Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/1/3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa
File: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (raw, json)
Hash identifier: hH1lR1VnR2pI7sdKw4Pw/d4zLX2pU1+Jduop/vgJyjQ=
Subject key identifier: 61:A1:72:67:50:55:7C:82:F7:55:C1:B8:0D:79:9B:61:7E:17:8D:C1
Certificate issuer: /CN=0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C
Certificate serial: 79FC154A4F9A366AB75E1962E950114BAD923648
Authority key identifier: 0F:6E:39:9F:AF:99:1F:B9:E9:BB:70:47:67:C6:D7:3A:B1:D9:F2:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/1/3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa
Signing time: Thu 06 Mar 2025 22:02:30 +0000
ROA not before: Thu 06 Mar 2025 21:57:30 +0000
ROA not after: Thu 05 Mar 2026 22:02:30 +0000
asID: 270838
IP address blocks: 189.39.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:fc:15:4a:4f:9a:36:6a:b7:5e:19:62:e9:50:11:4b:ad:92:36:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C
Validity
Not Before: Mar 6 21:57:30 2025 GMT
Not After : Mar 5 22:02:30 2026 GMT
Subject: CN=61A1726750557C82F755C1B80D799B617E178DC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:f6:13:85:08:54:2a:2b:8e:b1:d4:99:fc:
8e:73:95:27:ed:af:60:1c:5d:df:ea:11:e3:b2:6d:
2e:37:5a:94:82:b0:6a:fd:31:15:c6:d4:11:4e:a8:
22:80:37:4b:9e:95:42:5f:34:48:65:e4:71:7b:ce:
f9:fe:e3:a8:a7:99:21:00:00:7a:c2:ec:0a:6f:88:
99:92:64:89:5a:ef:d1:f1:26:9a:c3:ee:79:14:61:
c0:07:1b:87:c0:2c:32:c7:ac:6c:61:f7:67:dc:be:
7e:24:bf:4d:25:2e:64:01:15:36:cb:49:80:86:c6:
88:8e:4b:31:98:09:b3:c0:b1:2d:ba:10:97:5e:d3:
be:9f:c9:4d:80:16:8a:e2:df:59:2c:b4:df:c6:ee:
74:4c:1a:da:07:b6:98:bd:45:d3:ea:8a:63:3e:16:
e1:cb:41:9a:24:78:d4:86:32:99:76:67:48:17:4a:
ad:1c:04:3d:7b:7c:b2:a0:04:c8:2d:49:57:d9:59:
c2:78:98:92:19:8e:74:1e:43:ee:10:d4:dc:c8:ef:
10:bf:cf:e2:ef:54:d9:da:59:e7:85:35:2b:33:94:
d5:c7:e6:19:b9:c4:b4:50:a9:85:fe:b3:28:89:85:
3a:e6:02:dc:1c:6e:96:09:cd:ff:46:a6:f5:f1:8c:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A1:72:67:50:55:7C:82:F7:55:C1:B8:0D:79:9B:61:7E:17:8D:C1
X509v3 Authority Key Identifier:
keyid:0F:6E:39:9F:AF:99:1F:B9:E9:BB:70:47:67:C6:D7:3A:B1:D9:F2:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/1/0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/1/3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.39.180.0/22
Signature Algorithm: sha256WithRSAEncryption
41:46:aa:7b:2d:67:cd:f6:69:22:a6:04:18:b0:12:4a:27:e7:
47:c9:a3:e4:a8:09:c5:02:d1:21:75:90:02:a0:10:d7:3b:b9:
95:8b:18:87:3f:7d:ef:89:a7:33:a6:9c:db:e7:22:4c:1c:d8:
d0:66:9f:fd:68:7e:dd:72:d0:be:8e:90:5e:f7:ee:cb:e5:63:
ac:11:c5:2a:8e:bd:c8:9d:de:75:d9:15:e5:ad:d8:cd:e4:b4:
fe:35:8d:93:98:93:b6:e0:21:36:26:c3:13:66:fe:8a:f3:64:
c2:e0:37:32:f8:62:cf:a9:b8:4a:8a:68:b8:e8:68:a2:81:44:
10:12:bd:84:d8:3e:c8:9b:46:c5:14:6d:a4:d0:3b:62:85:d6:
63:18:bf:71:61:ed:c0:bb:61:9d:85:49:50:29:82:31:ce:b3:
f2:9a:22:ea:26:44:a6:ca:49:b7:e8:da:2b:86:2a:9e:d3:a6:
bc:ff:2d:39:8f:3e:6f:91:3f:43:5b:5b:c4:df:26:35:32:af:
85:2e:12:07:e0:01:af:aa:2d:28:91:34:71:c2:70:55:af:d6:
13:f9:7f:cc:55:94:8a:d1:45:07:c0:79:0b:53:24:32:f2:b0:
00:01:e1:fa:82:08:4b:a2:7a:f2:c3:db:1b:b8:83:1e:5b:4c:
e8:10:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:49:00 2025 by rpki-client