Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e322e302e302f31362d3136203d3e2034323330.roa
File: 3138392e322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier: tXRxCW/BGqsW04onXFqwesInDYq5fXHxJEIP2S3Q7B4=
Subject key identifier: 74:6A:48:F6:20:13:0D:24:BD:8B:BC:0C:3C:8A:BA:D2:E4:9D:BC:65
Certificate issuer: /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial: 7E3FB00DDD6C5087FC8386C501679872E6587DB0
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e322e302e302f31362d3136203d3e2034323330.roa
Signing time: Wed 05 Mar 2025 19:00:06 +0000
ROA not before: Wed 05 Mar 2025 18:55:06 +0000
ROA not after: Wed 04 Mar 2026 19:00:06 +0000
asID: 4230
IP address blocks: 189.2.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:3f:b0:0d:dd:6c:50:87:fc:83:86:c5:01:67:98:72:e6:58:7d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
Validity
Not Before: Mar 5 18:55:06 2025 GMT
Not After : Mar 4 19:00:06 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:12:f7:10:18:0a:bb:6c:7a:08:d9:7c:22:
ab:a4:f2:ff:51:68:74:fc:8a:b7:68:e3:0c:2d:38:
83:dc:1e:a9:4a:47:f3:15:a4:e2:4a:bc:e6:2c:45:
bb:7a:29:e9:b0:1b:9b:47:00:b7:9f:74:82:f2:12:
e9:2a:de:47:ce:fe:f1:95:60:52:05:48:27:81:d3:
25:78:b9:95:d8:93:d8:1f:1b:c1:63:79:86:4d:a9:
63:c9:be:35:36:c5:71:13:67:f3:2d:77:a0:2b:23:
83:b5:bd:90:89:cc:9c:71:3e:86:95:3f:07:41:8c:
9d:63:0d:e9:7d:06:4f:a6:88:d0:65:92:61:d5:4b:
55:f8:82:af:a4:87:3c:dc:10:1d:ae:93:4f:34:6c:
5e:23:3f:0f:b6:ba:f1:34:64:2c:e9:4f:87:a0:e3:
2f:bf:76:f7:7d:4a:bb:d6:d4:16:55:82:50:f5:ce:
5b:32:91:fa:9a:1e:40:6b:d4:a3:aa:b4:1a:33:a4:
f2:5a:9d:bb:a1:34:1d:88:1b:41:66:59:0e:a1:dc:
aa:84:d5:40:ef:25:a4:a8:85:ba:28:00:f8:8e:7d:
1a:5c:1f:40:68:33:37:de:26:1c:6a:7f:c2:64:35:
90:ea:ba:08:c8:b9:3b:13:b2:83:29:61:db:2b:f0:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6A:48:F6:20:13:0D:24:BD:8B:BC:0C:3C:8A:BA:D2:E4:9D:BC:65
X509v3 Authority Key Identifier:
keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e322e302e302f31362d3136203d3e2034323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.2.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:ab:6f:a8:ce:13:a5:6a:7b:33:76:c7:89:9c:e6:b7:cd:d1:
41:42:99:d8:32:61:e8:79:d7:44:3b:be:20:1f:99:e0:d2:17:
d6:74:7f:32:0e:02:78:5a:75:a3:85:cf:ff:2d:b2:8c:c6:aa:
dd:5f:99:8f:8d:6f:85:18:86:32:97:59:b8:a0:3b:14:32:1c:
c3:13:55:c6:af:23:54:fd:cf:d2:5f:c1:ba:40:d3:59:41:c7:
ec:28:56:8f:bc:b7:df:5f:bf:ac:64:74:3a:52:4b:ec:33:64:
c5:aa:5f:4a:4f:9f:c9:e4:ba:41:95:f2:6d:8f:5e:0c:8b:32:
59:2a:ae:35:6b:52:ba:03:41:ff:49:1d:da:e8:40:64:45:4c:
c3:e6:46:c7:6e:12:89:d1:5c:d4:6c:b7:85:5c:4d:32:5b:dc:
1a:33:fc:fb:db:fb:df:09:16:6b:d0:cb:5d:9c:b2:0b:32:62:
51:04:76:09:45:fe:55:e3:4e:00:fd:50:2e:00:c8:ba:c7:a0:
eb:3e:74:f0:02:71:98:b2:db:ab:c7:60:66:cd:2b:11:04:7a:
9e:25:8b:71:44:38:65:cb:ee:1c:49:3f:b1:e7:26:9a:b7:14:
b8:fc:9d:62:61:de:68:57:b6:b8:be:85:af:23:45:f8:43:62:
87:c6:55:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:36:38 2025 by rpki-client