Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135372e302f32342d3234203d3e20323639373132.roa
File: 3139302e3131322e3135372e302f32342d3234203d3e20323639373132.roa (raw, json)
Hash identifier: fcrUxtriQlyw/ToWa+Dw5lgJRmv/NgnaQKfDNbT+Mzc=
Subject key identifier: 25:2D:6C:31:C5:6A:C0:CF:CD:DE:1C:4E:F8:AA:51:BB:9F:BE:D6:82
Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial: 48121CCE2771A414E3872934D58260ABC033930C
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135372e302f32342d3234203d3e20323639373132.roa
Signing time: Mon 24 Feb 2025 17:21:28 +0000
ROA not before: Mon 24 Feb 2025 17:16:28 +0000
ROA not after: Mon 23 Feb 2026 17:21:28 +0000
asID: 269712
IP address blocks: 190.112.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:12:1c:ce:27:71:a4:14:e3:87:29:34:d5:82:60:ab:c0:33:93:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Validity
Not Before: Feb 24 17:16:28 2025 GMT
Not After : Feb 23 17:21:28 2026 GMT
Subject: CN=252D6C31C56AC0CFCDDE1C4EF8AA51BB9FBED682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:41:21:36:80:f7:89:c9:94:43:5a:86:f8:
a2:86:b3:8f:c3:60:78:1d:ed:74:1b:b9:b5:52:cc:
4f:bf:f8:4b:89:58:c9:19:9a:1c:dd:f9:39:19:ee:
fc:c1:10:4d:5b:b3:dc:d3:3f:ea:db:98:85:c3:0b:
96:a3:45:36:27:b1:1c:e7:91:a3:6f:3d:75:a0:06:
b4:d5:ca:f8:0b:39:cc:d3:94:f7:ec:83:02:0d:17:
bb:79:6b:11:aa:84:6c:e0:9d:c8:1c:06:c1:00:7d:
df:af:e5:10:a3:f7:4e:dc:5f:5b:4e:89:db:02:a3:
17:5f:7d:e0:6b:c7:e7:a2:95:a4:45:b2:ed:a5:d8:
25:8a:76:1f:e0:57:5f:0e:27:23:b1:5a:59:e2:c9:
13:9c:f8:f0:b3:02:ee:d2:c7:57:1a:3a:e0:f9:97:
02:a8:60:e4:99:b7:61:69:e5:b2:a5:51:cb:1b:75:
2b:65:3a:81:b3:db:cb:ea:a1:fd:de:ab:c5:f8:73:
70:47:7d:f2:7a:69:da:9b:94:5e:0b:6d:b3:b0:0e:
31:c2:4b:f4:17:5e:b8:53:4a:10:09:32:64:b0:d3:
a9:9f:b8:41:b9:ba:b0:bc:ab:1d:0a:15:7d:64:20:
40:27:b3:29:3f:79:47:a2:b0:41:2c:9a:f3:da:15:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:6C:31:C5:6A:C0:CF:CD:DE:1C:4E:F8:AA:51:BB:9F:BE:D6:82
X509v3 Authority Key Identifier:
keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135372e302f32342d3234203d3e20323639373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.157.0/24
Signature Algorithm: sha256WithRSAEncryption
64:07:da:fd:be:97:cb:25:b2:ba:44:e7:cc:f8:9f:6f:50:d8:
bc:f7:68:9d:e0:60:1c:38:8c:34:42:cb:d7:14:33:23:3f:83:
1d:98:88:2b:16:70:9a:2d:a3:18:a6:f4:6b:0c:55:23:a3:1d:
ee:d0:8f:11:f3:0a:20:d5:99:7b:dc:ef:54:6b:a9:e8:aa:40:
d7:28:82:71:28:ca:79:d0:34:d4:2d:8b:cd:36:9b:cc:52:ee:
08:35:44:81:31:9f:1e:9f:67:1f:10:73:8f:76:a9:6e:ed:b6:
bb:18:cc:91:10:d7:aa:ef:60:25:52:bb:7b:6d:82:ff:3c:79:
83:9c:d5:2b:7d:7a:e8:6c:46:4b:d0:7d:43:68:27:8d:3f:dc:
fa:67:47:05:92:4d:a5:75:fa:fa:29:7c:64:5c:ed:16:15:3b:
c4:61:ba:de:63:ed:f4:ba:3d:2b:83:93:ff:c9:02:07:de:64:
72:d0:ee:14:96:99:be:4e:d3:1c:34:8a:9a:ad:97:49:46:dc:
81:ae:63:e4:3a:88:39:88:53:0e:97:cc:80:0f:e4:c4:b7:f6:
90:0f:48:3d:83:4e:fa:38:53:fb:c6:07:4b:97:f0:84:83:96:
d3:e9:4c:e0:09:dc:3b:87:4e:74:4e:6c:58:c7:da:59:86:19:
1e:e5:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:39:50 2025 by rpki-client