Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa
File: 3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier: fRSqCz5cJX4/cCuG8cEwdLjkMZgycHRqqNldCwAXs4A=
Subject key identifier: C8:F1:C0:FD:1B:9E:BF:17:30:E1:C7:D8:FD:6D:75:86:24:EB:8C:72
Certificate issuer: /CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Certificate serial: 531398AE9076E5C435975ABAD94C87CE84343691
Authority key identifier: 1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa
Signing time: Fri 28 Feb 2025 14:53:33 +0000
ROA not before: Fri 28 Feb 2025 14:48:33 +0000
ROA not after: Fri 27 Feb 2026 14:53:33 +0000
asID: 265919
IP address blocks: 131.196.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:13:98:ae:90:76:e5:c4:35:97:5a:ba:d9:4c:87:ce:84:34:36:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Validity
Not Before: Feb 28 14:48:33 2025 GMT
Not After : Feb 27 14:53:33 2026 GMT
Subject: CN=C8F1C0FD1B9EBF1730E1C7D8FD6D758624EB8C72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:b4:5e:e6:14:6a:b8:10:d4:9a:d8:01:d4:
24:ce:14:40:59:47:bc:8e:5c:e4:8b:9d:3a:77:28:
be:fd:73:99:a9:44:e6:0e:11:9c:f1:2a:22:51:f0:
b7:01:07:f9:5a:dc:2e:1a:a9:66:79:d4:24:fa:9c:
21:62:b6:1e:26:1a:38:b8:4b:23:fd:a0:4a:da:2c:
ad:0e:62:1d:ba:2c:78:7c:d0:c0:1a:28:9d:0d:10:
ed:f0:7a:94:e5:c2:da:d4:b4:21:d1:b6:ae:b8:73:
a9:17:17:f1:62:c0:24:44:9e:c2:84:e9:d9:71:0f:
5e:26:69:ab:81:95:9f:22:f7:f5:67:7a:18:54:1e:
0e:d6:65:0c:c7:bf:7f:c8:db:ee:09:cd:96:62:45:
70:99:66:ea:c7:ab:c0:f9:8f:9c:45:5f:e5:3e:97:
28:aa:96:4e:fb:e7:0d:98:e1:38:d0:04:1c:91:6f:
14:8e:c4:74:ec:09:2c:3b:9d:c8:83:7c:71:ee:c3:
ce:5a:d2:6d:60:d6:04:a5:6a:66:53:a9:06:3f:f4:
4a:0c:a8:aa:47:62:ce:e8:8e:b3:1a:41:71:ed:67:
21:73:b8:68:6a:8f:cf:b7:87:43:29:63:80:51:e5:
aa:d3:d0:28:53:96:96:77:7a:ba:b0:2e:0a:f2:1d:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F1:C0:FD:1B:9E:BF:17:30:E1:C7:D8:FD:6D:75:86:24:EB:8C:72
X509v3 Authority Key Identifier:
keyid:1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c7:0f:18:62:f9:ef:f2:02:c7:99:ac:3b:e9:fb:68:56:25:
7b:2d:1a:87:69:7e:08:3b:fc:f6:7f:80:1b:d4:21:7e:67:4a:
84:5c:55:19:3c:50:82:3b:99:ff:55:d7:37:19:14:13:b9:1d:
92:b7:eb:f7:04:49:aa:ea:85:e6:bc:1e:7b:38:4f:f4:98:33:
ec:76:46:a4:00:c7:ea:9f:6f:bb:61:10:e1:b7:f5:fa:dc:aa:
b0:06:99:ad:c5:e7:da:ab:73:a8:c1:af:84:02:fb:05:92:1e:
c4:33:31:e7:05:9a:ee:3b:b1:99:0c:b7:3f:dd:fb:ad:bd:8f:
a6:db:56:64:5c:2e:29:16:d6:2b:af:dd:85:4b:52:78:7e:2a:
0e:b4:2a:44:f4:31:8b:db:93:87:36:79:fe:80:40:7b:22:4b:
2c:6e:93:91:83:c1:59:38:e6:3d:84:be:af:30:dc:07:29:a3:
48:5b:03:0f:14:2f:1b:a8:3b:d0:0d:b6:6b:9b:d2:17:30:b1:
af:0a:ef:b0:07:45:81:7d:b3:5e:35:70:42:f3:7d:e8:64:35:
c5:02:67:18:95:7d:04:dc:be:c4:15:46:52:35:99:77:d3:58:
a1:5e:1b:29:83:93:49:2c:54:54:b5:e2:47:1e:f6:fa:c1:7f:
39:48:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:12 2025 by rpki-client