Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa
File: 3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa (raw, json)
Hash identifier: qsmdYLqqE+QpqwIwlqhFUWeaadqymEYPxDfMA75+ank=
Subject key identifier: C4:C2:79:3D:A6:C5:56:15:98:75:CC:42:92:C5:21:CF:0E:61:CB:52
Certificate issuer: /CN=CD474EAA2CD8D52421F339174CBFE8D756A44685
Certificate serial: 2E9281B37EF2D7C4B4E18221CC239BF24EC87893
Authority key identifier: CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer
Subject info access: rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa
Signing time: Thu 27 Mar 2025 16:06:24 +0000
ROA not before: Thu 27 Mar 2025 16:01:24 +0000
ROA not after: Thu 26 Mar 2026 16:06:24 +0000
asID: 52999
IP address blocks: 186.216.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:92:81:b3:7e:f2:d7:c4:b4:e1:82:21:cc:23:9b:f2:4e:c8:78:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD474EAA2CD8D52421F339174CBFE8D756A44685
Validity
Not Before: Mar 27 16:01:24 2025 GMT
Not After : Mar 26 16:06:24 2026 GMT
Subject: CN=C4C2793DA6C556159875CC4292C521CF0E61CB52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:0c:78:10:f1:85:2a:fe:8e:2d:ce:ef:2b:
0f:22:77:21:c0:aa:57:93:85:49:f9:24:4a:8c:1a:
66:cc:18:73:74:51:0c:2f:1d:49:bf:aa:57:06:b3:
57:bb:8f:1b:a7:d3:e2:cb:67:ec:5b:b2:06:12:6d:
6f:3b:7b:04:24:d5:5b:aa:29:f2:e8:d5:22:4f:25:
76:8d:c3:08:90:ae:ed:11:8f:be:41:06:96:8c:9b:
6b:f0:84:e8:88:ea:28:27:7e:57:6b:3f:48:45:bd:
16:bf:a9:5e:c0:47:79:85:ca:b6:08:b5:bf:7a:15:
82:5a:42:8d:88:3b:5a:04:42:9c:2d:c9:4f:53:fc:
fc:a5:08:9c:fb:ab:0c:b4:99:fa:41:7b:a7:ed:17:
12:cd:1c:1f:b8:9a:ba:29:11:b3:38:ac:1f:c0:6e:
eb:06:df:2a:c5:50:5b:d1:9a:ce:c7:d7:72:52:19:
ef:3b:f6:a3:33:7c:ee:f7:ae:55:ac:87:e8:b9:ec:
64:a0:b3:6c:d8:41:95:f0:38:90:bc:f6:76:b6:da:
ee:7c:98:18:ab:74:65:03:ff:cf:1c:66:4f:92:92:
b1:b1:2b:92:1a:3f:5b:7f:94:98:b1:39:07:af:85:
d7:b9:e6:80:5a:27:34:99:c5:9e:73:ce:61:e7:81:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C2:79:3D:A6:C5:56:15:98:75:CC:42:92:C5:21:CF:0E:61:CB:52
X509v3 Authority Key Identifier:
keyid:CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.216.216.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:2b:26:05:57:07:db:1f:26:8b:93:b7:1f:de:2a:d4:de:7b:
cf:e2:3d:bb:d0:dd:c4:ae:53:0e:65:b9:b3:60:86:09:53:f2:
7e:76:bf:40:d1:24:38:98:64:07:58:63:39:2d:f9:7a:ef:13:
fb:34:d3:b3:73:34:b0:d9:9b:d5:54:d5:7e:90:1f:29:cb:13:
83:a4:ab:e5:b0:6f:2d:26:57:89:f5:67:3a:c9:3b:02:f4:17:
ef:56:cc:a5:51:4f:75:bb:01:9b:fd:47:02:f1:0c:96:d2:53:
0f:7e:f6:af:9b:fb:c2:db:5c:aa:5b:13:95:41:0c:64:9f:6a:
68:a3:f4:30:26:53:6b:dc:cc:fb:ae:0d:a2:f5:31:ab:ee:7e:
8b:b6:97:82:8b:18:25:b8:1f:e0:90:2a:9e:15:38:7f:a1:c8:
70:92:1a:9f:49:3d:31:2a:ab:32:26:4e:12:d0:b9:dd:71:17:
8f:1e:85:71:7d:94:59:f6:15:b9:7b:a6:25:53:29:30:c1:18:
fa:56:a9:4a:6f:b8:28:b1:d6:42:8e:51:94:df:f4:b9:4d:4f:
b3:29:54:15:8c:de:e8:31:04:fc:a2:07:d6:c4:cb:6b:cd:9d:
e5:c4:63:a8:8e:e4:00:0f:80:c3:7e:71:9a:62:a6:f5:f9:b2:
ca:25:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:59:53 2025 by rpki-client