Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e38382e302f32342d3234203d3e203238323130.roa
File: 3139312e3234332e38382e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: QrL/P9iWJIwW4xoK6AJ2zlW0wnxFMWZz9qfX3NpQGuA=
Subject key identifier: BA:62:9D:95:18:A2:C2:19:DA:78:DE:41:76:12:90:01:57:61:3C:5F
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 7EC43DCE8F57A101202C3BC2C2F8BA007844DC0C
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e38382e302f32342d3234203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:09 +0000
ROA not before: Thu 06 Mar 2025 04:37:09 +0000
ROA not after: Thu 05 Mar 2026 04:42:09 +0000
asID: 28210
IP address blocks: 191.243.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c4:3d:ce:8f:57:a1:01:20:2c:3b:c2:c2:f8:ba:00:78:44:dc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:09 2025 GMT
Not After : Mar 5 04:42:09 2026 GMT
Subject: CN=BA629D9518A2C219DA78DE417612900157613C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:f3:32:d6:08:58:a1:7a:d9:39:3a:9b:f6:
a6:a2:3f:d2:a8:c7:bb:8b:49:19:6a:15:8a:35:17:
10:96:7f:87:6f:92:e3:e9:8a:49:4a:76:1a:11:2f:
73:1d:30:48:b0:5e:f7:9e:a7:05:9e:8a:ed:b1:0e:
90:07:99:81:fe:8b:41:de:5e:11:0b:9f:eb:8e:25:
a6:07:1f:35:aa:83:b4:34:71:5e:6b:ba:ac:fb:ba:
88:44:93:0c:a4:f7:6d:b8:23:74:ce:4a:a6:bb:13:
4b:81:2d:fd:ae:b7:5d:36:c3:8d:60:47:ce:ff:a3:
41:cf:d9:ba:1d:5c:34:a1:9e:13:89:22:11:37:b6:
c8:a6:87:df:43:f5:c2:c5:cd:e5:3b:5d:e6:27:e8:
f9:bf:10:0d:28:40:34:6d:b0:67:2f:38:4e:6c:66:
c3:c5:0d:de:b7:40:21:87:36:e0:3f:e5:66:e6:74:
eb:b0:cf:8e:ca:4a:f3:08:87:63:25:37:2e:3f:4d:
20:a3:f5:1e:c7:71:7f:67:ca:66:49:a1:c9:e8:e7:
9d:cf:ee:9a:99:f7:08:4f:8c:a7:c0:be:f0:b1:ea:
0e:63:92:be:91:86:14:6d:e9:f0:98:87:16:2a:db:
5b:b5:fa:90:f7:1a:dd:ad:46:3e:51:9a:86:2b:75:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:62:9D:95:18:A2:C2:19:DA:78:DE:41:76:12:90:01:57:61:3C:5F
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e38382e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.88.0/24
Signature Algorithm: sha256WithRSAEncryption
da:3c:1a:ea:d6:68:55:9c:17:03:a4:a6:3a:c7:ab:3a:a0:76:
12:bd:a5:b6:e6:5f:1a:52:a0:f2:58:c0:19:51:f8:d1:22:ad:
24:34:f7:2a:0b:e7:07:60:3f:07:96:1f:10:eb:c0:9e:09:d7:
56:47:b2:58:ce:e0:d9:aa:d5:79:cc:db:bd:de:e2:14:b2:ba:
7f:ed:da:05:ef:55:fb:07:52:9a:d8:5f:1f:96:f4:b2:51:4f:
ab:14:c6:46:16:be:88:9e:e8:c8:5b:56:e4:56:dd:04:46:88:
fc:09:d1:f3:7c:39:b5:bc:f8:6f:f0:7b:27:b7:86:23:bb:c7:
61:4d:eb:bc:56:50:50:f7:a8:f2:44:24:b4:78:8e:84:1d:51:
f9:1e:1b:1e:30:3a:15:d0:eb:16:50:aa:00:da:17:7b:a0:ed:
fd:79:c4:1c:bb:e4:ce:82:4e:c4:ae:e6:4d:9a:72:24:bf:eb:
b1:47:94:2c:fe:f0:f9:ba:c7:23:e8:63:d6:2f:bc:81:bb:4b:
08:ea:b3:36:12:36:0e:18:ee:da:f5:5d:a6:be:9d:72:06:45:
a0:48:ac:cf:12:c2:67:68:a3:e2:dc:fa:2f:5a:d3:33:bb:0a:
b9:21:6a:66:83:e9:53:1b:9a:a7:1f:2e:b9:63:74:07:d3:c8:
09:f7:72:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:50:14 2025 by rpki-client