Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/3138362e3232352e3234302e302f32302d3234203d3e203533313735.roa
File: 3138362e3232352e3234302e302f32302d3234203d3e203533313735.roa (raw, json)
Hash identifier: w0owl7DF+mAIOGXYpwnTswecX/S7RFKkX0sboH3wAh8=
Subject key identifier: 85:C7:3D:A2:C3:4C:9A:24:B5:D2:14:02:91:BE:EC:DE:ED:F5:87:F0
Certificate issuer: /CN=B87E403FD04360E1BA519D841853FF5C9E675A23
Certificate serial: 790422E5B57757883A2FE7D0752981CA9568D28C
Authority key identifier: B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/3138362e3232352e3234302e302f32302d3234203d3e203533313735.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 53175
IP address blocks: 186.225.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:04:22:e5:b5:77:57:88:3a:2f:e7:d0:75:29:81:ca:95:68:d2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B87E403FD04360E1BA519D841853FF5C9E675A23
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=85C73DA2C34C9A24B5D2140291BEECDEEDF587F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:29:dc:8b:9b:8f:8b:ba:0d:d3:e9:4b:02:
27:73:0c:02:63:33:ce:37:38:ac:ad:88:19:57:c7:
38:18:ff:97:57:da:5b:fe:f7:cc:90:ad:0a:58:cc:
dc:93:eb:35:90:a3:21:6e:60:ed:a0:26:eb:41:59:
5e:0a:b0:3c:67:de:3f:6a:96:a2:0d:e2:77:55:49:
63:06:59:fe:35:14:69:53:3a:22:f6:ca:fa:e3:87:
79:2f:1d:d2:4a:d3:bf:04:f1:9b:46:39:54:e5:b3:
80:e6:ba:60:a9:6f:fb:b3:32:58:16:4b:73:a3:33:
7b:f0:29:9b:19:1a:e4:77:a1:59:76:7d:b1:d0:92:
d7:dd:1a:24:70:43:9e:2e:3b:76:ce:9b:ba:26:45:
fc:00:d5:55:25:77:5f:a4:b7:a2:5a:e7:55:30:1f:
25:f0:8f:52:b0:54:df:3d:b3:b8:e0:1b:3c:e2:c7:
9d:9b:ed:fd:2f:0a:2b:92:df:7e:93:16:de:85:df:
32:b4:97:f7:26:6b:ff:e2:76:cb:fd:55:a8:57:5c:
9e:b0:e2:a1:5c:1f:88:f8:93:fc:c7:63:af:8a:ae:
47:15:84:5a:de:e6:2f:5e:34:6c:c4:25:35:3d:5d:
3c:09:bd:cd:30:a0:6d:26:9d:52:cb:40:1e:77:ea:
f0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C7:3D:A2:C3:4C:9A:24:B5:D2:14:02:91:BE:EC:DE:ED:F5:87:F0
X509v3 Authority Key Identifier:
keyid:B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/3138362e3232352e3234302e302f32302d3234203d3e203533313735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.225.240.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:20:fe:7a:a9:67:56:63:a8:43:d5:94:3d:b8:86:12:57:2b:
3e:bb:91:b4:3b:02:f3:6a:bd:9e:5c:7c:62:4d:a3:21:53:99:
2c:31:05:3d:63:9b:30:4b:d8:a3:96:7f:75:8b:0e:36:c1:e1:
ba:96:5c:0e:a6:40:ac:03:1f:33:0a:27:b2:e5:dd:35:72:d0:
34:95:0b:21:dc:69:8a:a3:f7:4f:96:86:eb:49:76:10:e2:33:
6c:cc:00:0e:61:a7:10:a2:f3:c4:c3:db:de:10:46:07:28:16:
0a:a8:49:8e:3e:d0:fa:65:38:a2:dc:d4:fe:e2:2e:53:76:5d:
f7:c0:e3:23:20:d9:42:8d:2f:d0:d6:f5:30:c0:d9:87:51:16:
0a:5d:73:7b:73:41:bf:64:f1:f0:60:28:2d:f0:09:ca:76:25:
c7:cf:c0:b7:aa:5f:73:1c:77:d7:cf:b3:81:ec:58:45:9b:39:
45:0e:f5:0f:85:5f:75:b4:6f:e3:c0:81:81:80:96:65:5d:3d:
4d:42:ba:b3:59:68:d8:ff:96:df:ad:1b:43:64:e9:c6:a8:50:
a0:7c:24:e2:a4:52:4e:3b:72:4a:2b:d9:8b:2c:6d:15:47:71:
d3:f6:52:37:35:b7:c6:f1:92:2a:6d:78:43:36:0c:b3:e9:99:
c7:d5:db:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:02:42 2025 by rpki-client