Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa
File: 3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa (raw, json)
Hash identifier: GMJF4IeQiGDxFQSwCLlUAv0prhxqBjJf6HoTlXQbY+Y=
Subject key identifier: D9:0D:FC:8E:F4:19:7E:02:49:5A:02:52:74:FC:29:72:A0:AB:D5:40
Certificate issuer: /CN=CF4F3244B4C4478154236189E948BC8868D07EF9
Certificate serial: 62EFADFAA40FBC0BC0692F6ED440973E2326097E
Authority key identifier: CF:4F:32:44:B4:C4:47:81:54:23:61:89:E9:48:BC:88:68:D0:7E:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF4F3244B4C4478154236189E948BC8868D07EF9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa
Signing time: Thu 20 Mar 2025 16:56:13 +0000
ROA not before: Thu 20 Mar 2025 16:51:13 +0000
ROA not after: Thu 19 Mar 2026 16:56:13 +0000
asID: 265942
IP address blocks: 131.196.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ef:ad:fa:a4:0f:bc:0b:c0:69:2f:6e:d4:40:97:3e:23:26:09:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF4F3244B4C4478154236189E948BC8868D07EF9
Validity
Not Before: Mar 20 16:51:13 2025 GMT
Not After : Mar 19 16:56:13 2026 GMT
Subject: CN=D90DFC8EF4197E02495A025274FC2972A0ABD540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:49:5b:44:4e:66:12:52:4f:81:75:64:e5:
fd:0d:90:cb:bb:a6:0c:df:40:2b:9c:bf:33:d7:84:
a8:9a:a2:ab:92:56:3c:6f:e4:78:a5:59:ba:99:08:
4d:df:d2:05:12:91:79:de:9d:57:44:e5:16:e2:8a:
63:bf:09:30:e2:46:ca:8a:eb:07:e6:83:1f:df:59:
1c:0b:ff:b4:d0:79:0a:d1:d8:4e:e3:8b:77:41:27:
a0:c5:32:92:04:34:35:28:c9:8c:69:fe:82:d5:3f:
42:31:77:6a:93:6a:48:9c:79:68:19:c6:77:e9:81:
35:3c:b6:0f:9a:8f:ad:08:dd:aa:2d:51:56:c5:f5:
05:b3:3e:80:31:1e:ff:a8:a3:0d:55:d3:d0:e5:d5:
bb:cf:23:93:0d:6a:4a:0f:5f:f9:0f:11:31:24:08:
7a:ee:07:74:d6:1f:83:4a:f0:75:c1:1d:2c:7b:05:
8a:d2:72:69:ba:60:38:b3:3f:bc:f6:b1:d8:8d:ec:
be:f0:de:c3:a2:3d:5c:34:db:71:e2:10:9d:74:4b:
59:4e:ad:5d:ff:eb:f7:61:33:22:06:2a:82:fd:99:
bd:29:f9:c7:e8:cd:e7:0e:24:c3:a5:f1:7b:73:6a:
30:c1:bb:ae:b4:d5:28:9d:db:ce:ce:e1:f0:b1:7c:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0D:FC:8E:F4:19:7E:02:49:5A:02:52:74:FC:29:72:A0:AB:D5:40
X509v3 Authority Key Identifier:
keyid:CF:4F:32:44:B4:C4:47:81:54:23:61:89:E9:48:BC:88:68:D0:7E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/CF4F3244B4C4478154236189E948BC8868D07EF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF4F3244B4C4478154236189E948BC8868D07EF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:f2:70:91:24:23:34:7a:e7:d6:c5:13:a1:21:17:48:c1:f3:
8d:f8:b3:9b:d8:6d:5e:69:6e:d8:ac:73:97:0d:22:f2:06:a0:
06:ba:fd:d7:0e:ee:09:e0:c3:b4:28:6e:e0:93:aa:47:c6:3a:
0d:04:3c:d2:93:24:6b:70:0e:bc:ad:3c:a2:0e:f4:cc:34:c0:
3e:24:e6:6d:33:7a:2a:ed:a0:12:c3:fc:90:e3:20:80:f3:57:
f6:7e:0f:a5:17:33:ec:3d:4d:f0:c8:17:27:18:3f:9a:02:77:
26:83:f7:28:4c:27:ff:8a:fa:e8:d4:8e:ac:c5:c1:0c:a8:ed:
fb:19:a9:e0:0c:e8:5d:62:6c:6d:95:e7:f9:f4:d8:6e:77:87:
8c:a2:b9:84:93:ac:de:da:af:e7:1c:48:4c:90:f4:9b:2d:ac:
cc:b6:20:97:f4:a2:92:7d:5c:55:bb:fd:19:59:dd:af:40:05:
91:7e:5e:55:9c:60:08:c7:3e:6d:f5:3c:7e:9c:b0:43:b1:e0:
eb:f2:41:a5:d0:c6:2f:14:55:7c:f3:a8:ee:da:70:6e:56:4b:
c8:d2:eb:10:e1:cb:ed:7a:0f:8b:60:17:64:80:d8:14:05:6f:
21:83:fa:c5:30:e5:43:0e:95:87:fd:fa:f4:8f:57:6f:e3:d3:
73:8e:0c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:00:12 2025 by rpki-client