c3:53:d9:c3:79:9e:1f:7c:14:ec:
d8:dc:4d:47:6f:6b:42:03:56:02:d9:84:19:e0:6a:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:EB:13:6D:9C:BA:99:43:A6:B6:60:D2:EC:09:BA:A2:D3:64:CA
X509v3 Authority Key Identifier:
keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135322e302f32342d3234203d3e20323632373834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.152.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8b:50:cf:a8:bb:4f:09:d1:bd:b4:0e:a9:5d:df:0d:a6:56:
82:ad:c8:f8:23:d1:61:50:ae:be:da:2b:3b:f8:aa:78:08:e8:
e3:0c:58:4a:37:4f:a9:bf:29:b6:ee:5f:3a:d7:4e:27:bf:6f:
cb:e8:bc:4c:09:67:ba:22:e1:57:19:b1:26:c9:d5:6d:1e:d7:
53:9b:e2:71:0d:e7:cc:d1:78:a9:88:52:e2:83:32:d4:76:65:
e6:1b:b3:48:5b:58:63:8c:c8:7c:ae:38:fc:56:53:71:fa:70:
5f:48:02:31:2d:e9:88:dc:59:0a:d1:9f:c4:d6:ef:60:2e:b1:
bd:de:33:75:70:6d:93:1b:80:95:4f:7f:99:76:e9:6c:c3:43:
47:91:51:9c:ae:b9:a2:18:fe:2a:7d:b5:97:46:0e:62:ed:bd:
2c:cf:e5:4b:f8:21:68:81:67:d5:ba:87:4f:d5:d5:a5:78:36:
30:09:74:f7:bb:46:71:3f:16:ee:ab:55:8b:76:70:ed:9f:e0:
6c:36:3a:fa:d7:bf:5d:6e:8d:52:81:74:62:bf:69:70:ca:ab:
fb:f6:57:d0:91:63:90:17:e9:c6:d4:38:f6:99:85:23:30:40:
69:aa:43:28:70:5d:2c:27:14:fc:1f:09:f3:bd:db:70:67:89:
85:d5:d5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:56 2025 by rpki-client