Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35382e302f32332d3233203d3e20323633333437.roa
File: 3139312e33372e35382e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier: 6fnZWysbjaqm6LjsfJza2RCSUT8Zo2hnkWZr8clrcTA=
Subject key identifier: D1:6C:64:ED:E9:E6:64:35:CF:3A:99:EA:B6:1E:F3:C0:20:DD:82:03
Certificate issuer: /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial: 5A0473FD16CFFF6834A0791B603EC1F032A439E8
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35382e302f32332d3233203d3e20323633333437.roa
Signing time: Thu 06 Mar 2025 18:28:46 +0000
ROA not before: Thu 06 Mar 2025 18:23:46 +0000
ROA not after: Thu 05 Mar 2026 18:28:46 +0000
asID: 263347
IP address blocks: 191.37.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:04:73:fd:16:cf:ff:68:34:a0:79:1b:60:3e:c1:f0:32:a4:39:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Validity
Not Before: Mar 6 18:23:46 2025 GMT
Not After : Mar 5 18:28:46 2026 GMT
Subject: CN=D16C64EDE9E66435CF3A99EAB61EF3C020DD8203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:a0:ed:54:92:fe:34:b4:a0:e1:00:7b:6d:
22:79:45:86:92:6e:f2:1c:d9:72:69:bb:19:27:73:
02:f6:8b:63:a8:a8:4b:9a:0b:d6:1e:7b:df:2a:1b:
13:47:42:b1:1f:d0:e4:91:68:b9:06:a1:97:17:d2:
47:47:00:36:f5:82:2e:ef:03:63:ca:30:ab:18:51:
07:cf:a7:43:18:d3:0d:fb:a0:80:21:42:46:c6:1d:
b0:1c:56:cd:7c:08:d9:53:61:28:a9:93:74:42:75:
8b:12:72:32:f1:c0:f3:ba:f7:b2:1e:4b:ed:b1:5a:
51:85:00:92:e6:1f:ec:f1:6c:1e:07:31:77:db:6e:
f4:11:3c:10:ce:df:98:db:74:e0:14:ce:10:6c:f5:
a5:06:91:5f:5c:a3:e6:55:d5:21:78:01:60:65:7f:
a0:b6:53:b2:3a:e8:29:4c:7a:ea:57:d8:42:8e:ba:
c6:48:2b:be:3d:39:91:eb:38:e9:9e:d8:73:b7:40:
2b:c8:c5:0f:45:23:64:b8:c5:6c:83:ba:46:5e:3b:
49:91:88:67:d0:7d:e7:fb:7b:b9:74:4d:2a:10:4a:
49:a2:e9:79:0e:9c:4f:1d:02:19:e6:da:07:b5:d1:
76:bc:4b:96:ad:60:04:f4:8b:e7:da:a1:bd:a0:be:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6C:64:ED:E9:E6:64:35:CF:3A:99:EA:B6:1E:F3:C0:20:DD:82:03
X509v3 Authority Key Identifier:
keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35382e302f32332d3233203d3e20323633333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.58.0/23
Signature Algorithm: sha256WithRSAEncryption
16:c9:04:50:9b:b0:66:3d:35:dd:12:6d:f8:d7:04:ba:d3:5f:
06:f1:7a:44:f1:60:80:09:cf:b4:f4:33:88:0e:b8:01:b9:aa:
13:c9:98:75:9c:f7:90:18:43:5d:0e:58:c9:85:76:ee:7c:ba:
71:f5:7c:13:36:c5:cd:3b:d0:38:df:7f:be:8b:9a:e0:d8:ac:
a4:f5:9c:60:ca:fa:f4:45:97:2d:5e:ab:10:79:6f:5b:f7:2c:
23:5e:f6:42:a7:f9:4c:7c:37:28:c5:a5:c8:0e:2e:a8:73:0d:
39:69:88:05:34:df:f2:8f:0a:e5:18:3e:e8:17:76:45:85:ee:
06:e8:bd:58:51:45:5e:b7:b0:00:24:54:59:de:1a:7a:d5:f8:
f4:09:26:5f:f8:8f:8d:8b:3a:3f:c3:30:41:61:c8:6c:ef:90:
6b:dd:e3:37:b2:0c:4c:be:86:a2:d7:ac:29:e3:8b:b2:14:d9:
b1:eb:00:c6:46:8d:4a:56:ae:c8:db:10:ed:46:56:07:ed:36:
e4:9f:5d:e1:6a:31:88:5e:c1:d9:bc:d9:40:95:fc:80:2a:50:
a4:c0:98:93:c6:24:d2:67:b6:1e:64:08:5f:6f:0e:8c:0b:6a:
d7:ef:a5:72:4f:73:e3:6d:ee:85:cb:92:4d:25:11:58:2f:da:
c6:11:50:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:31:33 2025 by rpki-client