Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e31312e302f32342d3234203d3e20323633323536.roa
File: 3139382e35382e31312e302f32342d3234203d3e20323633323536.roa (raw, json)
Hash identifier: Y41MueG3o5nRGY1Az0Z1KU73uM1q4YkQbDGOGlJ6hzo=
Subject key identifier: 24:D9:73:3F:90:F4:2A:8F:8A:68:3B:31:62:E4:67:F3:C3:6A:8F:89
Certificate issuer: /CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Certificate serial: 3C428FB3DDDDBAF80F1D2574C305823A61865D77
Authority key identifier: 01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e31312e302f32342d3234203d3e20323633323536.roa
Signing time: Fri 23 May 2025 16:53:06 +0000
ROA not before: Fri 23 May 2025 16:48:06 +0000
ROA not after: Fri 22 May 2026 16:53:06 +0000
asID: 263256
IP address blocks: 198.58.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:42:8f:b3:dd:dd:ba:f8:0f:1d:25:74:c3:05:82:3a:61:86:5d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Validity
Not Before: May 23 16:48:06 2025 GMT
Not After : May 22 16:53:06 2026 GMT
Subject: CN=24D9733F90F42A8F8A683B3162E467F3C36A8F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6c:2d:4d:a2:d3:11:bc:42:73:4b:16:51:ed:
4c:48:02:db:2d:5b:c5:12:95:1b:37:40:2e:28:93:
43:d6:c9:e1:d0:ce:31:51:c8:85:cf:4f:7d:d4:73:
d4:53:c7:43:89:ca:42:ce:e5:2c:97:0e:79:2c:4b:
fa:be:7b:b1:95:d5:88:7a:f8:10:5d:c8:91:64:fd:
50:49:6e:ad:8a:df:6c:74:56:3b:36:6b:b1:30:5a:
c9:f7:72:57:3d:5e:db:45:ab:f1:d2:21:be:7d:04:
7c:26:10:f5:4c:c4:aa:ac:29:3f:65:77:3a:a5:97:
23:09:72:59:f3:34:34:3d:4c:33:7f:68:6b:d4:45:
a6:41:9e:a6:a1:4d:0d:86:10:65:95:4b:ff:77:3d:
8e:a5:bb:b5:ca:d2:8d:fe:00:e7:9a:8a:cd:a1:85:
65:1c:e1:d2:83:c6:71:5e:42:f5:74:31:59:e3:62:
37:e8:71:65:cb:dc:07:3a:03:ee:23:bb:86:94:5b:
8e:34:d5:3c:c7:e1:9f:65:dc:0d:0a:61:eb:2a:d4:
d7:4d:38:ed:5b:42:92:89:46:8a:65:e2:f1:f6:54:
77:fe:89:8c:a2:d1:3d:30:16:01:d1:6e:e8:30:23:
ee:22:c6:17:f4:b2:14:1a:42:50:6e:9c:03:e1:f5:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:73:3F:90:F4:2A:8F:8A:68:3B:31:62:E4:67:F3:C3:6A:8F:89
X509v3 Authority Key Identifier:
keyid:01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/0156B956215AE4C7F951D9FABA7689B0C1830680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e31312e302f32342d3234203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.58.11.0/24
Signature Algorithm: sha256WithRSAEncryption
51:10:40:cb:d2:93:53:c4:79:a0:fe:bb:5b:5b:a0:c0:eb:7b:
25:0c:73:a7:8f:c7:9b:6d:3e:73:cb:f3:0f:47:08:2c:e4:e0:
c6:e9:61:c2:16:99:fd:af:1a:08:62:12:f0:d0:7c:ae:28:d1:
5f:b5:9c:e2:a5:94:9d:59:0f:94:ec:62:8a:3f:39:ab:72:57:
c1:c4:ca:71:f3:db:2d:68:74:89:6a:df:6c:5f:14:27:0c:90:
67:43:fd:ed:a8:ff:29:3e:9b:af:63:1d:6c:41:e4:7f:6d:65:
53:55:83:91:b9:ab:25:71:9b:b9:52:c8:d9:81:a4:1a:81:a0:
3a:d9:de:d9:1e:49:a3:b1:7c:db:02:77:1b:ab:8f:cf:fb:c1:
98:e8:5d:02:64:ba:98:08:30:f0:d6:6e:05:80:4e:f8:33:11:
f2:d6:f0:05:14:19:ed:21:a9:a5:94:b6:98:ac:10:17:c7:82:
10:d0:08:a5:8a:69:b3:f8:9a:bf:87:79:f1:06:7e:b2:e9:19:
93:d8:85:80:be:6f:2d:5b:3a:8f:76:b5:84:58:51:ae:a0:23:
73:46:6c:f0:8f:58:48:27:0a:a0:61:75:4a:d0:4b:e1:19:e9:
d5:c8:6d:cc:74:bf:50:b6:c7:68:c8:72:f4:06:3e:34:0c:8d:
0b:37:4f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:52:50 2025 by rpki-client