Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3232362e39362e302f32302d3234203d3e203532393939.roa
File: 3138362e3232362e39362e302f32302d3234203d3e203532393939.roa (raw, json)
Hash identifier: QqKI63mBNvlFpuiZObn3plPHeWhdbsqcXsxnU2fT8Jw=
Subject key identifier: 22:8E:5D:2D:D0:4C:5B:A2:D2:24:05:43:49:ED:0F:B5:66:F9:ED:8B
Certificate issuer: /CN=CD474EAA2CD8D52421F339174CBFE8D756A44685
Certificate serial: 3B3FFF4F6F6CF18959A4ED0EA42286CD4295342C
Authority key identifier: CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer
Subject info access: rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3232362e39362e302f32302d3234203d3e203532393939.roa
Signing time: Thu 27 Mar 2025 16:06:24 +0000
ROA not before: Thu 27 Mar 2025 16:01:24 +0000
ROA not after: Thu 26 Mar 2026 16:06:24 +0000
asID: 52999
IP address blocks: 186.226.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:3f:ff:4f:6f:6c:f1:89:59:a4:ed:0e:a4:22:86:cd:42:95:34:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD474EAA2CD8D52421F339174CBFE8D756A44685
Validity
Not Before: Mar 27 16:01:24 2025 GMT
Not After : Mar 26 16:06:24 2026 GMT
Subject: CN=228E5D2DD04C5BA2D224054349ED0FB566F9ED8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:75:00:df:48:1d:73:ed:04:80:eb:45:0a:
d3:7d:41:6c:27:32:6f:07:26:9c:55:ec:9d:04:a6:
f9:91:41:37:b5:f2:7f:70:3e:ed:dd:3b:6d:23:0f:
23:b0:7c:d6:b2:ba:ab:bb:d4:bc:34:d6:f2:2f:03:
7d:fd:f8:39:73:a5:31:bc:04:5d:6e:4b:1e:66:10:
6f:c9:d3:e2:e6:8e:3b:5a:23:11:26:5d:0c:39:a1:
b2:92:5f:f8:ad:16:18:7b:09:b5:64:82:e2:7b:e6:
6d:57:69:ce:f2:06:9f:22:4b:88:a7:c3:39:12:99:
85:e4:5b:73:19:fc:53:87:55:e5:4e:90:2c:54:74:
c4:f6:c0:78:1d:fe:83:02:cb:db:29:b2:03:06:e9:
88:d7:10:79:bf:2c:64:cb:77:8f:d0:27:ff:49:6b:
50:5f:2e:86:b9:08:de:4d:3d:94:46:2b:25:99:63:
bf:7f:e2:e3:48:10:9a:c8:9a:e7:37:d1:60:63:58:
88:f8:2e:1e:47:c8:cf:d4:68:d7:f9:42:ce:63:2d:
1f:97:ea:be:b6:e0:8c:5a:36:e2:46:48:89:02:d0:
84:5f:6b:57:b9:bc:7c:33:9f:3b:2d:a9:3d:06:93:
d0:cb:26:68:46:a1:82:42:cf:85:39:e1:aa:f0:ca:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8E:5D:2D:D0:4C:5B:A2:D2:24:05:43:49:ED:0F:B5:66:F9:ED:8B
X509v3 Authority Key Identifier:
keyid:CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3232362e39362e302f32302d3234203d3e203532393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.226.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:14:cb:c4:94:9c:b8:87:86:20:84:d9:aa:bc:e1:ba:83:57:
04:ee:22:d7:95:8a:d4:35:3f:6f:85:fb:9b:9e:07:89:72:a4:
34:ad:90:93:c4:70:f0:6e:c6:ce:18:a3:d2:7f:10:23:f1:fd:
ae:01:2e:48:f5:09:47:88:a9:c0:e7:1f:c3:3d:a9:dc:1f:2d:
ad:b5:89:13:72:1c:b9:6b:f8:f0:63:ad:f1:31:6a:22:49:47:
02:22:af:36:71:84:f0:fc:40:38:57:34:b8:d4:ac:95:ee:8b:
7c:3b:a1:b2:24:56:db:13:56:cc:89:fd:d7:0c:d0:d2:ae:05:
3f:e9:c0:8c:99:ce:6d:06:d4:e6:67:2d:14:15:bc:e5:35:03:
61:7a:15:48:80:c6:68:94:c7:10:7f:7f:98:2d:81:5b:5e:8c:
77:53:cc:cf:f5:cd:96:6a:1f:07:4f:2f:f3:11:d5:bc:22:22:
c5:37:13:e0:95:ea:bb:6f:56:17:43:ee:cb:ad:a0:36:fb:ba:
47:a1:89:f9:74:dd:e8:6e:46:88:52:82:aa:c8:30:1d:ff:63:
30:7f:e1:b2:71:6d:e5:e4:43:b6:4e:dd:6b:34:23:c6:90:d9:
e3:d5:65:ec:ae:84:52:5a:18:1c:d0:a2:92:a9:dc:b3:01:b9:
dd:81:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:15:41 2025 by rpki-client