Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235342e302e302f31362d3136203d3e2034323330.roa
File: 3230302e3235342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier: NxreukDOhkFreLpjmkWS47ge68a9NliBZ3ZNXXevftY=
Subject key identifier: CB:C4:82:88:A3:F7:1F:44:49:5F:34:A3:87:14:E2:8E:A9:14:C5:7E
Certificate issuer: /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial: 302ED27DDCF7203376124F497E94454A58997512
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235342e302e302f31362d3136203d3e2034323330.roa
Signing time: Wed 05 Mar 2025 19:00:04 +0000
ROA not before: Wed 05 Mar 2025 18:55:04 +0000
ROA not after: Wed 04 Mar 2026 19:00:04 +0000
asID: 4230
IP address blocks: 200.254.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:2e:d2:7d:dc:f7:20:33:76:12:4f:49:7e:94:45:4a:58:99:75:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
Validity
Not Before: Mar 5 18:55:04 2025 GMT
Not After : Mar 4 19:00:04 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:e4:0c:c9:cc:dd:18:f0:20:26:38:c9:5f:
b1:4e:e5:20:96:75:df:7f:82:74:74:ca:93:b2:cb:
77:2c:78:b9:80:b4:d1:fb:11:ac:89:2b:3b:b6:75:
eb:de:dc:10:ec:26:34:be:a3:8a:0c:0e:7e:3f:22:
79:13:c4:21:be:61:2f:48:fc:47:d6:a6:6f:9b:40:
ee:6e:38:06:6a:a4:ce:d1:d5:dc:3a:03:c9:d7:71:
c7:ac:a4:5a:75:78:75:1b:75:c0:e2:20:68:90:f3:
2a:74:92:49:9d:ed:c3:bf:b1:ea:d8:55:dd:12:67:
28:76:46:ef:10:3e:08:af:6d:8e:65:58:c4:3a:4a:
fd:9c:76:43:b1:62:57:12:eb:12:63:7b:c9:6b:a3:
a4:2d:47:a6:fa:1a:6a:be:cc:72:37:7a:f9:f6:61:
fa:d1:57:7b:18:70:d4:31:08:5d:ff:5a:8d:65:9f:
e2:e5:3a:a8:74:5a:d2:9b:ad:20:c4:d9:17:33:1b:
dc:2a:05:fd:1c:c6:fb:10:16:bd:63:66:7c:98:8b:
be:f4:90:58:b0:73:0b:3e:7b:4e:4c:a0:ef:6e:13:
d7:9c:e5:bc:f3:e5:48:33:51:3c:fe:3c:20:9d:7d:
a1:81:8c:09:cc:e1:98:8e:ab:64:06:df:16:70:7f:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C4:82:88:A3:F7:1F:44:49:5F:34:A3:87:14:E2:8E:A9:14:C5:7E
X509v3 Authority Key Identifier:
keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235342e302e302f31362d3136203d3e2034323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.254.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:42:13:b9:4a:e4:fc:a4:cb:38:58:05:ea:9a:10:25:28:ac:
d9:fa:78:8e:9f:e6:3b:e9:f9:a1:e7:35:04:53:d8:cc:14:2d:
b3:e1:04:04:76:3f:9e:0a:bf:3b:a8:07:7f:24:ad:e4:05:8e:
39:19:34:b8:55:e0:12:0b:25:07:c3:3b:6f:27:8f:e0:f4:3e:
70:46:ea:24:28:0f:9a:1d:46:ed:92:47:22:cf:7e:4a:5a:a0:
32:2c:fd:4b:ae:76:4d:89:6f:66:69:9f:14:2d:a0:51:c5:c6:
6b:7d:83:4f:e1:69:bb:d5:21:13:2f:ff:23:5c:f0:8f:a5:27:
06:f0:e5:d4:62:71:0d:d2:e7:07:bb:14:f8:ef:e3:b7:48:fb:
5a:d9:6c:4a:f1:f8:51:e4:94:96:2c:2d:6d:19:55:0d:53:c8:
84:a9:d9:e8:2e:cd:d5:78:0c:54:47:36:a6:02:d2:8c:80:f0:
bd:42:37:83:4a:4e:fd:b1:01:fe:0a:62:6a:81:65:14:13:7e:
cb:d7:b9:79:52:5c:d5:18:7d:cd:57:65:6e:d8:9a:e7:c6:e5:
31:26:fd:fc:43:96:fe:af:eb:de:e4:cf:9b:ca:3a:4a:9e:68:
9a:cf:c0:2e:1c:6e:3c:fe:04:95:f6:f2:fb:cb:97:34:24:31:
24:14:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:16 2025 by rpki-client