Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa
File: 3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa (raw, json)
Hash identifier: 3/vCP1xkuTw5BMGrf8ogQ2COZbgYr74Zv2VMlu/0A6E=
Subject key identifier: 41:41:85:83:0E:68:79:C3:8C:5F:3A:D6:39:FF:15:78:76:5F:6E:AD
Certificate issuer: /CN=66F999D364628A7CC2634117B086F1A07B01449C
Certificate serial: 16963C152230447B5CB7B0CC205E06C9523ACD88
Authority key identifier: 66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa
Signing time: Wed 19 Feb 2025 10:33:32 +0000
ROA not before: Wed 19 Feb 2025 10:28:32 +0000
ROA not after: Wed 18 Feb 2026 10:33:32 +0000
asID: 271468
IP address blocks: 181.224.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:96:3c:15:22:30:44:7b:5c:b7:b0:cc:20:5e:06:c9:52:3a:cd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66F999D364628A7CC2634117B086F1A07B01449C
Validity
Not Before: Feb 19 10:28:32 2025 GMT
Not After : Feb 18 10:33:32 2026 GMT
Subject: CN=414185830E6879C38C5F3AD639FF1578765F6EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:88:e7:12:e4:40:92:15:6d:de:5f:39:ee:
75:ce:8e:2d:c4:80:60:bf:1a:8a:0d:0a:32:7e:a0:
fd:92:51:96:be:00:86:60:03:bd:e6:54:90:6b:74:
d9:1b:96:8d:82:65:ac:d7:c1:14:0f:e2:e3:ef:36:
3f:dd:4a:88:b1:05:07:c2:72:65:ba:3e:ad:ab:96:
41:15:c9:58:d4:e5:8e:fb:88:16:8a:6b:7d:33:14:
58:27:4a:95:f1:1d:23:97:fe:8d:39:fd:14:89:69:
93:af:ae:28:50:b8:aa:7d:a7:d2:87:cf:94:80:00:
b3:ec:6e:ef:ca:cf:30:6d:d1:a7:cc:ab:94:04:0e:
f1:8f:02:fc:ac:ef:dd:73:e9:53:dd:c8:40:db:f6:
bc:bf:8c:fd:78:de:20:8b:cf:3d:e2:9d:59:18:f2:
94:94:a2:40:08:51:00:42:b1:74:e1:ce:3b:19:e0:
f3:f1:ca:1e:57:b0:82:86:e3:c2:9a:e4:a6:68:2e:
4f:70:1b:ff:58:d7:22:1c:a1:cd:9b:8f:5b:ac:d3:
a6:f4:96:b9:d6:a8:da:d3:8b:9a:2f:a6:3d:fa:af:
3c:a3:da:5e:8e:b5:90:32:5e:7c:9b:76:10:cc:ba:
d4:37:60:45:76:65:84:fd:62:b8:c2:a7:7e:25:a8:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:41:85:83:0E:68:79:C3:8C:5F:3A:D6:39:FF:15:78:76:5F:6E:AD
X509v3 Authority Key Identifier:
keyid:66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.14.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f7:74:50:aa:64:ac:5a:7b:00:6f:3f:1f:fa:8c:79:c7:78:
67:65:fb:37:fc:1e:04:0e:1f:3a:f8:04:2d:c8:1d:56:b5:43:
04:34:ab:e3:2b:d1:f5:37:ab:d2:2b:0f:92:5c:e1:72:b8:cd:
f3:6d:e2:f4:81:3d:16:94:56:16:5e:b8:2f:97:c2:44:a3:88:
d0:99:c4:2c:88:1f:d5:55:37:74:d3:cd:8e:e3:7b:52:1f:59:
c2:bd:56:79:ed:d5:7d:87:ab:cf:d9:16:8e:5f:36:31:de:60:
86:dc:bc:14:37:af:1c:14:f4:ba:25:47:e3:75:d6:79:5f:a2:
2f:a3:8a:48:fa:f8:84:05:2e:dc:d1:02:d1:a5:1f:bc:5b:7d:
75:9c:0d:08:51:33:6b:3f:97:23:a7:cd:a2:3b:1f:ac:2d:89:
9b:0c:c0:ac:aa:57:3d:1f:0e:67:ad:69:fa:b6:68:d5:a5:82:
e8:5f:91:10:45:5e:f7:f1:5b:11:c2:70:b0:7b:94:79:00:b1:
61:36:33:39:33:5d:53:43:89:f1:b9:1a:61:8d:81:81:d1:fd:
01:30:20:24:bc:4f:e2:85:e8:d2:dd:ec:60:d1:dc:70:20:a5:
ef:ed:66:74:76:39:66:cb:e5:f3:ca:79:3c:2d:6f:45:ed:e2:
0a:f2:17:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:07:01 2025 by rpki-client