Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e32382e302f32342d3234203d3e20323730333438.roa
File: 3139302e38332e32382e302f32342d3234203d3e20323730333438.roa (raw, json)
Hash identifier: NIHPrNXGvv5UJU3sfE8W8jfvRZIa7i2gEAF01ia9tTk=
Subject key identifier: CD:23:E7:4A:C0:34:6D:CA:7E:81:CA:26:65:6E:63:B0:CC:18:3E:F0
Certificate issuer: /CN=02E066E542EE01043797860D397E283E252CA08A
Certificate serial: 4A3586588190ED77691797704CF3A18D9E40AE89
Authority key identifier: 02:E0:66:E5:42:EE:01:04:37:97:86:0D:39:7E:28:3E:25:2C:A0:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02E066E542EE01043797860D397E283E252CA08A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e32382e302f32342d3234203d3e20323730333438.roa
Signing time: Tue 21 Jan 2025 19:07:11 +0000
ROA not before: Tue 21 Jan 2025 19:02:11 +0000
ROA not after: Tue 20 Jan 2026 19:07:11 +0000
asID: 270348
IP address blocks: 190.83.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:35:86:58:81:90:ed:77:69:17:97:70:4c:f3:a1:8d:9e:40:ae:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02E066E542EE01043797860D397E283E252CA08A
Validity
Not Before: Jan 21 19:02:11 2025 GMT
Not After : Jan 20 19:07:11 2026 GMT
Subject: CN=CD23E74AC0346DCA7E81CA26656E63B0CC183EF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:53:c9:27:28:5c:17:b3:89:a1:05:ce:ce:
f2:cc:77:18:0b:b9:48:ac:2b:2d:65:0a:9a:65:f5:
ca:91:07:2e:9a:3d:f7:78:0e:67:3e:04:fc:ca:36:
50:e1:b6:05:22:e6:71:73:6d:5b:56:6a:a4:a4:62:
d0:61:4f:d4:a8:74:77:7c:a6:9e:4f:c2:83:06:93:
f0:74:f4:78:c8:b8:b0:95:5f:7b:bd:9e:b1:51:35:
01:3e:59:a7:36:a1:1a:17:45:77:e9:27:a7:b7:56:
e7:35:2f:27:16:de:f6:fa:5a:79:3f:c1:c5:3d:b3:
cc:8d:a3:72:8e:b3:51:f3:c9:cc:3e:36:0a:65:ba:
fb:41:70:1e:57:bb:08:a9:5f:de:b8:a9:9c:a7:9b:
f9:71:bd:fa:f6:e3:2c:8c:20:98:b4:b5:4b:44:14:
83:83:1d:8d:9d:b8:75:1d:3b:e7:25:57:cc:7d:12:
92:8c:e3:99:a4:67:01:7a:25:d8:dc:e6:fa:57:cf:
b5:a3:49:99:aa:8b:6c:c7:4a:8c:d8:cb:e8:3e:ef:
59:b7:aa:5e:bb:48:60:b4:94:6c:5f:1d:aa:91:9d:
ee:9e:ae:5e:4b:e5:87:f7:b5:3d:5c:ca:c0:9c:1c:
e9:a8:93:27:70:05:19:9e:8d:a7:f1:6c:41:99:1f:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:23:E7:4A:C0:34:6D:CA:7E:81:CA:26:65:6E:63:B0:CC:18:3E:F0
X509v3 Authority Key Identifier:
keyid:02:E0:66:E5:42:EE:01:04:37:97:86:0D:39:7E:28:3E:25:2C:A0:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/02E066E542EE01043797860D397E283E252CA08A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02E066E542EE01043797860D397E283E252CA08A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e32382e302f32342d3234203d3e20323730333438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.83.28.0/24
Signature Algorithm: sha256WithRSAEncryption
42:aa:7f:51:4d:d3:ec:62:67:8a:35:25:cf:01:ef:60:e0:f7:
dc:1c:d2:f9:06:af:1b:15:94:12:c4:bf:22:05:28:0a:e5:e2:
e6:30:f3:ec:e8:3e:54:bc:b7:d3:32:9b:49:fc:a7:f5:02:4a:
ff:b1:06:bd:40:2e:76:cc:cc:f2:01:a7:8d:1e:6a:fc:9e:fa:
75:6b:84:c6:bd:01:60:a2:76:d9:a0:31:58:c6:3d:92:e8:5c:
52:5f:30:85:3f:e4:15:3e:9b:a7:46:c5:a9:23:ee:27:b7:03:
df:d0:1f:57:84:2c:78:f1:73:48:df:08:57:a3:90:21:1f:f7:
a4:52:8d:f0:f8:19:08:89:d9:8f:2c:2c:a3:62:e7:1f:d9:41:
d6:1c:4d:e0:cc:ae:ef:88:00:c4:14:7b:8c:92:52:a2:79:11:
07:ab:87:dc:ca:5a:9d:ed:d0:3c:0f:4e:b3:80:1a:1d:98:8b:
f5:f7:42:75:3b:ff:70:f1:ee:91:e3:ee:dc:94:dc:27:d0:17:
86:72:0b:ab:61:83:ef:8a:91:b2:07:70:ba:98:f1:8d:29:d3:
62:22:24:18:17:d4:7d:46:c0:b3:f3:14:7c:7d:b6:9d:ef:d8:
23:3d:1a:a0:62:64:1e:6d:aa:ac:12:5f:1c:e5:6e:fb:bd:a3:
20:83:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:13:03 2025 by rpki-client