Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132302e302f32332d3233203d3e20323634303336.roa
File: 3134332e3133372e3132302e302f32332d3233203d3e20323634303336.roa (raw, json)
Hash identifier: ryd99ALxexEyhNf2KhXAptM2tgrN4FBV85w3W3J+UU4=
Subject key identifier: 75:01:3E:CD:0D:B1:65:78:FF:AF:A2:71:10:92:51:FC:79:5D:0B:71
Certificate issuer: /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial: 159CA40D26563E76C6A55A69362F04A57ACC4E80
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132302e302f32332d3233203d3e20323634303336.roa
Signing time: Mon 03 Mar 2025 12:19:53 +0000
ROA not before: Mon 03 Mar 2025 12:14:53 +0000
ROA not after: Mon 02 Mar 2026 12:19:53 +0000
asID: 264036
IP address blocks: 143.137.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9c:a4:0d:26:56:3e:76:c6:a5:5a:69:36:2f:04:a5:7a:cc:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Validity
Not Before: Mar 3 12:14:53 2025 GMT
Not After : Mar 2 12:19:53 2026 GMT
Subject: CN=75013ECD0DB16578FFAFA271109251FC795D0B71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:70:35:cc:b6:0a:6e:dd:f2:5e:8f:ea:97:7b:
c9:d1:5b:f7:17:b9:ba:fe:fd:56:92:3f:85:23:7a:
bf:70:de:01:f0:d0:a4:61:77:d6:cf:e7:28:2c:59:
d7:52:17:3f:e9:f1:3c:43:8f:f4:9b:07:0e:6c:3a:
81:9b:29:ab:66:58:36:e3:d1:02:3b:c7:d7:55:63:
49:82:11:cb:d2:f4:79:ac:79:4a:e9:2a:ca:18:ab:
5a:95:bb:df:d7:ef:d1:8c:46:bb:6e:b9:0c:f4:50:
ea:77:1d:20:02:b1:14:a6:48:70:39:d1:8f:4f:92:
13:f9:e0:4a:0f:36:f5:7c:2d:5c:ea:27:fb:d1:ae:
df:ac:a3:16:a9:20:14:02:72:c7:9f:63:65:e7:60:
23:6b:fb:0d:e1:cb:2a:95:0b:f4:f2:d5:6f:f7:44:
53:1e:74:48:33:fc:76:ae:31:2b:b2:0a:20:84:08:
85:55:5d:74:c1:a3:28:3a:99:5e:7c:fd:eb:d0:6a:
d7:06:bd:e6:44:e4:df:37:22:41:98:64:a3:34:33:
5d:81:f3:f4:15:6f:5b:52:e2:19:72:2b:60:88:61:
50:9f:06:65:4e:7c:4f:f2:c3:25:b9:d1:6e:b1:c5:
1e:d1:55:ea:48:3b:f5:d9:66:34:ae:8e:3f:1f:cc:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:01:3E:CD:0D:B1:65:78:FF:AF:A2:71:10:92:51:FC:79:5D:0B:71
X509v3 Authority Key Identifier:
keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132302e302f32332d3233203d3e20323634303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.120.0/23
Signature Algorithm: sha256WithRSAEncryption
76:7e:ad:cc:2b:c1:48:71:a2:ce:54:ae:86:ff:15:52:df:15:
2c:2a:52:c8:8f:ee:bc:8f:19:a1:62:a0:ef:db:a9:92:7c:4a:
bc:66:6a:e5:62:29:22:e7:33:ae:d3:20:39:3f:98:b2:dc:9e:
8c:c9:4c:cd:d2:7e:07:41:5e:1e:7b:f4:ce:78:78:5c:2f:55:
ae:48:a8:37:88:57:72:61:ad:12:b0:d5:9b:de:ce:ad:ee:c8:
53:fe:f3:65:62:84:a5:66:23:99:17:7a:e1:83:b5:28:59:e5:
aa:eb:fe:59:ae:81:da:4e:a0:35:b4:78:b3:96:e5:ca:51:db:
76:11:37:b0:77:3a:c4:7c:b3:e6:ea:ea:63:29:2d:ce:0a:a2:
aa:d3:df:a8:bc:61:5e:2e:e0:9c:63:44:05:1e:da:52:f1:b3:
e1:a1:b0:4a:62:94:07:71:e9:bd:c0:f1:ee:4a:dc:8f:22:6c:
e8:12:ce:cc:dd:0a:11:71:72:7e:3f:b3:37:cb:13:84:82:0c:
ce:98:4e:39:85:4b:8c:32:45:13:e0:f8:7b:c9:ec:3f:cb:9f:
dc:31:95:b2:fb:a3:66:b9:f7:d1:2c:46:93:48:0a:15:e7:a1:
b0:70:b4:a8:a2:bb:4c:f2:13:cb:fd:b2:ce:70:c5:66:de:fa:
54:20:e8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:19:29 2025 by rpki-client