Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e32392e302f32342d3234203d3e20323730333438.roa
File: 3139302e38332e32392e302f32342d3234203d3e20323730333438.roa (raw, json)
Hash identifier: w7HWb6xFsz5FiRYHg+P8j13+5f+N7W1PY19d/tQF1sg=
Subject key identifier: DD:4F:E2:05:1E:7F:26:F2:1D:5A:CE:3E:B3:8B:FD:EB:9A:11:C5:48
Certificate issuer: /CN=02E066E542EE01043797860D397E283E252CA08A
Certificate serial: 186E147F2B974BA9F81ABA3611BB7AAEF562D057
Authority key identifier: 02:E0:66:E5:42:EE:01:04:37:97:86:0D:39:7E:28:3E:25:2C:A0:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02E066E542EE01043797860D397E283E252CA08A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e32392e302f32342d3234203d3e20323730333438.roa
Signing time: Tue 21 Jan 2025 19:07:28 +0000
ROA not before: Tue 21 Jan 2025 19:02:28 +0000
ROA not after: Tue 20 Jan 2026 19:07:28 +0000
asID: 270348
IP address blocks: 190.83.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:6e:14:7f:2b:97:4b:a9:f8:1a:ba:36:11:bb:7a:ae:f5:62:d0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02E066E542EE01043797860D397E283E252CA08A
Validity
Not Before: Jan 21 19:02:28 2025 GMT
Not After : Jan 20 19:07:28 2026 GMT
Subject: CN=DD4FE2051E7F26F21D5ACE3EB38BFDEB9A11C548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:3e:0c:fc:ba:c9:8e:54:d3:19:35:b0:52:
49:85:35:ac:a0:83:5a:96:43:9f:34:fb:90:ef:5d:
80:c0:61:82:75:62:f0:cd:df:97:97:6a:9e:36:10:
75:05:ee:12:ee:c5:8d:cf:6f:1e:39:fc:ae:1b:96:
85:be:c3:f6:5a:c2:2b:66:05:1f:99:21:a2:fe:0d:
dc:df:6e:da:84:52:bf:a6:76:e6:bb:77:39:1e:0b:
a6:68:dc:36:8e:fb:d0:69:f4:8c:c9:f4:8c:10:c9:
cf:dc:db:a1:1a:e2:70:2b:9d:11:66:27:b0:e6:8d:
80:94:65:c2:ce:04:67:9a:92:1c:8a:8d:9b:85:eb:
34:98:9d:08:95:ea:11:2e:34:11:19:4f:4a:fd:38:
ac:7b:bb:46:99:60:96:db:38:48:b4:78:94:ba:fd:
bc:d5:a3:0a:72:2c:35:65:0e:44:57:88:ed:4d:9f:
ba:0d:85:26:3e:ab:d4:e5:9e:2e:0f:3d:66:41:28:
74:30:a2:45:a5:71:5d:5f:b1:cc:9a:b1:6a:4f:14:
64:d1:e6:fc:d6:27:c6:a1:2c:ca:c8:ce:01:fc:87:
fe:5b:59:b4:16:df:d4:5a:03:1a:19:a9:bb:1e:d3:
57:b1:63:85:0a:3e:0c:e9:0c:9b:60:3b:c8:0d:0a:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4F:E2:05:1E:7F:26:F2:1D:5A:CE:3E:B3:8B:FD:EB:9A:11:C5:48
X509v3 Authority Key Identifier:
keyid:02:E0:66:E5:42:EE:01:04:37:97:86:0D:39:7E:28:3E:25:2C:A0:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/02E066E542EE01043797860D397E283E252CA08A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02E066E542EE01043797860D397E283E252CA08A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e32392e302f32342d3234203d3e20323730333438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6d:2e:81:4e:73:71:9e:ac:d2:c2:a1:0d:7e:f5:f5:68:ea:
ba:2a:cb:8f:bd:c1:fd:93:f8:5e:33:6c:1d:38:90:5d:46:35:
40:88:88:67:25:c1:13:de:09:94:2e:25:c5:e4:15:e7:43:51:
a3:b9:b5:73:f0:fa:8c:ab:2f:3a:65:4d:2b:5d:19:6b:56:ad:
69:ca:93:bc:32:76:13:e8:8c:4e:31:25:39:35:59:0d:38:80:
2f:1a:47:87:05:f2:10:d1:5a:85:13:fc:20:60:71:d8:f0:7a:
31:b6:ac:2a:b3:f4:c2:ef:7c:ea:66:91:b0:f5:32:6c:58:de:
33:04:92:ec:d5:90:21:29:d6:30:21:b3:f9:22:c7:2f:fa:d6:
2e:2f:31:8d:02:8a:65:b9:a5:8b:ee:68:81:eb:44:ca:f5:7e:
a2:36:5d:25:07:ad:f9:63:92:4b:d1:cd:0e:a6:e6:36:54:82:
cb:b7:58:29:71:8d:30:c3:39:5b:97:36:3c:31:4d:b6:ad:2b:
38:d6:82:6b:5e:30:8d:3d:d3:b8:34:17:58:7e:84:8f:e7:5b:
26:e4:bd:c0:37:4d:3b:6f:49:4f:e3:b9:18:48:0b:3d:21:4c:
9c:0a:69:06:92:4e:4f:d5:a6:6d:da:b2:63:07:d6:dd:89:dc:
68:c2:31:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:38:54 2025 by rpki-client