Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130302e302f32332d3233203d3e20323634313431.roa
File: 3138362e3235302e3130302e302f32332d3233203d3e20323634313431.roa (raw, json)
Hash identifier: OB9uvXQa2PU2WrOQ9Lk080QqJmyxzy5yxCa84Yer7h0=
Subject key identifier: F2:17:DE:03:CE:3A:74:CC:21:C1:34:2F:7B:9E:A9:65:65:A3:E0:F9
Certificate issuer: /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial: 689292A0A77EE5E50E0E9C968CFE88017EE65198
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130302e302f32332d3233203d3e20323634313431.roa
Signing time: Thu 02 Jan 2025 19:42:03 +0000
ROA not before: Thu 02 Jan 2025 19:37:03 +0000
ROA not after: Thu 01 Jan 2026 19:42:03 +0000
asID: 264141
IP address blocks: 186.250.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:92:92:a0:a7:7e:e5:e5:0e:0e:9c:96:8c:fe:88:01:7e:e6:51:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Validity
Not Before: Jan 2 19:37:03 2025 GMT
Not After : Jan 1 19:42:03 2026 GMT
Subject: CN=F217DE03CE3A74CC21C1342F7B9EA96565A3E0F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:b1:31:74:d9:98:a5:19:10:23:5e:fd:63:
49:ed:a4:bf:f7:d0:38:8f:91:70:4b:7c:04:ff:51:
c0:1f:51:2f:2b:95:d0:5a:75:e8:ee:c3:6d:f5:77:
f4:c5:8e:f1:a5:eb:aa:76:ac:4b:a3:93:24:55:27:
fd:52:4c:2b:28:a2:08:8c:fe:bd:f3:8f:77:c3:e0:
8d:f5:2f:5d:13:3a:c2:bd:8e:3a:ae:08:bb:79:45:
78:51:39:55:88:b8:fa:38:98:02:62:0b:3f:33:8a:
84:6e:0f:18:d1:08:ca:40:17:a9:6b:f9:c4:52:f6:
b2:bd:eb:ff:16:60:c4:ec:8f:5d:33:ad:45:07:87:
a5:84:4d:a3:36:d3:be:40:78:72:d0:b4:5d:5a:27:
ad:44:8c:a0:a4:53:09:27:c8:2d:ac:21:dc:e0:43:
c9:03:4d:d1:ac:ce:43:94:0a:e6:1e:0d:c3:c2:97:
db:c8:7f:36:97:1c:86:21:20:d7:24:82:db:b3:b1:
04:cd:f8:ef:d0:2f:d8:54:be:8d:bf:fa:5b:eb:d6:
1f:4c:64:2c:cf:60:37:c2:29:c5:25:6c:83:fb:75:
11:69:ee:24:4d:b7:76:9e:67:73:1e:5f:5c:d0:44:
18:99:f9:10:31:80:10:f4:4f:80:bc:2a:96:ba:9e:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:DE:03:CE:3A:74:CC:21:C1:34:2F:7B:9E:A9:65:65:A3:E0:F9
X509v3 Authority Key Identifier:
keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130302e302f32332d3233203d3e20323634313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.250.100.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:8a:94:64:f6:13:a1:7f:97:c7:f7:ff:e6:9b:95:f5:b1:cf:
d7:fb:f6:7b:12:a6:19:f6:fe:b3:40:80:99:dc:63:95:93:cc:
83:85:e3:dd:f2:ec:9c:09:4a:fe:67:14:a8:42:2c:33:77:29:
db:b5:83:71:c8:15:83:b9:bc:02:40:55:a8:f7:0d:f3:f5:03:
ce:35:24:f8:4f:61:d0:b0:a9:99:14:e3:e0:8e:3b:08:9f:60:
e7:53:3e:8f:c8:ad:43:cc:e4:70:f6:66:01:d0:4d:e8:a1:e6:
3a:8e:f3:ea:1f:1d:ca:af:1f:ec:03:43:15:0f:c8:c2:3f:b0:
ac:68:f5:eb:96:51:f2:c6:11:fd:d7:92:83:d8:4b:de:51:74:
c8:b1:ae:d5:77:49:e5:75:e0:8e:0e:c3:85:8a:48:40:33:c4:
81:a1:ab:af:5c:49:f6:03:c0:86:44:08:56:f5:e3:e2:71:4f:
36:59:fb:13:1d:a6:1a:cd:91:dc:e0:8d:c6:7a:a0:3c:92:70:
c2:27:f1:25:dd:36:d6:fc:6c:a6:51:cb:14:71:83:a2:98:cb:
b6:53:ec:82:24:a4:e7:ae:e4:35:2a:c4:f3:28:49:c1:68:75:
d9:1f:0b:7e:3c:43:93:f8:e7:19:bd:f4:01:64:ca:0f:59:b1:
01:d3:2f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:21 2025 by rpki-client