Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3133382e3235352e3139362e302f32332d3233203d3e20323632383638.roa
File: 3133382e3235352e3139362e302f32332d3233203d3e20323632383638.roa (raw, json)
Hash identifier: BSv0J2Q6UJzlDATMBNNM05SxrcKffinrq2L4GWCNZ1Y=
Subject key identifier: 45:B0:57:64:07:82:E2:C6:9A:20:7A:E1:BC:72:91:50:BF:AC:C2:8E
Certificate issuer: /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial: 7AB4105281CA735426891FB35767F95C745BE481
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access: rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3133382e3235352e3139362e302f32332d3233203d3e20323632383638.roa
Signing time: Thu 06 Mar 2025 11:39:09 +0000
ROA not before: Thu 06 Mar 2025 11:34:09 +0000
ROA not after: Thu 05 Mar 2026 11:39:09 +0000
asID: 262868
IP address blocks: 138.255.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b4:10:52:81:ca:73:54:26:89:1f:b3:57:67:f9:5c:74:5b:e4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Validity
Not Before: Mar 6 11:34:09 2025 GMT
Not After : Mar 5 11:39:09 2026 GMT
Subject: CN=45B057640782E2C69A207AE1BC729150BFACC28E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:ab:dd:8c:97:c7:78:cc:6a:08:e6:aa:ec:
46:08:b4:2f:32:12:22:df:cf:e2:98:13:65:e6:a0:
d6:5c:48:5e:a1:e1:cd:29:34:60:6c:81:d7:ff:11:
68:fb:c6:34:03:74:d0:c5:fd:05:99:1f:55:80:ed:
07:74:2a:9d:59:1b:c4:d4:2a:61:e8:07:35:fe:f6:
c0:eb:be:e9:df:2a:6c:43:84:c0:f9:c8:2a:d6:7a:
51:a9:09:9a:09:af:9d:95:c5:ea:69:69:c8:8c:db:
1a:1b:16:22:67:34:5b:d3:55:73:e6:74:02:2e:96:
fa:7a:98:7e:f2:e0:2b:06:44:e9:94:19:9d:f8:5f:
01:a8:37:b7:90:f8:b3:c1:4b:b9:2b:16:61:2d:21:
1a:d7:df:32:e9:43:84:4c:1b:13:d4:5c:10:ad:93:
44:0a:8f:cd:ff:5b:b0:e3:71:b3:11:10:91:67:51:
d7:23:f7:b3:fb:b3:74:ec:89:4a:b0:2b:74:f1:fd:
21:d7:70:31:4e:e6:d3:6c:ee:26:82:b6:68:6a:d1:
6d:26:c2:8f:bb:12:d5:77:0c:b6:1b:94:f0:40:23:
4a:8d:fa:ad:17:88:b3:c2:ae:ae:77:f4:14:95:0e:
14:0f:40:62:d2:ed:54:e5:d8:f0:01:d2:9a:24:05:
65:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:57:64:07:82:E2:C6:9A:20:7A:E1:BC:72:91:50:BF:AC:C2:8E
X509v3 Authority Key Identifier:
keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3133382e3235352e3139362e302f32332d3233203d3e20323632383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.196.0/23
Signature Algorithm: sha256WithRSAEncryption
21:cf:7d:4e:17:6d:5f:33:a4:0f:d2:42:8a:9a:42:7d:fb:b1:
ae:e0:a4:df:38:fa:ff:89:59:91:d4:5f:bf:11:ec:d1:1c:0d:
19:8e:64:b1:b7:62:5d:89:9b:62:4e:7b:35:c6:cb:5d:c8:6a:
4c:9b:b2:cd:cd:62:15:3c:b6:ea:49:f0:3a:9a:be:91:89:54:
c5:82:bb:7d:3f:bc:e2:0a:2c:7b:6a:b2:7f:ef:81:87:ed:80:
41:a3:69:e5:73:02:68:db:2b:e6:bf:bd:b8:90:dd:bf:d7:8a:
86:f3:76:92:1e:6e:c7:fa:69:cd:24:a0:e4:a2:cf:f1:2a:1f:
97:9e:29:72:80:95:f3:de:ae:45:09:5e:11:cf:e5:af:a6:77:
e0:42:80:01:49:90:06:67:fa:2c:22:5c:38:e2:d9:8e:82:9d:
ba:d7:65:58:1b:3c:b9:56:d9:bc:4a:ca:1b:e4:cc:65:14:86:
12:45:6e:14:b0:18:e4:4d:d5:69:66:a5:19:83:48:d0:76:4d:
5d:40:b1:21:2b:8d:0c:5c:1f:7b:be:b3:8e:43:ba:cf:fd:da:
dd:9d:70:6b:4e:74:e7:2a:41:63:0f:7b:74:84:42:00:c7:37:
bc:bb:15:27:15:4a:d3:d7:1d:76:bd:b0:b6:69:44:09:f9:0f:
01:39:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:38:02 2025 by rpki-client