Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/3139302e38392e31322e302f32322d3235203d3e20323730333437.roa
File: 3139302e38392e31322e302f32322d3235203d3e20323730333437.roa (raw, json)
Hash identifier: S2sCvjEu7mysFPo/AxOSDj/0O95xaO4fPKjUgfNMu38=
Subject key identifier: 19:AE:5B:D7:E9:82:AC:1F:13:11:89:4F:B0:73:9D:8F:7C:AA:65:94
Certificate issuer: /CN=59176FF2F9921A875762F2166723B5CD48599A49
Certificate serial: 5DEBE02A9C5CD00FA5C77F2A278AEEA91E572FDC
Authority key identifier: 59:17:6F:F2:F9:92:1A:87:57:62:F2:16:67:23:B5:CD:48:59:9A:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59176FF2F9921A875762F2166723B5CD48599A49.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/3139302e38392e31322e302f32322d3235203d3e20323730333437.roa
Signing time: Thu 06 Mar 2025 23:46:08 +0000
ROA not before: Thu 06 Mar 2025 23:41:08 +0000
ROA not after: Thu 05 Mar 2026 23:46:08 +0000
asID: 270347
IP address blocks: 190.89.12.0/22 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:eb:e0:2a:9c:5c:d0:0f:a5:c7:7f:2a:27:8a:ee:a9:1e:57:2f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59176FF2F9921A875762F2166723B5CD48599A49
Validity
Not Before: Mar 6 23:41:08 2025 GMT
Not After : Mar 5 23:46:08 2026 GMT
Subject: CN=19AE5BD7E982AC1F1311894FB0739D8F7CAA6594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:6e:28:e4:58:cf:44:7e:5f:9e:c3:ae:0d:
d8:58:ce:9b:d1:1b:eb:a3:a5:d4:a6:4d:66:56:1c:
39:48:7b:0a:69:28:11:c0:ba:45:c2:a2:7b:e4:7f:
3e:d0:7e:9d:fb:53:33:84:7a:36:ae:e7:8c:99:ea:
d8:46:0c:07:dc:d4:a8:1c:0f:13:db:2d:bc:29:54:
a5:ab:19:1d:ef:a4:7d:ba:ef:04:26:8f:b3:3a:22:
86:44:18:d8:44:21:ec:b9:85:53:21:03:7e:30:ea:
ed:5c:10:bf:7b:40:16:4c:9b:b5:aa:bb:ae:06:41:
55:2c:44:6d:22:57:99:1d:a5:30:1c:9a:11:64:25:
ab:01:d1:5b:b4:4b:37:42:db:24:c7:55:74:55:d5:
cb:f8:d1:9c:d4:f1:da:c5:b2:97:73:44:f2:0a:f8:
a6:1c:ca:d4:2b:40:6b:3c:94:9c:a6:7f:65:78:54:
bc:2b:3e:9b:1a:62:6c:8a:80:ed:31:c2:8e:b7:4b:
8e:fc:4c:34:50:1e:bf:fa:7e:b3:2a:65:e6:f2:bc:
74:04:bb:4b:ec:2d:52:0e:1c:13:5a:ee:f0:66:ea:
fb:47:45:51:ce:1a:9a:cf:23:66:59:2a:65:ef:42:
16:4f:45:a6:fa:a9:d7:cc:fe:2b:55:a4:c0:73:1f:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AE:5B:D7:E9:82:AC:1F:13:11:89:4F:B0:73:9D:8F:7C:AA:65:94
X509v3 Authority Key Identifier:
keyid:59:17:6F:F2:F9:92:1A:87:57:62:F2:16:67:23:B5:CD:48:59:9A:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/59176FF2F9921A875762F2166723B5CD48599A49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59176FF2F9921A875762F2166723B5CD48599A49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/3139302e38392e31322e302f32322d3235203d3e20323730333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.12.0/22
Signature Algorithm: sha256WithRSAEncryption
05:8e:b9:9a:50:d8:66:0a:ef:19:d9:7c:6e:91:d2:1b:6c:3d:
f2:40:a8:80:e3:01:bd:2a:91:2b:66:c6:ac:06:f0:55:69:b8:
cf:e8:0f:cf:d4:75:93:6b:fc:1e:6f:6e:ee:0f:c8:a6:ac:de:
b5:ce:65:0e:2e:0c:95:0d:c3:3c:5d:4d:26:88:60:84:f3:6b:
36:31:09:89:8b:f4:34:49:12:81:66:4f:7d:ce:84:26:9f:e4:
85:1c:3d:f6:49:b7:de:00:a6:d7:39:e0:c5:08:84:a9:8f:1c:
bd:84:3a:46:41:b3:e2:f4:27:aa:5a:8f:14:2f:2b:22:9a:ef:
db:02:43:2e:ef:07:fc:49:5e:a7:7f:9d:71:75:12:51:f8:2b:
cf:8c:2b:f9:05:de:94:30:a3:f8:58:ab:df:38:80:9f:54:b7:
bf:03:81:f0:a0:90:f4:3f:73:3e:19:a6:c0:43:32:af:7c:9d:
fe:a2:65:58:bd:72:46:31:65:e7:dd:38:da:d3:9a:12:8e:55:
9b:3c:1e:82:12:33:ea:fa:a8:11:4a:11:9e:68:b2:41:23:92:
f5:ae:82:8a:e5:63:c5:5e:ed:30:95:a6:1b:f0:18:fc:b2:60:
76:0b:15:30:54:c4:f2:4d:c1:21:cc:34:b4:74:e3:d6:17:89:
5a:bd:91:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:01:48 2025 by rpki-client