Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa
File: 3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa (raw, json)
Hash identifier: NlN7NLKjpV4UE1SJvxTxmzulOG/dqN1jnAoHA0vLvUU=
Subject key identifier: 7A:A7:CC:AF:0C:72:EA:F9:17:94:92:F4:3B:07:18:8C:F4:63:99:B1
Certificate issuer: /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial: 0106CB023DDA1DFAC04D6581F14C5315F3FA8D71
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa
Signing time: Wed 05 Mar 2025 19:00:12 +0000
ROA not before: Wed 05 Mar 2025 18:55:12 +0000
ROA not after: Wed 04 Mar 2026 19:00:12 +0000
asID: 270836
IP address blocks: 189.14.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:06:cb:02:3d:da:1d:fa:c0:4d:65:81:f1:4c:53:15:f3:fa:8d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Validity
Not Before: Mar 5 18:55:12 2025 GMT
Not After : Mar 4 19:00:12 2026 GMT
Subject: CN=7AA7CCAF0C72EAF9179492F43B07188CF46399B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:33:39:09:94:74:f2:5c:d6:00:e9:44:5e:
83:e3:3d:1f:c3:99:ff:d0:a2:fc:dd:90:d5:e2:8a:
ce:7a:87:29:87:b5:71:c8:1c:dc:f5:29:a5:f2:e4:
54:55:34:29:f8:44:71:95:fc:32:aa:73:2c:72:a3:
15:7d:80:a8:f2:ec:5c:1d:7c:c1:07:26:d6:e9:f5:
f3:5a:68:da:c2:a9:bf:2f:b5:3f:47:b5:e1:4b:b1:
6c:79:10:72:cc:a9:08:c1:cb:8b:ca:15:7e:72:e2:
9f:81:49:7e:64:23:c3:fb:e8:31:c0:81:2a:5b:4b:
0f:4d:50:bc:78:f9:38:32:96:4c:45:91:c8:23:2d:
e4:17:ba:3e:f2:07:42:e4:eb:68:3e:60:50:e6:ed:
79:53:c9:ed:60:ba:0d:f9:77:3b:5e:b1:f4:80:54:
40:ee:4e:12:e8:c9:e1:c1:dd:16:09:e7:64:3f:5f:
76:b3:b9:00:0f:ca:73:a5:11:ef:73:49:19:68:34:
70:de:89:dd:92:f7:b1:c5:b0:ac:90:2e:1d:34:b9:
1f:d1:6e:81:0b:d9:12:51:6c:b4:c6:3d:0a:be:30:
9e:33:14:17:98:5f:fb:ff:28:15:ab:ca:40:9a:d4:
96:33:4c:01:cb:6c:5e:6c:af:2f:a5:ac:2a:99:fc:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A7:CC:AF:0C:72:EA:F9:17:94:92:F4:3B:07:18:8C:F4:63:99:B1
X509v3 Authority Key Identifier:
keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.14.114.0/24
Signature Algorithm: sha256WithRSAEncryption
19:93:3b:2d:1c:6e:65:0b:04:16:75:e3:9c:07:aa:b2:ea:a9:
dd:6e:3f:44:8d:5d:31:b6:5c:2b:1a:01:2d:f0:6e:e7:2b:6d:
03:41:49:f3:01:dc:46:6b:c4:4c:19:da:36:19:98:5b:7b:e2:
b6:83:e6:c2:1c:ec:33:dd:3c:b6:79:73:82:9a:32:5d:ab:5a:
19:e5:02:b9:38:d5:f4:d7:51:ae:82:03:29:6e:20:9e:c1:5e:
e1:93:c5:c5:81:39:a4:6a:6b:04:20:42:5c:f9:35:91:e5:2d:
d5:c7:74:70:11:0c:3b:64:d5:08:20:33:82:3f:c1:68:df:29:
b9:77:b1:b4:83:8d:7f:78:5e:bd:f9:ae:b0:7a:17:36:87:66:
99:e2:59:d2:2d:ee:1c:27:22:d4:97:ec:0f:1c:1d:3d:b5:f1:
5f:11:33:c0:3e:ec:96:2e:7f:b4:5b:38:84:6c:70:33:a5:30:
c7:f6:dd:6c:3f:8e:6d:40:4c:60:d7:ae:b3:bf:a8:84:3e:60:
9d:e2:e8:5c:f6:db:e5:b0:8b:c9:5a:0e:e0:b5:da:8a:fa:ec:
bb:c4:d3:8d:2c:de:02:15:5d:4a:04:2b:0f:fd:1c:05:38:22:
b7:7d:2a:55:98:7e:6b:df:63:51:ac:3d:bb:31:da:b0:34:c6:
9d:f7:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:31:04 2025 by rpki-client