Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132302e302f32342d3234203d3e20323634303336.roa
File: 3134332e3133372e3132302e302f32342d3234203d3e20323634303336.roa (raw, json)
Hash identifier: IYnRJOJGCWOvDVdNml+C+iDdjfXNpmDzHOpWb69CBLs=
Subject key identifier: 03:9C:5B:8D:2B:72:66:53:E4:77:20:9A:3D:CF:B4:74:4E:62:19:56
Certificate issuer: /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial: 18A135F9000B9797CADB618CA6991B5A4000DCB3
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132302e302f32342d3234203d3e20323634303336.roa
Signing time: Mon 03 Mar 2025 12:19:53 +0000
ROA not before: Mon 03 Mar 2025 12:14:53 +0000
ROA not after: Mon 02 Mar 2026 12:19:53 +0000
asID: 264036
IP address blocks: 143.137.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a1:35:f9:00:0b:97:97:ca:db:61:8c:a6:99:1b:5a:40:00:dc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Validity
Not Before: Mar 3 12:14:53 2025 GMT
Not After : Mar 2 12:19:53 2026 GMT
Subject: CN=039C5B8D2B726653E477209A3DCFB4744E621956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2f:9c:05:c3:6e:e4:52:de:92:80:97:b2:91:
a3:da:3d:52:95:7d:eb:b0:02:6d:27:e0:c8:4b:cb:
d1:32:85:26:64:9a:0d:01:b6:00:1d:c9:37:2e:dc:
93:fa:92:e0:ce:b4:a5:62:91:35:7a:02:91:97:33:
b9:c6:89:ff:d5:8a:f2:2e:9a:b7:03:9a:e0:28:59:
02:8c:ef:45:76:b3:7c:97:52:26:2c:ff:d2:ce:f0:
31:58:f4:94:3f:8d:30:56:f1:5b:7d:f3:77:a1:98:
e3:39:4b:81:c1:59:45:cd:86:19:e2:aa:61:b9:9f:
0f:2e:91:af:c9:0c:85:c6:d1:d4:cc:9c:3f:4f:3b:
9c:86:44:19:73:71:12:7d:46:5b:2c:ed:a0:35:c9:
8e:2f:85:ed:76:af:96:57:29:1a:d4:8e:65:8e:61:
b6:5f:28:72:5e:c0:8e:32:cc:65:0b:77:d4:58:53:
e5:74:ad:0c:8b:80:c7:7c:e8:de:19:16:4d:ba:da:
7a:d8:51:35:0e:f0:82:63:2f:6e:63:4b:88:e1:49:
fb:7b:fc:59:ec:8e:6a:d1:39:91:d9:fe:f3:d6:77:
f2:02:b3:68:47:30:41:25:73:b8:7b:2a:47:15:9a:
a4:e3:0b:68:ff:db:bd:48:8c:f5:00:5c:6c:26:2a:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9C:5B:8D:2B:72:66:53:E4:77:20:9A:3D:CF:B4:74:4E:62:19:56
X509v3 Authority Key Identifier:
keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132302e302f32342d3234203d3e20323634303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.120.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ee:a1:7d:66:0d:03:1f:25:b8:dc:f1:41:5b:47:51:e3:7b:
6b:25:0c:26:7f:ac:8b:7c:ff:0d:63:30:be:4e:88:01:19:0e:
71:4b:54:ba:de:8e:9e:75:7c:18:2d:1d:66:58:4a:fd:25:fc:
dd:1e:b5:fd:67:cf:64:56:f7:4d:48:5f:2f:2c:a4:8c:87:a8:
d3:91:37:2c:cc:0c:93:20:79:d0:e8:f1:eb:e5:de:05:8e:80:
e9:e4:e6:28:5b:a1:5a:f4:3b:50:00:70:91:5c:f1:fc:0b:b8:
67:5c:e0:9b:6c:71:2b:23:46:30:8c:ce:e0:b3:fe:94:95:25:
02:98:47:77:72:32:4d:95:ac:30:ed:40:ee:10:d4:1f:a7:b3:
d1:60:83:99:16:ff:c4:db:d6:7e:ca:8a:9e:95:ae:8d:70:6c:
3f:42:ec:46:c3:60:18:a7:46:31:83:e3:51:90:dc:6b:b6:7e:
29:66:f1:ca:4e:d3:c6:64:28:70:69:3f:0b:ed:b3:ef:ad:77:
6f:16:8c:49:c1:06:02:0b:bd:6f:9d:87:bb:8f:1f:c5:fc:77:
25:f2:4d:5a:be:9f:0f:f8:8d:dd:d6:3d:16:15:dc:41:86:2b:
c8:6b:50:8a:4f:3b:01:05:2a:27:aa:a8:d9:1d:c9:02:68:9e:
7d:59:3a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:16 2025 by rpki-client