Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e32382e302f32332d3233203d3e20323730333438.roa
File: 3139302e38332e32382e302f32332d3233203d3e20323730333438.roa (raw, json)
Hash identifier: LFshKF/ACu7M2HJ1mJwBm/L50xMxg9PUFL0pyGaSJik=
Subject key identifier: 0E:37:55:5F:AA:95:F8:B1:87:32:94:FD:50:02:B8:C3:AB:85:6E:68
Certificate issuer: /CN=02E066E542EE01043797860D397E283E252CA08A
Certificate serial: 18262F10FFF32ED4F74F2E7A14DBFDFDF0EE0F08
Authority key identifier: 02:E0:66:E5:42:EE:01:04:37:97:86:0D:39:7E:28:3E:25:2C:A0:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02E066E542EE01043797860D397E283E252CA08A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e32382e302f32332d3233203d3e20323730333438.roa
Signing time: Tue 21 Jan 2025 19:06:25 +0000
ROA not before: Tue 21 Jan 2025 19:01:25 +0000
ROA not after: Tue 20 Jan 2026 19:06:25 +0000
asID: 270348
IP address blocks: 190.83.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:26:2f:10:ff:f3:2e:d4:f7:4f:2e:7a:14:db:fd:fd:f0:ee:0f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02E066E542EE01043797860D397E283E252CA08A
Validity
Not Before: Jan 21 19:01:25 2025 GMT
Not After : Jan 20 19:06:25 2026 GMT
Subject: CN=0E37555FAA95F8B1873294FD5002B8C3AB856E68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ec:8f:53:21:aa:36:1f:b9:4f:1e:41:b2:e9:
2c:2d:f9:e9:e1:45:2b:95:fc:f9:17:dd:7d:c4:0e:
0e:8e:a5:05:86:15:d8:8a:ea:c8:6b:75:19:a0:f8:
d0:e5:29:48:14:e0:37:ca:e6:6c:27:da:b4:c0:51:
5e:6d:7e:eb:21:63:3e:f0:2f:2c:fb:59:c2:5f:00:
6a:f0:e7:35:69:4e:69:26:84:0a:47:33:ca:f1:02:
e7:ab:dc:08:fe:a7:43:1f:d3:12:cb:fd:c3:be:58:
3d:62:42:a4:28:b9:15:c4:71:77:95:6a:30:b8:b0:
94:ce:94:28:7d:7a:77:65:26:64:ae:f6:0f:06:2d:
9a:46:be:71:3a:36:8c:53:e0:1e:f4:55:c3:d2:78:
e8:69:bc:f8:8c:32:53:8e:70:a9:70:e8:06:f3:1b:
6d:7b:25:99:fc:e7:d7:ff:34:9d:a3:ee:87:f2:1d:
29:80:7e:a0:53:6e:7d:86:48:99:31:ca:44:ff:7a:
ce:0c:fc:da:90:13:9e:85:c9:80:4d:6d:20:a1:6e:
24:d3:60:14:dd:78:0b:b5:ec:d6:b9:2f:c9:05:1f:
1b:b4:05:ac:1e:8b:fe:29:e1:a3:b4:17:ca:66:89:
6c:f5:c7:2e:53:c4:93:5c:6c:28:67:d4:2a:60:9d:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:37:55:5F:AA:95:F8:B1:87:32:94:FD:50:02:B8:C3:AB:85:6E:68
X509v3 Authority Key Identifier:
keyid:02:E0:66:E5:42:EE:01:04:37:97:86:0D:39:7E:28:3E:25:2C:A0:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/02E066E542EE01043797860D397E283E252CA08A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02E066E542EE01043797860D397E283E252CA08A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e32382e302f32332d3233203d3e20323730333438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.83.28.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:5c:d7:f7:ad:4c:55:2f:27:36:8b:fa:42:cc:78:91:e0:20:
72:bf:32:2b:a8:5a:bf:6a:cd:a4:6a:1c:08:71:72:a6:6a:90:
7b:4b:25:de:14:38:95:e2:6d:bd:75:55:6d:f3:42:be:00:7e:
9e:78:ca:ce:77:74:7d:e5:67:58:99:9d:ec:dc:ba:e6:59:55:
a3:4c:69:2b:d2:5e:ae:86:44:94:cd:db:7a:b0:26:67:24:30:
a5:57:87:88:69:9e:c6:74:c2:e7:14:86:7b:5f:1a:ff:f5:0a:
ec:4f:75:06:c3:cc:04:ed:19:f0:96:1a:fc:dc:60:d2:a9:e8:
35:e1:4d:fe:01:ad:ce:f5:b8:2e:26:ef:2f:2a:84:f8:48:78:
64:1e:07:18:67:60:87:4e:66:26:3d:9f:6e:12:7e:9c:96:6a:
31:54:77:bf:4f:13:72:ef:5f:59:a3:7c:52:40:ca:41:f3:6a:
81:b0:a5:00:9a:b6:1a:43:03:2a:81:f8:12:64:ec:70:23:6f:
66:85:b0:67:2e:ba:17:bc:3a:ea:50:05:58:25:a2:60:ad:c5:
70:ce:84:24:17:9b:b5:d1:34:34:5d:3e:ff:0f:0b:13:4b:a9:
e9:76:a8:08:a7:56:1b:c4:81:ee:12:9c:7d:03:cb:0e:55:c4:
4b:b7:48:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:25:13 2025 by rpki-client