Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e33302e302f32332d3233203d3e20323730333438.roa
File: 3139302e38332e33302e302f32332d3233203d3e20323730333438.roa (raw, json)
Hash identifier: wtmanzgEwNnS7CN2tZsXBaf8kvd4LcpSKG0AM0dIxSA=
Subject key identifier: F2:5D:10:C3:78:11:EE:61:19:70:AA:32:9C:B7:68:AA:15:17:7C:E7
Certificate issuer: /CN=02E066E542EE01043797860D397E283E252CA08A
Certificate serial: 6BE12730754372B0D0FF291BE3D3765300A3B54D
Authority key identifier: 02:E0:66:E5:42:EE:01:04:37:97:86:0D:39:7E:28:3E:25:2C:A0:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02E066E542EE01043797860D397E283E252CA08A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e33302e302f32332d3233203d3e20323730333438.roa
Signing time: Tue 21 Jan 2025 19:07:39 +0000
ROA not before: Tue 21 Jan 2025 19:02:39 +0000
ROA not after: Tue 20 Jan 2026 19:07:39 +0000
asID: 270348
IP address blocks: 190.83.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e1:27:30:75:43:72:b0:d0:ff:29:1b:e3:d3:76:53:00:a3:b5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02E066E542EE01043797860D397E283E252CA08A
Validity
Not Before: Jan 21 19:02:39 2025 GMT
Not After : Jan 20 19:07:39 2026 GMT
Subject: CN=F25D10C37811EE611970AA329CB768AA15177CE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:32:89:ea:0c:f7:03:5b:37:49:29:05:9c:
56:18:f7:5b:8d:dc:8e:56:4f:92:df:11:c5:f1:8d:
43:f9:a7:85:e5:59:22:ac:9a:23:5b:e0:7d:55:a1:
52:c7:07:76:e5:a0:b7:7e:75:ec:d0:5c:f8:86:a7:
b5:88:e9:36:43:2b:57:68:57:26:09:d3:60:77:39:
b4:8b:bc:83:35:3c:77:98:7b:97:14:2c:83:7e:3b:
f2:bc:04:a2:05:7a:16:f0:c1:22:76:e8:a7:43:9a:
7f:84:41:6b:74:a9:72:72:72:70:b3:02:14:11:12:
35:87:0c:4c:22:87:a3:cb:be:7a:a0:c4:e8:ac:e1:
8b:ac:05:ce:32:39:5c:67:fe:80:26:46:55:f5:1e:
59:e9:27:ac:36:19:2b:47:6f:08:98:f1:ed:85:23:
b2:f1:ee:e6:c6:86:3c:e0:9f:98:f8:4b:b6:8b:c1:
59:1b:8e:4b:f8:8d:68:5f:05:c7:0b:5b:7a:85:ad:
b4:d7:6c:24:00:d0:7c:33:40:58:c5:27:11:18:d3:
95:b9:44:ef:3a:dc:56:ab:3f:ef:f3:f6:9f:e2:3b:
02:e5:47:70:da:d4:05:ee:48:39:50:f8:c4:15:8f:
af:72:48:d6:e4:79:2b:f3:fa:06:51:c0:6b:9d:a9:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5D:10:C3:78:11:EE:61:19:70:AA:32:9C:B7:68:AA:15:17:7C:E7
X509v3 Authority Key Identifier:
keyid:02:E0:66:E5:42:EE:01:04:37:97:86:0D:39:7E:28:3E:25:2C:A0:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/02E066E542EE01043797860D397E283E252CA08A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02E066E542EE01043797860D397E283E252CA08A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/3139302e38332e33302e302f32332d3233203d3e20323730333438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.83.30.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:0e:91:9b:a3:ad:43:85:00:f2:c4:a2:28:ff:f2:32:d6:2c:
89:58:28:ae:c1:6d:78:94:cd:72:85:54:9f:e8:c1:22:4f:c5:
61:e5:19:62:cb:53:aa:78:ba:a5:98:99:63:74:ba:0a:f7:8f:
e2:86:14:02:2d:b7:6e:42:76:1b:79:bd:80:2b:a0:5a:07:72:
23:9f:f3:e3:54:6f:37:33:61:aa:90:06:90:0a:0e:25:c5:74:
f7:c1:7e:2e:56:ef:4b:ed:db:f5:6a:61:60:5e:80:85:bb:92:
d5:86:c5:72:81:d4:f6:b9:62:9c:8f:3b:18:25:c7:0a:5e:40:
2a:34:e7:60:35:fb:af:b6:ef:c9:56:e0:65:9f:ed:e0:67:11:
1d:d0:37:29:4d:ad:f2:68:4d:fc:f2:1f:24:4f:15:5b:0a:1d:
a6:55:78:b6:9b:20:b2:1c:e9:c6:75:a3:86:3f:7a:b7:8b:6a:
88:03:87:f1:98:7b:68:a1:6e:df:5d:40:73:bd:5b:ee:51:79:
62:7a:01:d6:ad:fa:6a:b9:58:fb:5f:5b:85:38:97:54:04:8d:
39:3e:79:8a:1a:fc:63:02:59:8a:90:77:e4:f1:cf:21:67:8b:
92:ec:d4:e8:55:98:03:81:d7:04:b0:5d:63:0f:fe:2e:55:20:
15:7f:16:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:08:41 2025 by rpki-client