Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38302e302f32302d3234203d3e203238333036.roa
File: 3138372e39342e38302e302f32302d3234203d3e203238333036.roa (raw, json)
Hash identifier: MaY/QGq1nFC3eJ4HpJqvVDH+fxkumlWAWv60xlPNEX0=
Subject key identifier: 61:1B:3A:6E:48:94:98:4D:D0:F3:A6:E3:31:6F:04:90:EA:7E:19:DB
Certificate issuer: /CN=00398394BC116D8D01BE15C08D06060EF5755D29
Certificate serial: 42AE19DA1FBF5F3F8C1AE5BCFD0852123F732B4D
Authority key identifier: 00:39:83:94:BC:11:6D:8D:01:BE:15:C0:8D:06:06:0E:F5:75:5D:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38302e302f32302d3234203d3e203238333036.roa
Signing time: Tue 11 Feb 2025 02:55:09 +0000
ROA not before: Tue 11 Feb 2025 02:50:09 +0000
ROA not after: Tue 10 Feb 2026 02:55:09 +0000
asID: 28306
IP address blocks: 187.94.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ae:19:da:1f:bf:5f:3f:8c:1a:e5:bc:fd:08:52:12:3f:73:2b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00398394BC116D8D01BE15C08D06060EF5755D29
Validity
Not Before: Feb 11 02:50:09 2025 GMT
Not After : Feb 10 02:55:09 2026 GMT
Subject: CN=611B3A6E4894984DD0F3A6E3316F0490EA7E19DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:48:23:98:3b:8d:2e:06:a8:b3:fe:49:fd:
04:29:5e:54:2a:aa:9f:fa:59:4a:da:dc:52:d0:e7:
b9:a3:bb:83:50:f5:5b:6d:1c:26:fa:b0:dd:3e:21:
bf:ea:c7:c3:cd:5f:13:ef:4b:e4:83:75:10:69:77:
02:3d:65:60:be:24:23:11:4d:2d:9c:92:24:20:54:
17:df:ce:10:98:53:93:a0:09:94:9b:1e:ae:ac:5a:
e9:af:85:bd:b6:9e:d6:77:f0:d0:1f:52:79:f1:59:
45:b4:c6:a5:ac:ae:f7:79:f9:d1:ba:11:1a:d6:2f:
f8:22:a3:56:d7:3e:b5:63:7f:ed:93:a1:7a:07:90:
60:2b:73:e0:f2:ae:9c:9f:04:e0:47:be:19:c6:15:
07:04:52:32:8d:22:74:7d:0a:08:cb:db:be:49:fd:
b1:0d:e4:f6:59:4d:89:36:18:a4:f8:5e:1c:db:c4:
42:9b:91:16:26:be:ce:31:ab:68:dd:78:90:7e:03:
cd:a2:0f:82:f5:02:59:d7:d1:9d:75:f0:84:1d:3d:
be:6f:5d:c0:2f:e9:1d:c4:f1:89:e4:ca:0a:d9:1c:
3d:15:b8:14:db:80:4c:44:5b:1b:e5:91:e2:f6:55:
41:c6:03:1d:7c:30:de:18:a0:56:ea:5e:f2:b0:4d:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1B:3A:6E:48:94:98:4D:D0:F3:A6:E3:31:6F:04:90:EA:7E:19:DB
X509v3 Authority Key Identifier:
keyid:00:39:83:94:BC:11:6D:8D:01:BE:15:C0:8D:06:06:0E:F5:75:5D:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38302e302f32302d3234203d3e203238333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.94.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:4a:b5:d2:da:69:a4:32:bd:2f:bc:64:7c:97:d8:2c:23:0f:
2d:44:9c:5a:bb:03:a9:f2:fa:c8:7e:43:2b:e2:20:4d:32:0c:
74:1d:ce:86:51:df:c8:d3:52:66:3d:91:6c:ee:9a:da:20:1d:
2d:37:02:54:36:f1:9c:b0:28:ad:09:e2:b2:4e:1b:d4:87:7e:
44:70:a9:cb:6c:fe:5a:10:cd:1a:93:ae:f0:f6:09:68:a8:03:
ce:cb:9f:c0:3b:ce:e1:f5:bd:7b:5d:7a:4d:26:92:3c:d0:2c:
48:77:3f:18:e2:32:74:10:82:ab:84:e5:91:3d:96:35:b6:de:
9e:33:90:51:c1:c3:c1:14:0c:3b:13:23:bf:ab:65:91:d7:54:
e5:cd:cf:8b:2e:de:b6:38:a4:55:2b:75:5d:c9:21:93:66:09:
f7:ca:98:db:90:c9:b5:d7:5f:e0:1e:3b:10:07:ee:04:0e:f5:
1e:14:bc:98:4b:24:14:2c:ae:d3:85:fb:04:bd:a0:d6:64:17:
53:a3:6e:dd:d6:b1:28:55:d7:e8:ed:a3:b6:3b:70:06:23:62:
17:1d:59:f6:86:8a:40:ee:ad:fd:7d:a0:9a:a6:e0:ac:00:e9:
d8:27:3b:c7:ce:a6:dd:41:7d:91:3d:31:e3:60:21:11:f6:ea:
37:e5:63:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:02 2025 by rpki-client