Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32322d3232203d3e203631373238.roa
File: 3133312e37322e35362e302f32322d3232203d3e203631373238.roa (raw, json)
Hash identifier: jZz7X/F0KiEMFJqEZUAvKOQmYigLQZYGdxcufcixMxE=
Subject key identifier: 76:9A:EE:5F:C7:58:74:5A:40:3E:2D:B2:B0:58:EF:3F:65:83:40:44
Certificate issuer: /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial: 18B6CB6E14EB6B42AC3B0C8AE04CBD2D9FD3B584
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32322d3232203d3e203631373238.roa
Signing time: Thu 17 Apr 2025 22:00:00 +0000
ROA not before: Thu 17 Apr 2025 21:55:00 +0000
ROA not after: Thu 16 Apr 2026 22:00:00 +0000
asID: 61728
IP address blocks: 131.72.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b6:cb:6e:14:eb:6b:42:ac:3b:0c:8a:e0:4c:bd:2d:9f:d3:b5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Validity
Not Before: Apr 17 21:55:00 2025 GMT
Not After : Apr 16 22:00:00 2026 GMT
Subject: CN=769AEE5FC758745A403E2DB2B058EF3F65834044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:85:32:a9:f3:3c:68:e1:36:3d:bc:9a:cd:
59:e6:42:49:0c:ea:e0:fe:4c:9c:0c:59:b6:23:36:
73:be:40:46:38:fd:f1:87:8f:32:70:7f:27:d1:f9:
8f:1e:68:88:a3:86:25:2e:aa:b5:4c:01:a7:23:05:
8a:23:f8:e7:36:62:16:c5:62:cf:24:ad:15:61:d5:
d6:f4:78:8c:49:17:1f:8b:a2:4e:20:08:b8:98:96:
17:39:0c:0c:07:13:da:f6:25:ff:27:07:a4:29:59:
f7:49:57:9d:6b:00:28:f6:aa:28:a3:10:07:7f:e9:
5c:f3:ab:58:e0:a6:8d:9e:68:67:70:38:07:9a:b5:
63:07:38:35:89:66:23:6e:4f:12:ee:c4:f9:ed:3b:
2f:bc:21:4e:d0:8d:48:fd:ff:00:57:61:cb:dd:c1:
87:7c:c9:00:75:ee:1b:8d:b8:0d:61:0b:7f:6f:c1:
35:fe:3a:9a:28:a6:71:db:1f:3d:4c:91:13:39:fa:
15:9d:40:33:ed:77:ac:ba:c8:05:23:6a:9a:48:ec:
d7:08:84:e5:19:43:b6:b2:95:ff:63:48:e5:9e:f8:
21:94:01:78:e3:9c:01:f2:c0:9a:50:20:f0:8b:7d:
ba:b3:26:79:80:a6:15:63:48:55:ca:27:8e:74:d6:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9A:EE:5F:C7:58:74:5A:40:3E:2D:B2:B0:58:EF:3F:65:83:40:44
X509v3 Authority Key Identifier:
keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/3133312e37322e35362e302f32322d3232203d3e203631373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:d8:85:3f:c5:59:6b:99:13:ae:3e:fc:d6:2c:9c:4a:35:ed:
b4:5a:7e:9d:e9:83:61:33:a1:87:d4:70:4b:a3:98:c3:87:70:
59:0d:f5:62:f1:a8:02:e9:8e:3f:3e:b5:35:50:28:b7:55:79:
07:7d:97:df:64:d3:26:85:96:69:b9:6a:62:1b:c0:c9:cf:6e:
b9:f3:cc:2a:35:13:a7:6c:d9:68:24:5c:09:1f:96:61:d9:f5:
c0:ae:b4:36:ad:fc:74:e3:af:ff:6c:87:6d:62:30:4f:5a:9f:
30:5b:bd:16:4c:fa:42:1a:94:1e:0e:43:3e:71:8b:49:a6:9b:
c6:b9:50:76:52:76:cf:3c:5b:04:0d:7f:11:09:34:e1:f8:a8:
ee:92:2f:ed:a3:1c:bf:e3:15:77:ef:09:30:d4:52:62:65:fc:
9f:62:02:32:ea:29:2d:63:6a:05:a9:47:b9:fd:f6:81:69:33:
21:0a:9e:ce:1d:00:25:a7:cb:b6:db:2c:42:f2:e7:31:41:4f:
bb:a1:9f:79:07:24:91:87:2a:31:f6:ae:b0:bb:6a:97:4f:8a:
2a:b2:bf:78:4f:f4:62:92:e7:19:5a:21:82:5a:7a:c4:47:c4:
95:39:ff:1e:4d:7b:a7:4f:ba:66:5e:66:04:68:43:23:0c:eb:
75:bf:6c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:09:40 2025 by rpki-client