Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa
File: 3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa (raw, json)
Hash identifier: j2+hQ4MNSNTWlAJLNxr+XIB88NETIiHDSKZlPxGTJpg=
Subject key identifier: 0D:B3:37:90:AB:37:8E:E1:A1:EC:F5:C7:7D:1A:6A:C6:3B:67:35:5B
Certificate issuer: /CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
Certificate serial: 4DF8C9D23515F2A43308E2CAA9FE0F59D6AFD365
Authority key identifier: 4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa
Signing time: Thu 06 Mar 2025 03:46:56 +0000
ROA not before: Thu 06 Mar 2025 03:41:56 +0000
ROA not after: Thu 05 Mar 2026 03:46:56 +0000
asID: 262496
IP address blocks: 191.240.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f8:c9:d2:35:15:f2:a4:33:08:e2:ca:a9:fe:0f:59:d6:af:d3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
Validity
Not Before: Mar 6 03:41:56 2025 GMT
Not After : Mar 5 03:46:56 2026 GMT
Subject: CN=0DB33790AB378EE1A1ECF5C77D1A6AC63B67355B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:23:79:9d:ae:a0:e2:d7:d4:be:a3:81:f6:71:
5b:68:e7:75:08:5f:9a:f6:53:46:3e:c1:23:40:48:
42:0a:c3:98:3b:72:fd:dc:fb:8a:41:62:99:c8:2d:
b5:51:94:43:a0:26:f6:a1:bd:43:be:1b:b5:c4:7e:
fe:28:b7:d9:0b:6d:79:f2:db:ea:2b:66:0d:4d:cd:
5b:a3:1e:fe:07:0b:3b:7a:bb:5b:1c:55:87:55:9d:
99:93:64:f5:f5:ea:8e:f2:ca:df:15:d0:89:d1:ab:
dd:3e:b4:9f:a7:e2:7c:68:90:e4:29:1a:25:30:57:
40:11:0c:75:5a:f3:db:76:31:6e:f9:a7:63:2f:e7:
6b:36:e2:1a:23:9a:48:60:09:46:4f:2c:ea:ff:ee:
b7:bc:1a:27:a1:ff:9b:bb:eb:50:75:94:37:97:ce:
7d:7f:40:6f:8b:95:f3:63:4e:f4:b2:3b:6e:6b:94:
03:8a:a1:fa:83:b0:ba:9c:06:7f:35:d7:b4:c8:70:
33:7e:50:b9:cf:c4:c8:7c:bd:7d:76:b6:57:a9:72:
70:ac:40:bd:81:16:26:b9:80:97:c5:6b:82:f0:05:
a7:f0:06:27:9d:1e:ca:3a:36:e9:05:f3:ef:62:eb:
d2:a5:9f:ee:c9:3c:83:59:85:41:7d:35:7b:1a:bd:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B3:37:90:AB:37:8E:E1:A1:EC:F5:C7:7D:1A:6A:C6:3B:67:35:5B
X509v3 Authority Key Identifier:
keyid:4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.240.168.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:82:84:35:fd:5f:1f:7c:b3:a8:65:4f:55:3e:b2:98:43:41:
b5:7c:53:0e:3c:39:a7:b5:0f:c6:24:de:3a:f1:76:77:84:60:
0f:04:91:f0:af:c9:48:8c:fa:ad:64:71:d6:05:38:15:c4:55:
45:92:7d:0b:6f:0a:00:34:ca:8d:6a:9d:00:21:73:12:57:c6:
b4:96:56:7e:dc:aa:5d:bf:6d:9f:46:c9:5e:ea:5f:b8:71:6c:
78:ac:be:19:25:72:90:01:a1:a8:b9:60:57:ec:54:23:4d:a6:
3c:bc:f5:58:08:6d:17:d3:e6:c0:ad:c3:91:a7:da:5f:fb:59:
80:45:62:4c:1e:ac:ae:3f:0f:5d:8a:5d:c4:70:3e:20:61:b1:
60:8c:53:d0:3f:60:e2:d2:9f:e8:48:30:1b:82:a4:07:20:72:
d7:09:89:f0:a0:ef:b1:fd:f3:1d:69:be:46:57:b3:55:12:6f:
7c:6a:d9:3d:3e:7b:26:f9:e0:10:65:5c:51:7b:da:06:51:4b:
29:7b:e6:7f:e8:e7:50:ca:1e:b7:2f:27:11:73:63:17:d9:8d:
80:4e:43:a9:ad:5d:b5:77:48:94:95:39:e2:36:78:39:4c:35:
88:9b:cc:84:bb:59:fa:22:89:6b:49:0f:aa:66:23:9a:2f:9e:
df:2d:63:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:42:13 2025 by rpki-client