Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/3138372e302e3136302e302f32322d3234203d3e203238323430.roa
File: 3138372e302e3136302e302f32322d3234203d3e203238323430.roa (raw, json)
Hash identifier: hvzfOcqQzNF6q5nzEveklNItt0nwBstYivgFnvG6skQ=
Subject key identifier: 56:6C:79:D2:A0:A7:76:F0:AA:FA:87:C5:D5:AD:76:67:4B:2F:0A:8E
Certificate issuer: /CN=5B97AFF236F65B7267ED145B798C19E124850546
Certificate serial: 497CF15DD8A60A5BEE0652757D3248D1DFC3B5CB
Authority key identifier: 5B:97:AF:F2:36:F6:5B:72:67:ED:14:5B:79:8C:19:E1:24:85:05:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97AFF236F65B7267ED145B798C19E124850546.cer
Subject info access: rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/3138372e302e3136302e302f32322d3234203d3e203238323430.roa
Signing time: Thu 06 Mar 2025 09:06:03 +0000
ROA not before: Thu 06 Mar 2025 09:01:03 +0000
ROA not after: Thu 05 Mar 2026 09:06:03 +0000
asID: 28240
IP address blocks: 187.0.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7c:f1:5d:d8:a6:0a:5b:ee:06:52:75:7d:32:48:d1:df:c3:b5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B97AFF236F65B7267ED145B798C19E124850546
Validity
Not Before: Mar 6 09:01:03 2025 GMT
Not After : Mar 5 09:06:03 2026 GMT
Subject: CN=566C79D2A0A776F0AAFA87C5D5AD76674B2F0A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:e2:4e:0c:3e:90:f3:57:d5:7a:22:b8:f5:
3b:c1:da:d8:a7:5c:38:f5:34:b6:c4:1d:8a:29:38:
6f:08:d5:4f:10:57:64:8c:d8:5f:7b:9e:c7:cb:02:
0e:79:05:78:5e:2c:f8:7d:e9:4d:79:d4:f2:4d:2a:
8b:ee:eb:87:9c:66:b6:b2:1e:26:b9:d1:99:0c:25:
b8:5c:67:83:1f:4d:af:41:f4:f6:df:88:b8:72:34:
3a:e5:c7:b7:a4:b5:c6:e9:21:18:db:4c:9d:d4:01:
ac:d2:d3:95:85:72:86:d5:93:6f:57:c9:aa:eb:57:
da:85:06:c1:89:b0:d5:88:d1:9a:b0:29:d5:f2:30:
1b:d9:d0:93:f9:d5:57:bc:e4:e3:67:1c:a9:3a:7e:
fb:69:b5:d7:4d:24:b8:63:05:34:a1:22:b7:66:c3:
dc:5f:b1:00:d7:74:e0:c7:65:35:93:0a:4a:3b:ba:
ae:dd:13:73:36:8d:9c:1e:c6:67:93:48:4a:64:14:
cf:66:f7:57:38:d1:9b:7c:7d:6d:d5:c6:2e:77:15:
39:12:3a:00:74:cd:16:c5:bc:1f:22:4e:b9:97:11:
e1:e3:8b:0c:db:90:d8:f5:61:ec:d5:9a:a3:ff:7b:
04:22:31:f3:dc:84:28:9a:e9:6d:f1:c1:df:77:ff:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6C:79:D2:A0:A7:76:F0:AA:FA:87:C5:D5:AD:76:67:4B:2F:0A:8E
X509v3 Authority Key Identifier:
keyid:5B:97:AF:F2:36:F6:5B:72:67:ED:14:5B:79:8C:19:E1:24:85:05:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/5B97AFF236F65B7267ED145B798C19E124850546.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97AFF236F65B7267ED145B798C19E124850546.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/3138372e302e3136302e302f32322d3234203d3e203238323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.160.0/22
Signature Algorithm: sha256WithRSAEncryption
57:9e:03:a8:b3:34:3f:66:c7:9d:bc:47:e5:6f:9a:0c:af:e1:
05:08:d4:df:bd:00:a3:c0:38:76:5c:79:fd:db:f0:20:2d:ee:
2a:9e:95:ab:f8:fe:1e:72:ea:6d:50:fb:45:68:78:79:09:27:
9e:aa:ac:dd:55:97:b2:fd:85:be:3a:e3:b7:23:98:e8:e2:c8:
61:a3:6f:a7:9f:98:65:6f:e3:fc:bc:41:90:23:44:de:98:ca:
96:fb:35:48:cb:3a:e3:9f:89:e0:55:72:10:6c:dd:3f:40:04:
10:9a:51:97:01:7d:d0:32:a3:0f:4e:5b:a1:54:8c:e6:f1:ec:
e0:11:31:09:f6:f1:bd:34:cf:77:29:a5:e9:9d:94:5f:37:3b:
1e:fb:45:29:db:dd:74:ba:de:1f:21:1c:58:23:f1:5a:1a:9d:
8a:a2:66:f5:aa:00:2d:65:ba:08:2b:29:e4:f7:cb:45:6e:38:
30:a9:0a:58:d2:5e:41:92:86:0f:cf:c4:4a:16:e9:df:fd:e2:
2c:36:76:87:0c:61:13:ba:b2:43:3f:6d:8f:8a:89:25:f0:23:
43:dc:69:6d:03:03:40:d1:31:10:d2:c6:1c:0c:20:eb:31:9a:
4e:b0:64:bc:6c:74:2c:da:f2:9d:2d:c2:8a:be:85:bb:bd:4a:
91:6e:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:41:54 2025 by rpki-client