Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31352e302f32342d3234203d3e20323731343638.roa
File: 3138312e3232342e31352e302f32342d3234203d3e20323731343638.roa (raw, json)
Hash identifier: Zm28+mTGmRsiJ+nnrq+BHy6pf5akOA83SIj0F3/9EXk=
Subject key identifier: 01:BF:7B:92:3A:62:57:99:C6:50:F9:5A:1C:15:28:7B:A0:BB:0A:45
Certificate issuer: /CN=66F999D364628A7CC2634117B086F1A07B01449C
Certificate serial: 521800C83153ECDB1988FC0ADC131669B4FD352D
Authority key identifier: 66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31352e302f32342d3234203d3e20323731343638.roa
Signing time: Wed 19 Feb 2025 10:33:35 +0000
ROA not before: Wed 19 Feb 2025 10:28:35 +0000
ROA not after: Wed 18 Feb 2026 10:33:35 +0000
asID: 271468
IP address blocks: 181.224.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:18:00:c8:31:53:ec:db:19:88:fc:0a:dc:13:16:69:b4:fd:35:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66F999D364628A7CC2634117B086F1A07B01449C
Validity
Not Before: Feb 19 10:28:35 2025 GMT
Not After : Feb 18 10:33:35 2026 GMT
Subject: CN=01BF7B923A625799C650F95A1C15287BA0BB0A45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2f:a5:7a:c4:f3:61:42:76:41:f8:0b:56:f8:
31:5f:20:60:d3:dd:a0:f0:20:ab:b3:cc:a2:a6:5c:
6b:11:3f:95:53:74:7c:3e:66:e7:ce:b0:d8:d5:6f:
71:06:b7:f3:10:91:f3:cf:0b:f0:36:5a:89:c3:43:
93:9d:3d:16:61:56:1e:87:60:e1:33:66:75:bd:c7:
4e:1c:5d:5b:20:bc:21:1d:5f:6b:2d:f5:d9:4f:fa:
99:28:4c:33:ec:e1:d5:39:7e:1c:72:b2:42:32:53:
29:b1:44:79:6b:a2:2c:96:ce:a5:50:9c:2e:bd:f4:
26:50:d7:a8:de:ca:ba:56:01:02:53:63:ea:a6:a6:
82:22:57:ef:4a:43:3f:84:79:d3:21:56:d1:b3:c6:
39:5e:ae:26:39:58:ad:02:89:09:54:99:fe:50:6e:
36:03:30:10:35:8f:4d:3a:79:1d:6d:c2:71:df:6d:
3f:aa:3d:31:d6:49:9b:2e:d0:c2:69:a7:5e:84:1f:
c6:1a:b5:6b:82:8d:57:0b:d0:d0:39:2f:2e:1d:59:
fd:59:41:a1:db:b9:e4:6b:4e:92:fc:74:73:3e:10:
1a:12:c8:a7:a7:b1:e2:0e:43:1e:42:fc:f5:1b:e8:
db:0f:62:8e:1f:a6:33:32:7d:d3:b3:e9:c3:13:a5:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BF:7B:92:3A:62:57:99:C6:50:F9:5A:1C:15:28:7B:A0:BB:0A:45
X509v3 Authority Key Identifier:
keyid:66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31352e302f32342d3234203d3e20323731343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.15.0/24
Signature Algorithm: sha256WithRSAEncryption
84:7d:79:3a:28:c2:a6:88:e8:7b:09:53:f2:1a:97:da:c9:d4:
23:c3:c2:92:99:e3:fc:3e:91:0d:b3:e0:b2:62:33:80:28:0b:
ef:35:7c:52:9a:06:65:e4:a5:3a:d2:69:7d:b3:12:ea:06:c8:
7c:a7:9f:af:8b:b3:9f:5a:b8:85:30:57:84:63:5c:0c:55:7e:
88:d9:47:12:f7:15:79:0b:38:81:71:65:b1:d4:01:9c:26:7e:
69:79:42:db:aa:0f:02:91:ad:ad:7d:29:6c:42:ee:e7:05:d9:
80:01:99:7e:27:45:fd:1e:97:8d:13:a4:ee:21:74:e3:8b:a3:
40:1d:2e:bb:94:2e:ba:ba:e9:48:0b:16:91:d7:23:66:5f:3d:
be:0b:51:66:db:b3:15:10:5e:8d:64:04:11:3c:74:f4:d2:64:
72:c3:7d:57:1e:a2:dd:45:73:de:66:a8:dc:d3:5c:32:b6:e8:
74:b0:a1:b1:5d:ab:29:79:90:f8:eb:96:a2:e2:bf:1b:5d:5f:
21:6c:09:10:47:a4:5a:a7:f9:05:42:32:40:c8:03:d7:7b:70:
16:79:28:ac:30:f8:1a:50:86:93:03:f9:25:c6:0d:9b:74:7b:
f2:8b:e9:bb:07:bc:fc:11:a5:87:3b:56:f6:b1:5d:1a:79:f9:
1b:bf:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:41:11 2025 by rpki-client