Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3139312e352e37312e302f32342d3234203d3e203631393031.roa
File: 3139312e352e37312e302f32342d3234203d3e203631393031.roa (raw, json)
Hash identifier: RAXQXEpUtTQmLd0C5JGvL8C3AqxlW0I6h49fNKUPJts=
Subject key identifier: C0:70:46:29:16:88:DD:15:8B:A1:3F:05:98:56:26:AC:A9:93:59:2E
Certificate issuer: /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial: 23EF70B51EE63E348C2434334EB40AC7D19F6CC8
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3139312e352e37312e302f32342d3234203d3e203631393031.roa
Signing time: Thu 06 Mar 2025 17:33:27 +0000
ROA not before: Thu 06 Mar 2025 17:28:27 +0000
ROA not after: Thu 05 Mar 2026 17:33:27 +0000
asID: 61901
IP address blocks: 191.5.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ef:70:b5:1e:e6:3e:34:8c:24:34:33:4e:b4:0a:c7:d1:9f:6c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
Validity
Not Before: Mar 6 17:28:27 2025 GMT
Not After : Mar 5 17:33:27 2026 GMT
Subject: CN=C07046291688DD158BA13F05985626ACA993592E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:0b:21:a8:5f:05:76:62:88:52:d7:20:b1:
93:14:f2:7f:f5:84:0a:f4:2f:af:75:ec:4b:2d:83:
c7:39:22:dc:56:df:f5:35:71:39:d8:c9:97:e4:44:
02:4a:90:29:60:bf:a1:f2:62:cf:d5:01:b0:71:29:
36:1f:8a:41:6c:ea:82:fd:86:f1:24:d1:55:0c:9c:
e9:a3:e7:1c:72:48:ed:d0:80:b3:a4:e4:57:da:f5:
40:f5:42:2f:eb:e3:07:96:5e:00:ec:69:08:09:16:
75:8a:f9:0e:f7:3a:ff:c9:6b:c7:02:58:f6:b1:f6:
df:99:a5:4d:d3:c8:7c:fc:46:80:33:01:57:48:69:
b1:49:56:2f:71:f1:14:9f:bb:eb:d6:70:a5:23:86:
a2:db:c0:19:81:28:46:5c:44:96:1f:ef:ea:8c:53:
bd:a8:cf:e9:5f:bc:12:16:57:b8:08:31:11:82:a8:
70:46:56:7d:4a:d7:05:a9:83:e8:aa:97:00:23:02:
8b:f0:68:43:0b:dd:9a:8d:25:55:17:ec:3d:2c:55:
e0:c3:66:3a:16:67:86:b3:c0:e3:38:7b:4d:49:f2:
5f:b8:66:22:7b:92:59:68:c9:a0:6b:08:ec:6a:25:
b4:b3:24:d8:ac:f8:73:d3:47:e2:c3:c8:00:c9:70:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:46:29:16:88:DD:15:8B:A1:3F:05:98:56:26:AC:A9:93:59:2E
X509v3 Authority Key Identifier:
keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3139312e352e37312e302f32342d3234203d3e203631393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.5.71.0/24
Signature Algorithm: sha256WithRSAEncryption
77:82:6f:23:0d:7d:02:c1:c3:04:c9:6a:3a:f1:50:54:8a:7e:
31:b2:57:c3:d4:a6:29:63:5e:d1:84:cc:9a:4e:3a:c2:b8:fa:
fa:e2:4a:ef:6c:31:09:21:4f:17:58:ed:d5:57:d6:d4:82:42:
e0:67:bc:c8:88:d0:62:01:bd:cb:37:70:32:c2:08:52:ca:6d:
7b:1b:a6:1a:43:9e:3b:14:d0:c6:4a:a0:bd:8d:35:4a:65:dc:
db:ad:b7:a0:ad:a5:61:ab:9a:b1:32:c5:3c:28:ce:67:f8:f1:
c5:e2:03:0f:f5:79:2a:59:26:84:75:7f:44:39:ed:2f:9f:8b:
a3:6c:e4:26:b9:16:2b:27:1d:a0:c6:9c:52:92:e0:fd:5d:8e:
46:d0:7b:2a:45:cc:6d:bc:9a:16:39:ef:1e:ca:3d:b9:08:ae:
fd:4e:47:11:9d:b8:1f:08:fd:2d:a0:63:06:23:e3:ae:62:39:
40:c5:92:a8:a2:7e:38:4a:a0:9e:fb:8d:6f:9a:3c:c4:ca:82:
eb:53:04:07:fd:8c:0c:e4:56:27:cd:d4:26:21:a2:b6:66:af:
4e:66:da:ac:c8:c0:89:33:1e:8c:cf:8b:fc:f5:cc:35:df:5e:
8f:cc:78:40:bb:a3:c9:aa:24:81:ad:aa:53:6c:c6:83:de:04:
dc:ff:95:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:02 2025 by rpki-client