Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3230382e302f32302d3234203d3e20323632383038.roa
File: 3139312e3235332e3230382e302f32302d3234203d3e20323632383038.roa (raw, json)
Hash identifier: 2twVqsdG2wu/HjJ89P6hxEHdxAIdR+6q6Y4oBRgAXfY=
Subject key identifier: 80:64:02:B0:90:C9:E5:16:A6:08:B8:B9:71:F7:F7:BC:AB:2A:47:05
Certificate issuer: /CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
Certificate serial: 142EC389D3CA8A3A0ED2B55FD7F0D633030225AF
Authority key identifier: 38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3230382e302f32302d3234203d3e20323632383038.roa
Signing time: Wed 22 Jan 2025 18:52:49 +0000
ROA not before: Wed 22 Jan 2025 18:47:49 +0000
ROA not after: Wed 21 Jan 2026 18:52:49 +0000
asID: 262808
IP address blocks: 191.253.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2e:c3:89:d3:ca:8a:3a:0e:d2:b5:5f:d7:f0:d6:33:03:02:25:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
Validity
Not Before: Jan 22 18:47:49 2025 GMT
Not After : Jan 21 18:52:49 2026 GMT
Subject: CN=806402B090C9E516A608B8B971F7F7BCAB2A4705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:61:13:5d:43:0d:9f:33:15:a9:33:5b:38:
1c:f1:dc:e1:4d:50:c0:e2:15:f2:26:7f:4f:2a:6a:
e5:33:e3:e4:0b:e2:66:0a:1e:0c:ce:f1:bd:e1:3e:
e9:f1:df:2f:5d:ff:9b:5f:99:3c:1d:44:87:7d:4b:
2f:22:15:c6:9b:5f:1c:8a:58:84:99:d8:cd:b3:7e:
be:a0:a8:1c:ea:9a:15:71:81:10:89:db:17:e9:da:
11:19:a6:99:6d:1f:e8:da:a1:f1:a7:36:31:a9:34:
c1:c6:c0:a9:fa:02:af:8f:e9:99:0c:d6:33:f6:25:
9f:90:52:93:f2:b5:fd:a2:18:c0:7f:31:fd:46:1a:
ba:25:c7:bc:5d:44:20:b0:24:a9:ad:40:99:6b:61:
15:9e:8e:63:d6:b7:17:2f:ba:84:5b:8d:f4:86:c5:
b1:8d:d9:85:1a:87:89:c0:18:2e:b0:a0:29:b1:07:
b1:b8:51:80:43:73:69:f2:5e:7c:9a:26:5d:b1:72:
80:44:cf:89:00:4e:fb:77:84:82:86:b8:7b:86:c8:
33:df:4e:b0:91:db:a7:d8:77:f9:ba:02:d1:94:70:
29:ba:eb:75:b7:09:4f:bb:85:5a:7d:67:d7:6f:ba:
d6:ab:ce:2b:ee:42:75:ea:51:74:bc:5f:8e:a3:f4:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:64:02:B0:90:C9:E5:16:A6:08:B8:B9:71:F7:F7:BC:AB:2A:47:05
X509v3 Authority Key Identifier:
keyid:38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3230382e302f32302d3234203d3e20323632383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.253.208.0/20
Signature Algorithm: sha256WithRSAEncryption
25:0e:b7:39:61:84:da:6d:b7:d9:e7:42:14:e0:53:ff:e8:0e:
e1:76:ec:90:68:ad:da:e4:e3:26:31:9b:77:81:94:db:49:94:
fb:38:90:a2:71:a5:10:b4:37:a5:22:2d:ad:6e:92:64:3c:59:
27:e4:32:4b:10:2c:09:95:00:a4:c1:58:f4:e0:07:e3:a6:08:
38:ad:30:20:bd:0a:21:20:dd:5f:b0:b8:c8:52:89:49:ac:e6:
1d:0f:e0:cc:50:8a:ec:4f:ba:56:42:de:81:6e:cf:eb:0d:b7:
17:b1:85:6d:6e:fd:ab:65:08:08:e6:50:a1:e0:b8:e7:4f:0c:
49:59:e3:36:68:b6:ef:31:41:57:63:40:64:b3:d2:98:d7:54:
bc:50:43:81:7a:ee:76:d7:00:2e:78:b4:88:29:2c:7f:26:3f:
c8:27:0e:8a:97:2a:d1:be:5b:68:4f:8c:aa:97:cf:4b:cd:a2:
cf:b7:42:0f:77:70:14:e1:f7:9e:81:6d:79:da:0d:d9:72:77:
04:04:40:8d:f1:fe:ce:e5:7c:6c:dd:64:35:8f:7d:b5:3e:1c:
1c:7f:8d:26:63:c0:f9:f2:8a:6b:33:5a:fe:1c:24:d3:7c:43:
d5:6a:dd:ba:d5:f7:13:ef:77:a7:11:5b:f1:e5:f1:1b:8a:7c:
9e:0c:97:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:58:23 2025 by rpki-client