Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa
File: 3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa (raw, json)
Hash identifier: QN9c+JoQXMorFN90vZBo7zsJjwUgeVEpnQv1mcpfjo4=
Subject key identifier: F4:36:EF:7E:39:26:3A:18:72:21:5E:45:5C:B7:51:3F:15:1C:0A:C8
Certificate issuer: /CN=D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D
Certificate serial: 5658DCE48303E67A95321BF51D1597F6A98F0F26
Authority key identifier: D2:75:1A:D2:D4:C9:D5:D7:A8:31:53:0F:F2:0E:B4:6A:9D:2F:36:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa
Signing time: Tue 11 Mar 2025 20:57:47 +0000
ROA not before: Tue 11 Mar 2025 20:52:47 +0000
ROA not after: Tue 10 Mar 2026 20:57:47 +0000
asID: 266217
IP address blocks: 192.144.120.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:58:dc:e4:83:03:e6:7a:95:32:1b:f5:1d:15:97:f6:a9:8f:0f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D
Validity
Not Before: Mar 11 20:52:47 2025 GMT
Not After : Mar 10 20:57:47 2026 GMT
Subject: CN=F436EF7E39263A1872215E455CB7513F151C0AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:9b:88:c3:95:5e:e9:fe:a6:05:2d:96:f0:
dc:91:26:f4:34:4c:c8:44:3b:24:4f:56:c8:2b:69:
74:2b:91:ce:59:0e:c5:ee:7c:3b:a7:fc:c9:3f:70:
11:de:0a:e6:0a:e3:dd:68:13:50:f0:33:24:02:50:
85:21:28:05:83:b4:31:82:fe:4d:10:7d:3b:d8:cc:
16:e7:00:92:19:e8:d7:1a:73:b7:00:41:cd:3f:78:
b2:02:b7:cb:21:0a:f0:5f:03:2e:fe:32:f1:42:a2:
07:12:de:ab:52:c2:b3:b1:08:2c:65:f8:d8:38:5e:
77:e3:ea:ae:88:65:5c:00:2b:93:cd:6c:13:98:7c:
42:a8:20:b8:f3:c3:85:7f:1e:73:04:17:fb:6d:14:
44:7e:4f:1e:4e:f7:b1:80:90:6a:ae:a4:4c:d9:07:
da:c0:5e:7e:27:b1:f8:32:c8:7c:fc:c5:21:f8:e7:
93:d7:74:54:33:ce:b6:d3:ad:7d:47:c7:a9:fe:d9:
35:31:c8:90:88:19:57:fc:fa:8f:2e:4f:f3:29:84:
65:16:1c:0d:e3:11:2e:7f:75:8d:b7:dd:1d:20:0e:
6c:b5:15:7b:23:ca:45:46:c4:37:b1:bc:9c:52:0b:
46:0a:be:ab:25:a9:06:0e:a5:9b:39:0d:9b:c5:35:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:36:EF:7E:39:26:3A:18:72:21:5E:45:5C:B7:51:3F:15:1C:0A:C8
X509v3 Authority Key Identifier:
keyid:D2:75:1A:D2:D4:C9:D5:D7:A8:31:53:0F:F2:0E:B4:6A:9D:2F:36:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.120.0/22
Signature Algorithm: sha256WithRSAEncryption
70:3f:93:e2:2a:95:54:09:0f:75:74:75:43:6f:7f:75:97:ec:
91:0e:47:ee:7f:3f:19:2b:86:8a:3f:95:9d:e1:90:16:26:9b:
7d:bd:f5:9f:b4:ff:03:3a:9a:84:9c:d0:ef:99:6a:7f:de:af:
49:dd:b8:01:2f:2e:ec:db:34:e9:1c:0b:9a:cb:03:24:82:27:
f3:9d:73:6b:db:d2:5a:9f:93:f0:d6:ca:34:fc:44:26:86:bd:
c0:30:76:23:7b:72:e0:32:d4:02:21:b4:6a:45:1d:b0:3c:d3:
17:a6:40:53:3c:de:b8:65:65:75:9f:49:cb:53:81:8b:42:13:
96:cb:d2:f9:47:69:28:48:57:84:27:13:5f:75:09:dc:6e:62:
bc:f4:d4:83:5e:ae:c0:0c:f9:5d:c6:2f:47:15:4b:49:49:ae:
f2:22:d9:2a:d9:df:d0:6a:5d:0f:73:30:2a:83:46:3a:73:22:
ae:82:74:63:9e:4a:9e:52:f2:5d:78:bb:47:d6:76:63:8f:15:
d6:35:65:01:24:39:f8:1c:e5:a6:e9:19:ea:fa:9b:57:a1:29:
9e:45:34:12:ed:65:ab:9d:fe:55:f7:64:37:d5:58:d7:30:96:
4f:97:4d:b0:2c:35:df:0c:3b:f4:ea:44:27:26:12:65:02:9b:
c8:88:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:24:04 2025 by rpki-client