Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31332e302f32342d3234203d3e20323731343638.roa
File: 3138312e3232342e31332e302f32342d3234203d3e20323731343638.roa (raw, json)
Hash identifier: GSqvt1e/X0nWj5mGfcI0mGHDvzcmKPnM08bWy6uTz5Q=
Subject key identifier: 87:00:02:83:6A:E0:90:29:5B:76:98:49:D1:CE:B3:0E:B7:19:D0:73
Certificate issuer: /CN=66F999D364628A7CC2634117B086F1A07B01449C
Certificate serial: 6D9C7E0D26E518C8B93D72F97BA0A9A2DA90DC0C
Authority key identifier: 66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31332e302f32342d3234203d3e20323731343638.roa
Signing time: Wed 19 Feb 2025 10:33:25 +0000
ROA not before: Wed 19 Feb 2025 10:28:25 +0000
ROA not after: Wed 18 Feb 2026 10:33:25 +0000
asID: 271468
IP address blocks: 181.224.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9c:7e:0d:26:e5:18:c8:b9:3d:72:f9:7b:a0:a9:a2:da:90:dc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66F999D364628A7CC2634117B086F1A07B01449C
Validity
Not Before: Feb 19 10:28:25 2025 GMT
Not After : Feb 18 10:33:25 2026 GMT
Subject: CN=870002836AE090295B769849D1CEB30EB719D073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:88:ec:85:4e:da:5e:03:5a:70:48:96:20:
27:cf:00:9d:e6:ba:7a:37:34:b0:59:42:b2:05:ea:
f1:bf:cc:8e:72:d7:68:63:5a:f4:5e:8e:de:ca:b6:
dc:21:49:fe:f2:97:c0:e3:63:6a:66:6c:7a:e9:75:
76:a6:f7:c4:74:3c:74:a8:ff:43:c4:53:5f:71:c8:
02:97:4f:9e:9e:46:d7:34:53:c0:88:41:59:83:b0:
80:42:46:6d:c3:aa:0e:6a:07:d2:e8:40:9a:71:02:
97:f7:2d:ed:9d:c8:bd:6d:a3:32:7b:c0:4b:72:9f:
b5:19:50:08:70:35:f4:39:43:56:0a:7d:a2:e4:d7:
43:95:8f:4c:44:d3:17:32:fb:d4:a4:cd:50:aa:1e:
10:e8:d4:9d:f3:9d:01:8d:8f:ba:ee:37:8a:a1:28:
77:80:c4:c8:5e:df:fe:03:3b:03:95:50:93:c7:b0:
d5:1e:a6:36:ab:05:0d:27:55:40:aa:91:cd:98:30:
54:9d:d6:c1:bc:3a:9e:fb:63:d5:1d:46:5e:76:64:
5e:4c:dc:62:a2:78:98:9f:76:97:5d:cc:2e:d2:40:
d2:c6:cb:b7:c1:a4:83:42:46:8b:92:9f:dd:df:1c:
fc:c5:66:e3:b6:cc:d4:57:82:63:33:b3:e6:d2:5f:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:00:02:83:6A:E0:90:29:5B:76:98:49:D1:CE:B3:0E:B7:19:D0:73
X509v3 Authority Key Identifier:
keyid:66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31332e302f32342d3234203d3e20323731343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.13.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:55:c9:23:12:bf:71:f3:fe:a3:d9:a1:40:43:1b:87:f4:a7:
66:ad:c5:e0:24:26:c2:c0:e4:cd:ee:bd:d8:66:ea:07:ae:3e:
71:14:9e:0b:f2:ee:06:8d:4d:80:b5:e1:66:30:0e:3c:5b:5d:
18:4b:7c:80:e1:d4:90:7a:38:d1:94:5e:3a:f2:a7:52:26:a0:
f8:80:ce:58:b4:fd:03:83:21:82:a1:ce:68:9b:24:45:c2:1f:
1b:36:b4:cc:5b:ac:53:12:16:9c:54:84:8d:4c:bb:26:5c:c8:
b8:c8:a0:c9:a8:c6:4c:80:26:ca:b5:53:a0:22:26:c9:af:97:
11:db:14:b3:8a:0b:83:f3:81:f9:6e:f0:04:84:93:dd:49:1c:
98:0b:7c:bf:63:72:b1:22:74:2d:22:10:11:d5:59:05:88:ad:
f2:48:01:2e:df:ca:9f:e2:03:78:0d:4b:cc:9b:cc:21:bc:7d:
03:b1:d9:08:1d:6e:48:64:a0:cc:d9:7a:e6:c5:11:ae:6d:61:
dd:d5:3a:61:6e:b2:ec:7c:be:46:f7:95:9d:6b:e6:62:18:0c:
0c:88:17:fc:6a:c5:2d:6e:d7:65:d0:75:45:20:38:43:2c:e7:
37:39:71:19:21:ea:4a:e8:f6:a4:9b:4d:9f:1e:aa:97:c1:c2:
f3:e8:bc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:01:31 2025 by rpki-client