Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/3139312e3234312e3136302e302f32312d3332203d3e203532393034.roa
File: 3139312e3234312e3136302e302f32312d3332203d3e203532393034.roa (raw, json)
Hash identifier: CkGv2W1wQmwIX6WxUgizF8ZQ1ADx3LtR8oN2aj7dYos=
Subject key identifier: BC:90:8B:79:B4:74:48:C8:43:EE:62:DC:2B:69:1E:B8:3C:6D:89:AB
Certificate issuer: /CN=5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C
Certificate serial: 08464AF25D25FF7E1E4D35068819CCA38CBCD64A
Authority key identifier: 5F:A9:2D:08:2A:D8:BD:E2:E6:BF:B7:90:DA:3F:33:25:9A:D5:3F:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/3139312e3234312e3136302e302f32312d3332203d3e203532393034.roa
Signing time: Wed 05 Mar 2025 19:48:20 +0000
ROA not before: Wed 05 Mar 2025 19:43:20 +0000
ROA not after: Wed 04 Mar 2026 19:48:20 +0000
asID: 52904
IP address blocks: 191.241.160.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:46:4a:f2:5d:25:ff:7e:1e:4d:35:06:88:19:cc:a3:8c:bc:d6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C
Validity
Not Before: Mar 5 19:43:20 2025 GMT
Not After : Mar 4 19:48:20 2026 GMT
Subject: CN=BC908B79B47448C843EE62DC2B691EB83C6D89AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:93:46:c8:bb:a6:f4:6e:5b:6c:0b:fb:19:
01:ba:73:3a:14:df:44:47:2c:0f:c5:59:78:04:4a:
58:2a:75:5f:e8:b9:bf:92:b1:cf:6c:d0:ea:8e:21:
17:35:11:50:07:ee:b1:b9:86:8e:56:d1:3f:34:26:
aa:9a:95:b4:0f:44:87:ce:a2:3f:dc:8f:24:71:da:
a1:5d:f8:97:b3:bc:94:17:3b:80:5a:44:28:5c:5f:
3b:c1:4f:fc:2f:70:c5:16:d9:78:83:42:55:6f:35:
54:98:74:ef:df:4b:cc:02:92:36:6e:72:1a:e5:14:
10:96:f9:6a:19:92:cd:90:f0:db:52:cf:3a:0b:3d:
ea:64:78:64:34:97:92:e2:07:66:cf:52:c4:02:53:
75:7d:ce:9c:d9:05:be:27:a0:b4:d7:96:c2:98:79:
88:b0:0f:a3:30:03:50:dc:a1:2d:c2:37:15:0c:8c:
0d:6a:87:71:22:ff:ca:d1:83:c1:bf:8c:fb:67:80:
04:51:58:bb:97:59:3f:d7:6c:57:14:bf:5c:06:30:
da:e5:6e:54:2f:03:a9:9a:40:41:e2:32:e2:b6:aa:
1f:4d:e1:5a:ca:24:b1:39:f3:c9:33:f8:ac:05:07:
3b:1e:11:1d:11:64:f9:22:f4:b3:43:89:70:98:2a:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:90:8B:79:B4:74:48:C8:43:EE:62:DC:2B:69:1E:B8:3C:6D:89:AB
X509v3 Authority Key Identifier:
keyid:5F:A9:2D:08:2A:D8:BD:E2:E6:BF:B7:90:DA:3F:33:25:9A:D5:3F:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/3139312e3234312e3136302e302f32312d3332203d3e203532393034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.160.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:92:c9:25:83:d6:80:8b:8b:a7:85:43:3d:3e:6a:19:1b:78:
d5:b0:93:23:6d:d1:97:88:9f:b6:e3:97:16:08:cc:57:28:29:
ec:57:f3:0c:6d:85:9b:38:b8:7f:dc:02:71:86:89:3a:34:83:
38:31:96:5d:39:1b:ad:2b:ad:a1:74:de:4c:46:90:42:7b:cd:
9c:70:7c:44:f5:d6:22:ea:f8:2e:e4:08:96:65:5b:98:00:ea:
70:35:1b:97:b8:ee:f0:7f:eb:c5:b7:d6:5f:6b:f0:4f:66:0c:
98:5b:3a:ca:06:ea:a5:84:74:f9:90:2f:02:7f:9a:df:52:a9:
a7:e0:47:7c:02:a5:42:c5:76:1c:f7:f6:97:2e:38:36:9f:6e:
d1:7f:3a:d9:29:1e:51:ff:36:f5:6a:f6:41:af:fe:95:d4:45:
8b:95:3c:81:36:1a:b8:07:ea:5c:96:3c:5e:d2:a1:9c:06:ac:
83:aa:c8:28:5f:6d:50:bc:a7:d6:83:d3:dd:98:a7:56:87:69:
62:69:f4:3e:48:14:be:74:f8:8b:a7:dc:b5:76:3a:0a:a9:c1:
2c:51:32:a1:06:ef:17:92:0d:18:eb:a4:50:36:3c:a8:91:48:
21:e4:f0:c2:a2:0d:f4:0b:ef:b3:ad:30:cf:64:95:ba:7e:09:
8b:81:87:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:29:12 2025 by rpki-client