Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa
File: 3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (raw, json)
Hash identifier: jq33KYU9CFhSabj7FQHib1ORj2LmOp7hWFRBMmOuUz0=
Subject key identifier: D0:8B:86:70:80:19:FD:85:76:CA:AD:27:31:AF:33:F3:3A:29:D0:74
Certificate issuer: /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial: 317075552CA6A3CE1412C24778AAD2301D80B56F
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa
Signing time: Thu 06 Mar 2025 06:01:17 +0000
ROA not before: Thu 06 Mar 2025 05:56:17 +0000
ROA not after: Thu 05 Mar 2026 06:01:17 +0000
asID: 263321
IP address blocks: 191.7.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:70:75:55:2c:a6:a3:ce:14:12:c2:47:78:aa:d2:30:1d:80:b5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Validity
Not Before: Mar 6 05:56:17 2025 GMT
Not After : Mar 5 06:01:17 2026 GMT
Subject: CN=D08B86708019FD8576CAAD2731AF33F33A29D074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:b9:3d:64:fc:cf:77:2b:cf:3e:cf:fd:18:
98:5d:38:83:4e:1f:e1:0b:a0:9e:a8:6b:be:84:51:
ca:8f:87:8f:9a:5a:59:ce:57:4c:8f:39:04:22:77:
53:d1:ce:47:9c:13:26:dd:ff:87:20:7a:6c:b0:f4:
37:21:15:56:b0:fb:e0:cd:5a:d0:7c:c2:84:48:d3:
2d:18:f7:8b:66:0a:dd:e4:76:33:45:bb:3c:47:ce:
07:e7:7d:eb:e8:3c:d3:96:b5:a0:ef:c7:ce:a4:41:
b2:d3:e4:33:0c:c9:ca:f1:49:1a:0f:0e:86:67:03:
3b:2a:48:81:b4:cf:39:ee:55:2c:95:24:bf:b7:58:
12:2e:ed:9d:1d:b5:14:5b:ff:ae:8f:ed:ad:b1:41:
66:0b:41:7f:95:c4:f2:99:d7:e9:de:9a:f1:2c:7f:
8f:c9:05:02:51:d2:ba:4a:85:e1:eb:8d:2f:63:86:
35:f3:63:1d:70:8d:99:f6:71:7a:9a:69:5f:fa:b4:
20:be:1d:57:13:d3:5b:38:81:82:46:93:3f:d6:d4:
64:5b:91:c7:9b:e3:57:61:ab:8d:f1:d7:70:34:39:
35:0a:97:a2:a7:8f:63:e5:d7:bb:ec:ba:23:10:81:
e6:1c:89:be:32:3e:2d:7e:5e:dc:20:f9:8e:8f:ab:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8B:86:70:80:19:FD:85:76:CA:AD:27:31:AF:33:F3:3A:29:D0:74
X509v3 Authority Key Identifier:
keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.7.136.0/21
Signature Algorithm: sha256WithRSAEncryption
95:7d:69:ff:a0:68:55:fc:fc:25:46:c1:29:5d:f7:1a:ff:b5:
03:1c:1a:c7:e3:09:c1:d5:c2:15:93:73:78:6d:fd:5b:78:25:
34:ee:ee:2f:2b:3a:84:09:46:ad:03:9d:88:d0:fb:10:91:92:
b8:de:37:02:10:82:96:0a:c3:ea:e8:43:69:97:d7:7f:c0:11:
b3:5a:9e:40:ea:1e:a1:4b:71:a9:d7:b4:2e:e0:51:ae:61:e5:
61:b1:ff:42:ad:3a:ff:05:49:2f:e9:02:f8:66:b3:7c:95:7e:
00:14:32:f1:7e:09:cc:73:41:4f:90:43:25:c0:4f:31:7a:ac:
de:5b:f3:97:cf:14:03:57:54:4e:f0:cb:e2:44:85:c0:51:df:
db:a6:a2:f6:69:2b:5a:45:12:51:be:9c:07:4b:80:f9:c5:2a:
dc:cd:6a:f5:09:28:3e:58:57:55:60:37:ad:97:9c:56:1d:a8:
86:c5:6d:04:f5:2b:ac:90:a9:f0:b9:19:a4:64:14:fb:61:54:
99:b3:a9:f3:d0:42:8e:e2:57:df:e3:1e:26:c5:02:d2:3e:3e:
bf:15:52:c2:d5:66:f1:e8:4d:e0:51:b4:54:a2:13:f0:01:cf:
3b:c3:8c:f1:20:f8:8c:81:d9:05:d4:85:7c:41:dd:26:78:5b:
7d:c5:b4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:53 2025 by rpki-client