Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e31312e302f32342d3234203d3e20323633323536.roa
File: 3139382e35382e31312e302f32342d3234203d3e20323633323536.roa (raw, json)
Hash identifier: TcrMTvzOJcr6fmbQkQbQ8T1lk1IjZEgEvc6f4S9PXqc=
Subject key identifier: 06:42:87:6F:9F:D2:B4:97:51:C7:64:5F:9B:C5:0B:F1:40:E4:87:8A
Certificate issuer: /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial: 5AC2E01C3DDAAE3EB684DE2DCEB89CF23500DFBA
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e31312e302f32342d3234203d3e20323633323536.roa
Signing time: Fri 10 Jan 2025 16:41:53 +0000
ROA not before: Fri 10 Jan 2025 16:36:53 +0000
ROA not after: Fri 09 Jan 2026 16:41:53 +0000
asID: 263256
IP address blocks: 198.58.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c2:e0:1c:3d:da:ae:3e:b6:84:de:2d:ce:b8:9c:f2:35:00:df:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Validity
Not Before: Jan 10 16:36:53 2025 GMT
Not After : Jan 9 16:41:53 2026 GMT
Subject: CN=0642876F9FD2B49751C7645F9BC50BF140E4878A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:af:e6:f0:bb:d1:06:43:c4:6f:d5:bd:84:
d4:6b:d6:02:ac:f9:a0:4b:5b:db:51:78:e0:4d:7d:
d6:d5:f1:6a:30:5d:b5:d7:ab:15:91:f4:52:8f:a0:
40:50:00:b0:3c:34:60:be:7e:0b:34:4c:ff:ae:e7:
08:a0:b6:9d:67:f6:d0:ae:c6:d2:a2:91:31:0f:79:
50:d4:a1:a6:79:28:f8:26:71:4f:c6:bb:0b:3b:2e:
01:ce:cf:a3:24:45:b3:30:f7:bc:61:97:e6:1a:d1:
3b:b1:5c:3b:de:42:5e:60:55:f6:f4:61:db:72:91:
2c:f9:26:c8:ec:fc:3e:57:c1:a3:ad:13:db:8c:52:
16:de:ac:e2:a5:7f:df:15:46:84:e7:ab:0e:54:f4:
ff:60:99:56:00:8a:53:b9:f8:1f:a7:b2:c2:b8:1c:
ef:75:2d:e5:3a:2f:4a:5c:3d:b9:0f:92:48:62:33:
8f:81:76:9d:f1:12:f3:1f:c8:05:c5:dc:98:09:28:
d9:52:61:37:4a:c3:ea:4c:e6:0d:57:96:7f:9f:c8:
b6:e0:b3:82:8e:c3:5d:16:bf:bb:d4:3e:93:f9:54:
31:e1:55:e0:13:d5:a4:18:20:e6:a0:cb:12:92:ef:
2e:2e:c1:c5:b7:6e:7f:69:03:f5:2c:d9:b1:ef:0e:
83:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:42:87:6F:9F:D2:B4:97:51:C7:64:5F:9B:C5:0B:F1:40:E4:87:8A
X509v3 Authority Key Identifier:
keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e31312e302f32342d3234203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.58.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:78:62:8b:57:09:be:1f:82:4e:e5:2f:d1:ec:cb:aa:41:f4:
9e:e8:b5:73:6d:88:ff:b0:b8:6f:66:96:d5:88:91:ea:21:4f:
06:d2:33:8c:8b:d5:7b:1d:4c:04:fc:49:6e:4d:a9:5e:7d:42:
a4:7b:4e:ac:6b:4b:a8:c0:5f:7e:e2:ca:98:a5:ce:a0:0e:92:
8a:66:91:da:1c:44:20:c4:53:58:fb:2a:a9:e9:13:be:b7:c4:
e4:21:87:d6:1f:e0:24:b9:d0:44:ee:e1:6c:9d:47:93:a5:61:
cc:bf:64:0b:c6:2f:cb:d2:39:68:3a:1c:13:aa:69:f7:56:6b:
9d:58:cc:93:ce:e7:09:56:0c:f5:8e:9d:93:1e:60:a8:fc:82:
73:35:bc:6a:2e:40:1e:9b:0c:dd:2a:b9:ef:34:1d:d5:55:5c:
4d:70:1a:e2:04:e7:1f:87:09:36:02:fa:aa:2d:48:cf:75:e8:
23:c4:52:9c:e3:3d:63:81:57:2d:bd:ea:a9:c9:ad:e5:5e:5a:
24:58:d5:77:78:76:35:43:42:51:ed:35:17:77:7e:28:1d:67:
d1:ef:c6:a3:76:f2:94:4f:f2:25:36:d8:e1:a1:c8:74:40:80:
19:f2:4e:b2:02:23:c3:2e:4e:a4:5b:5b:12:88:63:eb:a5:89:
1d:76:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:45:25 2025 by rpki-client