Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32322d3232203d3e203631363339.roa
File: 3133312e3130302e3135322e302f32322d3232203d3e203631363339.roa (raw, json)
Hash identifier: VVcF7OVzUQIA6kB6GmccF5z3geFwA1dCMAb6ZJeWa/E=
Subject key identifier: 96:A9:23:56:26:BF:C3:9D:D2:2A:9B:B5:95:E5:C5:DF:5C:6B:75:7A
Certificate issuer: /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial: 6650F07EFB0C297E8C5BEF72BC0E0D84DB729614
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32322d3232203d3e203631363339.roa
Signing time: Wed 05 Mar 2025 19:00:21 +0000
ROA not before: Wed 05 Mar 2025 18:55:21 +0000
ROA not after: Wed 04 Mar 2026 19:00:21 +0000
asID: 61639
IP address blocks: 131.100.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:50:f0:7e:fb:0c:29:7e:8c:5b:ef:72:bc:0e:0d:84:db:72:96:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Validity
Not Before: Mar 5 18:55:21 2025 GMT
Not After : Mar 4 19:00:21 2026 GMT
Subject: CN=96A9235626BFC39DD22A9BB595E5C5DF5C6B757A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:a2:55:a1:00:11:fb:b8:71:3c:54:a4:13:
86:83:df:58:49:52:28:12:1d:0d:29:fe:2e:2e:bd:
b6:5d:72:c7:8d:10:50:ad:e0:c0:50:48:4b:c9:0d:
12:ce:e4:d5:54:c9:35:42:5e:26:43:f5:f4:80:74:
dc:bb:22:5c:11:ee:97:16:87:c7:eb:04:bc:34:bc:
36:0e:23:85:2e:d4:87:b1:58:44:97:49:e6:78:1d:
c9:3b:5e:1a:69:66:93:b2:3e:aa:2c:89:26:a9:21:
e7:05:16:45:e2:67:da:12:ae:52:61:d8:38:14:0c:
a6:17:af:4e:2a:47:26:36:2e:d3:56:4b:26:4c:5f:
93:44:1a:78:47:5a:81:49:4f:9e:1c:d6:3f:13:aa:
e8:9c:42:a9:71:78:94:ed:41:81:0f:0a:f5:33:80:
89:9a:c2:99:eb:b2:cf:70:22:c9:2d:38:36:b2:b3:
64:74:2b:32:b5:7e:24:90:e3:b7:e8:9e:a7:88:dd:
b7:f2:c7:4d:8d:de:90:2c:9d:70:9e:21:95:d5:4b:
0a:ef:b2:85:f6:b8:ac:2f:b1:e5:d1:f0:15:e6:99:
73:a6:ad:d3:27:3d:c5:29:7a:e7:f2:39:33:a6:3e:
6a:fb:23:6d:15:5c:14:9f:07:e6:05:79:a3:46:7b:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A9:23:56:26:BF:C3:9D:D2:2A:9B:B5:95:E5:C5:DF:5C:6B:75:7A
X509v3 Authority Key Identifier:
keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32322d3232203d3e203631363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.152.0/22
Signature Algorithm: sha256WithRSAEncryption
75:60:5f:58:81:49:52:f8:41:e9:6e:f5:28:41:7e:c5:7f:da:
ea:6c:9e:18:fe:56:57:59:6f:a6:bd:d4:fa:0a:8d:6b:50:99:
d9:a1:63:1f:c7:e7:f4:2a:07:ca:73:cd:1b:6c:93:cf:0e:5c:
06:c6:8f:4b:0e:ae:c0:a5:2c:a2:55:1c:ad:3e:de:46:d1:6e:
99:64:d0:73:f6:9b:98:0a:62:ba:57:e1:44:27:c5:c9:0c:d2:
90:9b:42:4d:a4:b2:ca:24:bb:c4:99:8f:76:1d:bc:8e:23:ec:
c0:84:6d:91:56:9e:ff:67:e8:6d:6f:6e:42:45:c5:b6:6b:23:
2c:4c:e5:5c:de:ec:8a:55:ef:19:33:a8:5f:b7:89:ef:50:23:
8d:ee:2b:c0:63:1e:a4:40:de:bb:8d:0c:23:57:8b:12:0a:ba:
26:35:1b:57:fa:9b:e3:4e:8e:5a:98:d0:a2:44:58:63:fd:64:
ba:8a:b7:80:b2:15:a7:9b:e1:37:bd:65:ff:43:8f:1d:51:6e:
52:91:c9:bd:37:de:d7:d1:34:54:8f:44:3e:d1:4c:20:bc:6b:
35:e5:73:73:d8:27:9e:08:d0:28:f5:f3:79:ed:36:d6:1a:ab:
69:72:24:e1:32:e2:2b:05:a9:6d:9c:70:85:cd:6d:a3:cc:41:
7e:5e:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:59 2025 by rpki-client