Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa
File: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (raw, json)
Hash identifier: jMrMUs4VOBCAYlY5M26tCHTLt4f9W78y5caiTUlHdQ4=
Subject key identifier: F2:95:0E:35:D2:9F:FB:26:23:25:B5:89:F0:CF:DD:97:37:FE:C6:1D
Certificate issuer: /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial: 0B961B994A87B6EF64436889E53EEFFCADE17B5B
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa
Signing time: Thu 20 Mar 2025 16:57:17 +0000
ROA not before: Thu 20 Mar 2025 16:52:17 +0000
ROA not after: Thu 19 Mar 2026 16:57:17 +0000
asID: 263470
IP address blocks: 191.242.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:96:1b:99:4a:87:b6:ef:64:43:68:89:e5:3e:ef:fc:ad:e1:7b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Validity
Not Before: Mar 20 16:52:17 2025 GMT
Not After : Mar 19 16:57:17 2026 GMT
Subject: CN=F2950E35D29FFB262325B589F0CFDD9737FEC61D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:e8:7c:50:86:7d:aa:8e:72:a7:8e:aa:86:
f0:4f:c3:60:09:c9:2d:bf:d3:ff:1b:31:86:e5:74:
9f:0a:27:39:c1:57:8e:f3:15:88:a2:c2:23:74:4f:
ec:49:ea:ec:51:ef:cf:d8:76:81:88:26:6e:1d:8d:
39:30:ff:9f:ed:72:2e:36:f3:ef:3b:70:45:96:a0:
6c:28:06:6c:f3:6b:b0:a8:63:21:5d:55:f5:8a:4b:
5c:59:d7:48:8f:01:b7:52:26:cc:c8:28:84:1e:7f:
84:41:91:99:10:ba:f8:b7:c4:ff:ff:66:fa:75:7f:
69:4c:b9:71:20:aa:2b:6f:ed:85:59:bc:47:a7:c5:
e7:64:43:0e:9d:4e:57:7d:ed:01:c3:a9:06:33:16:
4c:58:fd:37:cb:14:ad:ab:e6:41:e2:d8:53:38:04:
a7:2a:2a:4c:df:9d:41:b5:10:dc:ac:96:69:d9:12:
5a:42:1a:ed:c1:00:8d:7f:82:e9:94:16:57:79:ab:
25:b8:45:75:f4:c5:c7:4c:a7:2b:7e:28:4e:d1:85:
da:ab:39:cb:9e:71:3b:e7:88:fb:16:20:87:01:80:
06:84:ea:b7:44:c8:6d:38:4a:e9:18:32:ec:5c:0f:
d1:78:97:7e:c9:bb:82:0b:b7:8e:f3:8e:0b:05:e9:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:95:0E:35:D2:9F:FB:26:23:25:B5:89:F0:CF:DD:97:37:FE:C6:1D
X509v3 Authority Key Identifier:
keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.48.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:58:4b:e3:9a:32:3d:29:f5:59:ec:18:09:4f:58:bd:05:82:
0c:f5:11:22:23:8d:aa:83:7a:dc:b4:d2:b5:99:13:6e:f5:3d:
c1:ea:bf:6f:5e:12:99:dd:35:e6:cb:03:e1:02:33:cb:56:21:
57:b5:6a:c9:96:1e:e5:7b:93:20:52:af:4b:f8:1d:53:46:55:
16:1e:1b:96:47:b5:42:ab:f2:ad:1f:be:45:af:be:81:6b:b8:
01:b2:04:79:51:b4:33:6f:8f:d8:b7:06:dc:84:33:9d:96:69:
18:35:17:01:61:58:f5:8b:1b:64:07:d4:c5:c4:ba:6a:49:bf:
76:40:27:78:2b:2a:2b:d0:a2:53:76:c4:6f:2b:49:c5:72:46:
54:35:55:83:ae:aa:49:fb:e7:8c:32:c4:38:48:4f:e6:d1:2b:
68:06:78:22:b1:12:15:fd:68:7d:a6:2f:10:c5:31:cc:4f:bb:
63:8a:76:62:e2:1c:92:60:2d:14:61:35:50:c0:aa:e3:39:1e:
15:97:55:c1:06:83:44:a2:c7:9f:b5:ba:4a:97:e6:8d:d8:59:
b8:4d:89:74:a6:57:c4:b9:02:5b:07:34:79:05:7a:03:e5:17:
86:ae:e0:71:70:36:23:a6:1e:ca:45:4d:43:bd:3d:4c:d4:06:
fc:03:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:13:46 2025 by rpki-client