Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/3230302e3139322e3135322e302f32342d3234203d3e203631363133.roa
File: 3230302e3139322e3135322e302f32342d3234203d3e203631363133.roa (raw, json)
Hash identifier: HtDhyIfw3jNHYiZkcT8lwXkEYVkwLL93Y2AOhrtvGK4=
Subject key identifier: B8:59:A5:D7:79:64:FD:A0:9F:31:BE:F0:D2:2B:75:22:99:EF:81:82
Certificate issuer: /CN=C5CF9FEDBE2481D771195D06081D49FA4AF07171
Certificate serial: 176A3CCD14BE38C45E64D20731A1331C663707AE
Authority key identifier: C5:CF:9F:ED:BE:24:81:D7:71:19:5D:06:08:1D:49:FA:4A:F0:71:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/3230302e3139322e3135322e302f32342d3234203d3e203631363133.roa
Signing time: Tue 18 Mar 2025 00:48:11 +0000
ROA not before: Tue 18 Mar 2025 00:43:11 +0000
ROA not after: Tue 17 Mar 2026 00:48:11 +0000
asID: 61613
IP address blocks: 200.192.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6a:3c:cd:14:be:38:c4:5e:64:d2:07:31:a1:33:1c:66:37:07:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5CF9FEDBE2481D771195D06081D49FA4AF07171
Validity
Not Before: Mar 18 00:43:11 2025 GMT
Not After : Mar 17 00:48:11 2026 GMT
Subject: CN=B859A5D77964FDA09F31BEF0D22B752299EF8182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:09:9b:c8:7d:74:d9:b6:b4:63:af:5e:95:
29:a1:2f:32:30:26:bd:17:2b:92:ce:de:10:69:74:
d9:89:27:85:ef:e4:8b:da:fa:dd:c0:db:2a:a3:01:
49:c5:0c:76:5a:a4:99:9d:f8:8d:3b:ba:31:14:aa:
e0:f3:38:da:6f:51:90:35:a7:51:27:e5:31:5b:b0:
c1:5d:9a:58:a2:11:cc:ef:3d:d0:d9:b9:83:65:b9:
40:86:56:5e:6a:d2:a2:b0:13:70:b8:a5:89:ee:2a:
b3:27:27:6c:16:2e:9a:0f:fe:05:ed:f2:d0:3a:65:
48:15:2e:2d:4a:0c:ad:d0:0d:36:7f:0b:75:2a:33:
c1:c1:63:7d:e0:17:5f:e0:81:40:b5:9e:0f:0b:46:
7e:c4:68:c4:35:07:76:8b:1b:93:99:d9:aa:a4:e5:
7a:bf:6a:52:0f:98:f5:c1:44:40:f9:d6:16:8f:9e:
1f:a6:62:04:d6:bd:29:3d:31:b2:9a:b1:8e:57:dc:
ec:7a:ff:19:f8:f1:b1:3c:64:79:4d:ca:7b:75:a0:
f9:7e:4c:96:1d:df:9a:e5:e8:ba:16:02:d2:ee:6b:
39:10:5b:34:0a:32:1a:18:1d:84:bf:7c:e7:f7:db:
0d:89:e7:47:86:14:65:bf:95:d3:c0:4b:76:37:46:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:59:A5:D7:79:64:FD:A0:9F:31:BE:F0:D2:2B:75:22:99:EF:81:82
X509v3 Authority Key Identifier:
keyid:C5:CF:9F:ED:BE:24:81:D7:71:19:5D:06:08:1D:49:FA:4A:F0:71:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/3230302e3139322e3135322e302f32342d3234203d3e203631363133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.192.152.0/24
Signature Algorithm: sha256WithRSAEncryption
81:bd:ea:61:4d:cd:54:72:df:37:5e:8a:79:50:06:e6:72:d6:
58:8b:2a:01:c2:52:22:a4:85:a2:7a:11:bc:4b:e6:49:50:a8:
45:6f:a6:52:d6:84:65:53:9d:3b:bb:26:eb:d1:88:53:d0:08:
e2:11:c5:00:5d:74:7a:ad:e9:51:c6:a3:0b:dc:ac:d4:10:7c:
0a:a2:79:6c:29:75:41:58:b7:ca:8d:74:1f:44:47:1a:2f:80:
48:cb:1f:c2:0e:8e:42:15:09:fb:5e:15:5f:0c:20:4c:d5:0f:
cd:ae:9a:71:5e:ce:05:86:46:9f:fe:5f:d0:7f:99:1c:04:50:
97:6b:c9:1c:ff:0c:56:c3:13:68:9c:e0:47:41:e4:8e:42:dd:
30:1e:74:c7:30:fd:0f:e7:64:ad:19:e5:5b:a5:1b:ad:21:10:
bc:39:41:05:c8:23:34:b9:c6:d1:6d:5e:4c:c2:4d:b5:99:98:
71:af:91:80:6a:6c:11:13:45:f7:3a:61:6e:a3:bb:10:a3:ea:
1d:9a:06:31:8a:32:fe:e4:21:de:8e:43:ce:48:06:d1:82:10:
c3:46:cf:21:70:c5:8f:3e:bd:12:7c:d3:2f:3c:47:ce:b0:d7:
f5:de:c0:ae:46:0b:67:50:3f:89:e2:02:c4:ca:61:8e:9c:ba:
f4:bd:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:02:18 2025 by rpki-client