Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e35372e302e302f31362d3136203d3e2034323330.roa
File: 3230312e35372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier: dK6krTT0xdB6papELtDcYbBHnCZ2foE54VBafM4Obno=
Subject key identifier: 5D:9B:95:CD:D2:56:09:DA:AC:AD:F8:33:C6:EA:EB:35:04:B9:E3:87
Certificate issuer: /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial: 4DA95AFD77580275604978D6CCC1EEE077A76978
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e35372e302e302f31362d3136203d3e2034323330.roa
Signing time: Wed 05 Mar 2025 19:00:05 +0000
ROA not before: Wed 05 Mar 2025 18:55:05 +0000
ROA not after: Wed 04 Mar 2026 19:00:05 +0000
asID: 4230
IP address blocks: 201.57.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a9:5a:fd:77:58:02:75:60:49:78:d6:cc:c1:ee:e0:77:a7:69:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
Validity
Not Before: Mar 5 18:55:05 2025 GMT
Not After : Mar 4 19:00:05 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ce:40:80:a9:61:e2:bf:60:b5:fe:6b:e0:49:
79:a9:d6:68:f2:9c:1a:1f:be:1e:f0:34:45:f5:28:
d5:98:2b:f2:28:db:9b:f6:ca:aa:53:0a:31:bc:fa:
d8:be:e2:fd:98:bd:20:4b:af:56:f7:4b:60:83:e0:
67:1d:a5:9c:88:df:0b:c7:41:69:71:cd:5a:c8:ae:
30:b9:4d:b5:47:a3:54:5b:4c:6c:90:e3:80:b8:b8:
98:7b:3b:ef:1a:e0:93:71:99:2d:2f:d2:b6:63:f9:
64:9b:f3:2e:92:4e:28:10:88:8b:d2:0f:e0:73:c8:
2d:7b:17:14:13:8a:6d:9f:d8:48:bd:a3:ee:0e:57:
36:3f:1a:b4:a1:af:11:2e:2e:f2:fd:be:0f:81:43:
3e:49:da:a8:37:89:a9:cc:bc:76:4a:73:a2:63:2a:
0d:49:fb:82:31:a8:e5:52:17:bf:36:15:eb:cd:ac:
0e:67:cd:f2:9b:ef:de:11:cb:ad:d9:94:46:bd:51:
36:a1:41:1c:b8:60:50:b2:07:6b:ed:b7:24:79:0a:
46:6a:43:9d:63:cc:35:02:84:fc:f9:33:09:57:31:
61:d7:78:3c:cc:d9:8a:85:60:ee:47:ea:c9:30:87:
ce:fd:96:99:b4:bb:27:d0:3c:81:8b:f5:ba:26:89:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:95:CD:D2:56:09:DA:AC:AD:F8:33:C6:EA:EB:35:04:B9:E3:87
X509v3 Authority Key Identifier:
keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e35372e302e302f31362d3136203d3e2034323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.57.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:1d:36:dc:4b:b2:df:2d:63:ad:94:94:97:c3:9f:ad:a7:b1:
8d:94:6d:5a:d5:ec:f3:d0:11:d4:cc:16:65:c9:2a:8f:4d:1a:
94:92:33:c4:00:dc:a7:34:87:14:86:5f:72:d1:89:f0:ac:da:
61:4a:47:68:ef:fa:ed:1c:90:bc:d4:26:f3:b3:51:bc:4b:a7:
fe:14:47:05:9b:65:b5:9c:61:9c:18:ed:eb:91:01:0b:e4:cd:
ed:e1:53:44:bf:c6:2a:78:90:92:48:56:94:95:ed:47:21:ce:
11:18:af:58:66:1a:9f:2e:d5:71:2f:7d:5d:f2:f0:af:d2:c8:
c4:e9:41:15:49:3e:62:d6:6d:2e:52:a6:3a:0c:f2:30:d4:c7:
6a:2f:d7:14:1f:8a:13:2a:e2:7c:df:ad:01:78:f7:76:94:09:
7a:38:56:55:73:13:0a:24:34:bb:c4:11:18:af:23:da:8b:de:
c9:be:cc:2c:3a:9a:78:5b:a3:25:bc:60:36:a8:75:96:90:d0:
fa:41:36:ed:6e:ed:12:79:b5:02:05:f8:4e:53:ce:a2:2b:e8:
6a:22:32:9e:41:97:8f:a4:6f:90:f7:dc:dc:3a:0c:14:74:c4:
e3:5e:9d:e3:17:f2:96:03:87:91:d0:3b:4c:be:53:1e:fc:b9:
02:0e:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:34 2025 by rpki-client