Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e31372e302e302f31362d3136203d3e2034323330.roa
File: 3138392e31372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier: F9J4AHWedtoQLRH6aefHEGl3LlKusVGS2q5wzanSEyA=
Subject key identifier: 8A:E2:00:AF:40:02:79:56:A0:96:67:A6:63:2B:61:41:9C:74:D4:0F
Certificate issuer: /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial: 4E5968546EA12137ABA9FA5DDE08E1C7731729C4
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e31372e302e302f31362d3136203d3e2034323330.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 4230
IP address blocks: 189.17.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:59:68:54:6e:a1:21:37:ab:a9:fa:5d:de:08:e1:c7:73:17:29:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:02:fa:6f:c4:21:fb:3d:d9:0c:f3:ff:43:
65:d2:66:1f:55:b3:37:e3:c3:44:24:67:e4:01:7c:
fd:4e:72:01:94:37:13:cb:b5:a2:1c:98:5e:07:83:
1e:02:10:5b:2c:63:f4:4c:c1:5e:7d:08:9b:93:7a:
2b:c7:ff:58:89:43:2d:ee:3b:f4:ad:3f:dc:5b:88:
00:a9:58:81:03:de:97:d0:7b:49:01:53:5e:48:ec:
a2:ad:a8:18:76:c9:bd:12:a9:21:7f:60:8b:7b:60:
bf:5b:94:f6:04:ab:38:ea:0a:d2:e1:a5:09:1d:ce:
b9:52:2d:30:a0:56:3c:8e:f6:6b:68:ed:11:71:e8:
17:18:e8:af:9c:49:bb:a1:65:d8:4a:d4:05:23:6b:
e6:32:7b:3c:f7:95:e4:2d:60:ce:4a:5c:7e:49:a5:
46:ca:81:2a:5f:a2:ca:e3:79:03:78:93:ad:6b:d2:
e9:5f:d5:c9:2f:ae:7c:39:71:0b:ca:f5:c1:98:d8:
79:0f:4d:d4:45:3a:f3:2a:4c:df:08:6a:14:32:3e:
18:fb:fd:b1:31:fd:98:06:0a:4d:34:ac:1b:e3:5c:
85:37:4c:5c:af:9b:af:60:33:a1:f4:cb:65:b1:9f:
5e:2f:7d:f8:35:4e:25:82:0c:dc:f7:89:8d:6c:f8:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:00:AF:40:02:79:56:A0:96:67:A6:63:2B:61:41:9C:74:D4:0F
X509v3 Authority Key Identifier:
keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e31372e302e302f31362d3136203d3e2034323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:43:8e:a9:d4:bb:26:37:eb:01:c3:4a:21:0d:1c:18:47:45:
2e:e5:20:30:a4:e0:c0:70:7f:c8:40:2a:76:21:82:3f:d8:60:
49:28:8c:45:df:9a:86:b3:9f:a0:b6:7d:2b:92:ce:a9:cc:e5:
be:41:df:fa:c7:b4:16:29:79:06:08:3f:ae:65:85:2b:f2:9c:
a8:a3:51:e7:60:31:de:85:80:30:b1:d3:32:1e:57:57:3d:86:
fb:8e:fd:bd:41:39:66:8e:e4:ad:23:74:10:a8:30:c0:35:c7:
b3:3b:00:bb:b1:a3:3e:18:c5:a0:2f:cd:4b:46:e6:64:4b:fe:
78:e8:9c:f7:47:0f:a6:6d:6a:ed:14:64:fc:77:80:54:51:b3:
54:c5:ae:27:de:b6:9c:9d:53:b0:4b:6a:92:fe:76:4e:2f:26:
25:8e:02:8f:44:51:13:3a:7f:be:87:8f:2c:ea:05:98:87:73:
1b:2c:f0:4f:b5:79:b1:90:dc:4c:89:1b:72:95:94:d8:e6:15:
e0:01:4c:b1:4c:cd:02:0f:b6:08:d8:5f:21:b5:9d:f7:6e:a3:
61:b7:9e:6e:c0:bf:a9:a7:9a:be:4a:e8:e7:01:3d:52:6f:bc:
87:ff:fa:16:eb:45:63:dc:44:85:d0:d7:fd:31:04:eb:fe:7a:
63:91:9a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:55:37 2025 by rpki-client