Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230302e302f32342d3234203d3e20323633353132.roa
File: 3139312e3234332e3230302e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier: wirVWkbTclGpM03555CJPhZE5JHLoM0hS5eNbF3hy/I=
Subject key identifier: CD:09:E8:64:A6:75:FC:AF:16:AF:44:45:B8:3C:70:ED:DA:10:CF:84
Certificate issuer: /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial: 14A177BB19D3AC809EB964285EEB0C9AF26081AB
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230302e302f32342d3234203d3e20323633353132.roa
Signing time: Wed 05 Mar 2025 19:00:05 +0000
ROA not before: Wed 05 Mar 2025 18:55:05 +0000
ROA not after: Wed 04 Mar 2026 19:00:05 +0000
asID: 263512
IP address blocks: 191.243.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a1:77:bb:19:d3:ac:80:9e:b9:64:28:5e:eb:0c:9a:f2:60:81:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Validity
Not Before: Mar 5 18:55:05 2025 GMT
Not After : Mar 4 19:00:05 2026 GMT
Subject: CN=CD09E864A675FCAF16AF4445B83C70EDDA10CF84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:b9:1b:08:e7:eb:d4:29:2b:bb:e1:4e:a7:
a3:8e:22:1f:9d:24:dc:80:0d:68:41:14:48:a3:33:
bc:4b:69:79:4a:0c:84:3c:bd:2c:50:81:b1:6f:bd:
88:9f:3d:66:d4:75:ef:02:28:99:66:0c:ce:ef:21:
a0:4b:39:b8:5b:72:74:bf:c0:84:41:18:fd:4c:24:
82:e6:3c:37:1b:b5:bb:2a:ea:0f:1f:fd:ba:2b:82:
4c:0e:74:01:72:8b:af:dd:1b:5b:8d:ed:ef:fa:05:
59:63:6b:12:9a:92:35:50:87:c6:d1:95:c0:70:7a:
7b:40:a0:f0:10:39:bd:0f:a7:e1:7e:f5:90:f0:66:
23:db:3a:fa:74:6b:84:05:4f:d0:c5:05:c3:57:3b:
17:00:e1:70:4c:50:5b:43:35:74:5e:65:83:91:a8:
02:43:74:fd:44:9d:8b:29:ff:f5:bd:aa:32:87:08:
25:32:4a:4b:cd:50:cc:60:10:6a:a4:22:36:d7:13:
0a:55:52:9a:9c:53:0c:13:b1:c0:14:ca:8f:a5:93:
83:da:28:a6:c8:c1:63:d5:48:b6:00:d0:5f:f1:e5:
48:78:f2:f6:14:65:80:77:45:a1:37:4c:ad:b7:db:
91:c9:0d:44:28:21:60:65:b2:13:d8:9e:ba:7d:c8:
51:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:09:E8:64:A6:75:FC:AF:16:AF:44:45:B8:3C:70:ED:DA:10:CF:84
X509v3 Authority Key Identifier:
keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230302e302f32342d3234203d3e20323633353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.200.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4f:f0:5f:62:70:82:a5:65:4d:6c:1f:ce:57:f9:44:3a:a9:
eb:c6:85:dc:d7:3a:6b:0a:c5:1b:61:10:dd:37:c4:0f:67:b2:
c5:62:0e:55:69:6b:54:f1:29:91:e0:12:b9:2b:46:1c:bf:39:
80:db:77:7d:8a:35:fd:e0:24:a1:dd:37:82:aa:f4:13:59:2a:
dd:14:4f:2f:bc:6a:60:79:5b:d2:40:62:14:06:ed:c8:40:86:
80:1d:5f:d1:f5:3e:7c:fc:1c:20:63:a1:71:41:7e:a5:ba:22:
e6:cb:d2:6d:8d:0b:37:87:05:6e:25:7b:c7:04:7c:f6:59:04:
a9:4c:45:d4:66:44:45:8c:1c:82:4c:b8:45:13:e5:c9:c6:c7:
c7:87:66:3e:fb:17:6b:5b:74:ac:c3:09:a7:40:bc:37:fc:82:
74:22:11:17:d6:8f:50:67:b0:59:f7:e0:b7:83:f6:23:2c:49:
03:1a:f1:a4:41:e0:5a:26:48:e0:ff:51:c4:97:d3:28:e1:fa:
89:85:e9:b8:6d:09:d5:ff:c0:25:c4:06:1e:da:a5:12:7b:93:
b2:a3:be:08:45:58:19:97:c9:58:0d:48:9f:2a:3a:df:ea:f0:
18:b8:e6:2f:75:e8:4f:14:0b:fb:09:5c:84:7c:6b:1e:f5:af:
96:8e:66:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:43:51 2025 by rpki-client