Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3138312e3232352e3135362e302f32322d3234203d3e20323730363930.roa
File: 3138312e3232352e3135362e302f32322d3234203d3e20323730363930.roa (raw, json)
Hash identifier: PSd05vQDoptvQhIo/FnAJsNeeApeFOC592wfRMk8hYw=
Subject key identifier: DF:5F:94:84:97:69:21:7D:E4:37:55:21:4C:A5:48:20:56:38:54:A6
Certificate issuer: /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial: 78B0C5CA62E02F7F9FA140CB75B9D98FCA354217
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3138312e3232352e3135362e302f32322d3234203d3e20323730363930.roa
Signing time: Wed 05 Mar 2025 19:26:04 +0000
ROA not before: Wed 05 Mar 2025 19:21:04 +0000
ROA not after: Wed 04 Mar 2026 19:26:04 +0000
asID: 270690
IP address blocks: 181.225.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b0:c5:ca:62:e0:2f:7f:9f:a1:40:cb:75:b9:d9:8f:ca:35:42:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Validity
Not Before: Mar 5 19:21:04 2025 GMT
Not After : Mar 4 19:26:04 2026 GMT
Subject: CN=DF5F94849769217DE43755214CA54820563854A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1e:db:d5:1b:b4:1f:1c:59:d2:cb:f9:18:3f:
b4:c8:b7:8c:31:0d:93:fd:99:12:9a:77:9d:17:e9:
a4:34:66:48:67:d2:4f:bb:96:aa:62:89:7c:2e:10:
5d:45:e8:dc:74:6a:94:24:a8:6b:57:fb:e5:8e:d0:
7e:a3:41:95:91:8f:0b:f1:fe:f2:ff:bc:a3:48:cd:
fc:1d:29:1b:ca:6b:9e:01:49:d7:63:cd:39:c1:2e:
99:ee:40:46:ad:91:0d:32:cb:02:1f:ca:b1:8c:da:
2b:a9:59:2a:ed:da:21:5a:c4:14:57:04:61:10:0c:
57:09:20:54:bb:ce:56:08:35:da:20:5a:a7:b4:aa:
a6:21:13:9d:d8:b5:8e:37:38:e6:91:6b:59:96:49:
73:f1:0e:1c:a8:8c:43:88:e1:26:b0:c4:ec:0e:7c:
20:6f:3f:c8:67:40:ea:5d:c1:b7:e4:0e:91:bd:a4:
51:92:64:11:c6:2c:d1:4e:94:cd:5c:c6:19:f7:2c:
da:00:ec:c9:e0:44:74:b3:94:fd:6c:39:65:a0:51:
9e:60:b4:26:a9:45:34:90:60:7d:8b:b2:a5:4e:2a:
4f:a2:29:ad:44:f6:05:63:46:6e:2b:57:fb:83:f0:
b1:67:37:fa:0a:78:cd:de:64:45:fb:a2:1e:51:89:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5F:94:84:97:69:21:7D:E4:37:55:21:4C:A5:48:20:56:38:54:A6
X509v3 Authority Key Identifier:
keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3138312e3232352e3135362e302f32322d3234203d3e20323730363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.225.156.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:e1:d5:42:25:70:8a:32:61:4f:34:76:47:1b:32:04:95:31:
2e:4e:ac:1c:61:71:94:bd:ef:ee:b0:76:80:a2:6b:ff:fb:9e:
9f:e6:53:d7:05:54:90:a2:89:bd:0c:3b:1b:88:30:60:6a:bc:
aa:70:54:ec:63:b7:86:b9:9b:2f:89:51:1a:3a:ee:73:f9:be:
12:06:b4:9a:07:bc:06:30:38:5b:d6:9b:67:b6:0a:59:d9:64:
3b:57:44:b3:39:a5:ed:1a:94:54:34:74:56:7d:b1:5d:84:0f:
da:81:d3:ce:c8:4f:48:4f:43:29:d0:2d:74:1e:d4:28:c1:e7:
19:b4:29:eb:4a:5c:08:42:82:04:83:09:3d:51:e1:5d:ce:0d:
f7:10:cd:10:f4:ce:4f:02:19:07:4e:2f:2d:2a:a7:1d:c8:79:
42:58:ea:49:70:9f:94:32:42:01:02:17:bc:82:d4:3a:46:88:
78:1c:fd:1a:cf:08:69:43:c1:3f:ad:7e:45:c8:31:e4:d2:4c:
99:a5:ba:01:27:22:b5:a3:e4:3c:aa:5f:43:66:29:77:ed:1a:
be:02:73:9e:e7:18:75:c1:91:e2:45:cf:8e:71:fb:79:10:25:
8d:47:7f:50:5e:fb:28:cf:38:a0:30:2a:c5:c1:1c:c6:7b:c5:
aa:7f:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:28 2025 by rpki-client