Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/3139322e3134312e3130352e302f32342d3234203d3e20323637353335.roa
File: 3139322e3134312e3130352e302f32342d3234203d3e20323637353335.roa (raw, json)
Hash identifier: 9CIdTcJI+m9eGHRY26L3pxUzDBWKhT1jJxa2b7oso2s=
Subject key identifier: ED:B5:1F:35:D1:79:07:8E:50:E0:AE:CA:A6:0E:50:ED:0A:24:60:8E
Certificate issuer: /CN=24B76CD87395C0B9E7F969993DB4701E0DFBE8E3
Certificate serial: 2B0EB3879922E7D6451678B5DF8C8356A173E2BA
Authority key identifier: 24:B7:6C:D8:73:95:C0:B9:E7:F9:69:99:3D:B4:70:1E:0D:FB:E8:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/3139322e3134312e3130352e302f32342d3234203d3e20323637353335.roa
Signing time: Thu 06 Mar 2025 09:52:47 +0000
ROA not before: Thu 06 Mar 2025 09:47:47 +0000
ROA not after: Thu 05 Mar 2026 09:52:47 +0000
asID: 267535
IP address blocks: 192.141.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:0e:b3:87:99:22:e7:d6:45:16:78:b5:df:8c:83:56:a1:73:e2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24B76CD87395C0B9E7F969993DB4701E0DFBE8E3
Validity
Not Before: Mar 6 09:47:47 2025 GMT
Not After : Mar 5 09:52:47 2026 GMT
Subject: CN=EDB51F35D179078E50E0AECAA60E50ED0A24608E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:18:f6:23:31:be:1c:67:21:ba:e9:39:8c:cb:
83:3f:f6:b9:17:bc:5e:42:8b:0d:ab:c6:c5:86:56:
05:38:fe:83:d6:02:14:44:c2:d0:8e:24:ff:d3:d0:
f4:19:3d:c8:50:2c:0b:24:a2:bc:19:fa:bb:7e:96:
d5:5e:e4:51:14:ad:e8:e6:95:32:a1:19:34:01:67:
ce:eb:09:b0:c7:c9:8c:11:20:99:f0:18:27:d1:af:
63:d0:b1:7e:10:c7:9f:08:ba:a9:80:fa:42:07:75:
d9:5a:96:9e:40:fc:a9:c8:1b:ed:65:cf:42:68:b2:
4e:fb:3e:e1:28:0f:84:67:8e:05:75:10:86:89:8a:
ac:cc:28:13:4f:74:5d:5c:3a:07:47:c3:28:df:a0:
aa:bf:a6:1a:19:12:c9:33:fd:e0:4f:cd:d0:f9:b6:
aa:2a:67:90:fd:35:64:82:96:72:6b:21:db:91:f8:
c7:cf:ad:3e:80:26:a4:89:d2:27:b1:b0:19:b7:4c:
be:28:3b:dd:ed:14:fb:38:ac:df:56:b8:1e:a9:a6:
6d:d0:7c:af:e6:f5:7a:63:b5:eb:22:64:e5:df:28:
93:db:51:91:77:ff:c7:a9:45:0f:f0:35:9a:d6:f1:
5f:91:c7:30:fa:59:03:fb:6b:98:73:34:e3:05:7a:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B5:1F:35:D1:79:07:8E:50:E0:AE:CA:A6:0E:50:ED:0A:24:60:8E
X509v3 Authority Key Identifier:
keyid:24:B7:6C:D8:73:95:C0:B9:E7:F9:69:99:3D:B4:70:1E:0D:FB:E8:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/3139322e3134312e3130352e302f32342d3234203d3e20323637353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.105.0/24
Signature Algorithm: sha256WithRSAEncryption
78:12:8d:6a:73:e7:45:59:70:b4:cd:9a:a7:8d:80:1d:9d:95:
9b:4b:41:08:1c:99:00:61:f6:93:b3:65:e9:4c:a1:47:64:5f:
6c:78:02:20:d8:4d:e8:6c:cc:98:4d:b5:b1:da:a4:60:d5:ad:
3a:19:a8:37:bf:0b:4e:7a:89:14:ad:6c:53:2c:59:9b:30:09:
02:93:b3:46:5a:b9:23:06:c1:34:4e:d4:7d:8d:4b:0b:7a:de:
1c:92:34:fd:2d:b5:d0:d1:3d:cc:73:45:b1:e1:e1:da:81:f8:
aa:aa:20:c9:17:d1:d2:ec:84:60:c9:fb:60:a2:91:9c:43:52:
5c:d0:e7:59:d5:64:79:80:9b:2d:f2:1a:03:48:e1:84:b0:60:
f7:49:9d:da:76:77:6d:c8:c2:0c:bf:fd:e4:1a:a5:89:d7:4f:
bc:ee:eb:76:ad:5d:fa:8c:78:61:ea:d2:0b:53:29:16:ed:15:
a3:d9:ba:e8:bd:e9:a4:49:cb:ae:de:46:5e:a9:49:da:f7:0e:
41:07:71:88:f1:24:39:06:41:dd:e2:fd:e3:04:5d:24:c0:a2:
16:16:76:85:1b:fa:d5:90:7e:c9:89:79:bf:a9:e9:0c:45:bf:
50:16:88:0d:65:1c:68:f9:36:88:62:69:41:ce:a5:bc:b1:a8:
d0:02:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:02:38 2025 by rpki-client