Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3133382e302f32342d3332203d3e203232333831.roa
File: 3230312e38372e3133382e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier: qdjso0aFQ19VCrg8pZN3CZqPdGQejvvCD41G8cSu1Wo=
Subject key identifier: 33:21:A3:60:F3:E9:0A:57:8C:7E:FB:56:B7:F2:75:16:7F:58:2F:D0
Certificate issuer: /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial: 2C88530CBE737F5CE09770A106A9CC5B7AC99CF6
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3133382e302f32342d3332203d3e203232333831.roa
Signing time: Fri 07 Mar 2025 19:06:26 +0000
ROA not before: Fri 07 Mar 2025 19:01:26 +0000
ROA not after: Fri 06 Mar 2026 19:06:26 +0000
asID: 22381
IP address blocks: 201.87.138.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:88:53:0c:be:73:7f:5c:e0:97:70:a1:06:a9:cc:5b:7a:c9:9c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Validity
Not Before: Mar 7 19:01:26 2025 GMT
Not After : Mar 6 19:06:26 2026 GMT
Subject: CN=3321A360F3E90A578C7EFB56B7F275167F582FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:c9:10:49:b9:0a:e6:c8:3e:7c:dd:9a:1a:
ab:0d:7a:de:ec:69:54:8e:2c:d5:e1:72:79:cf:78:
02:dd:b2:f6:b6:35:b8:66:47:6c:88:89:8d:45:1a:
c0:12:11:c5:65:43:63:86:10:46:1a:1e:95:a7:70:
fc:fd:93:fd:64:7c:61:91:b0:c4:34:30:f9:14:f9:
eb:7b:a5:13:7f:75:97:81:73:15:ca:60:bd:e6:2a:
78:66:72:a7:80:ca:68:91:6b:90:65:48:75:96:d3:
ee:e6:cd:89:63:35:aa:1b:b1:07:9d:d6:42:39:d2:
51:11:b2:5a:1c:a7:99:c2:30:c0:96:67:4f:e4:d2:
db:dd:da:82:89:4a:e2:42:82:11:0e:88:f0:e7:7d:
39:4f:8e:4a:b7:40:0a:c7:2e:12:b8:68:d3:8f:17:
f0:26:a2:87:7d:13:75:0c:e4:c2:da:5e:ce:e2:b7:
a7:21:1f:f9:48:12:33:74:78:3e:b6:23:7f:d9:e9:
5d:57:70:3c:db:8d:63:ac:97:aa:ca:0c:06:b1:40:
66:f4:e5:85:bc:5b:4c:f0:ef:80:be:02:4f:0c:42:
4e:05:96:54:44:a5:64:9f:6c:6c:2d:9e:0a:de:f4:
47:0a:e1:1c:35:d0:bc:39:95:f9:aa:cc:2f:63:5d:
b3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:A3:60:F3:E9:0A:57:8C:7E:FB:56:B7:F2:75:16:7F:58:2F:D0
X509v3 Authority Key Identifier:
keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3133382e302f32342d3332203d3e203232333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.87.138.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7f:34:6c:65:0d:9c:9a:15:89:5a:15:ef:25:90:18:56:3e:
96:73:83:e1:1c:1a:ad:f5:02:5a:91:e1:f6:44:5a:d1:28:01:
7c:7a:7b:e6:06:ca:7c:05:48:f4:18:ce:2b:3d:67:77:3b:39:
aa:bb:e1:7e:0f:45:64:97:a7:17:3c:a6:a0:9b:cd:3c:f7:d1:
48:db:94:d0:56:8d:c1:52:ca:2c:6a:07:57:39:d8:f8:1d:86:
b0:3a:92:7c:35:08:42:26:fc:fd:be:2c:3c:32:d5:06:cc:bc:
33:ed:3a:f2:a1:aa:c0:75:8c:59:1f:20:16:92:4e:62:c7:9d:
d2:42:24:42:9a:59:50:29:2c:de:04:80:0d:a6:c1:4c:63:24:
32:02:ad:cf:af:60:be:62:8f:f7:74:c9:5d:55:b2:1c:2c:00:
d4:1d:59:65:dc:22:9f:df:1a:40:63:a5:42:50:29:fa:c5:eb:
2d:c3:e5:2c:b2:df:ad:6d:31:8f:43:53:cf:cd:5f:c7:11:0a:
8b:70:95:51:b2:80:be:19:4b:76:fa:16:3e:69:01:40:9a:c6:
9c:b8:69:3d:23:c9:53:ff:2e:21:f7:01:ec:98:0d:a0:a9:61:
36:1e:db:f8:92:9d:b6:ca:6e:9a:d7:f9:1b:e3:14:51:b5:9a:
d5:6b:83:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:43:21 2025 by rpki-client