Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa
File: 3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa (raw, json)
Hash identifier: +pE2klfemQGi/4ad4d0C7el0InsR9x15TG2zxnZ+aLg=
Subject key identifier: 69:D5:B6:45:85:08:2B:32:FD:03:A3:0E:19:4B:F2:F8:ED:8B:57:E7
Certificate issuer: /CN=530AA7DD3778859AD9102696F2AD70D18F3BECA8
Certificate serial: 04BEDC95A6B068DD3E126F78B2E52145CF747731
Authority key identifier: 53:0A:A7:DD:37:78:85:9A:D9:10:26:96:F2:AD:70:D1:8F:3B:EC:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530AA7DD3778859AD9102696F2AD70D18F3BECA8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa
Signing time: Thu 06 Mar 2025 14:22:11 +0000
ROA not before: Thu 06 Mar 2025 14:17:11 +0000
ROA not after: Thu 05 Mar 2026 14:22:11 +0000
asID: 271280
IP address blocks: 190.12.152.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:be:dc:95:a6:b0:68:dd:3e:12:6f:78:b2:e5:21:45:cf:74:77:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530AA7DD3778859AD9102696F2AD70D18F3BECA8
Validity
Not Before: Mar 6 14:17:11 2025 GMT
Not After : Mar 5 14:22:11 2026 GMT
Subject: CN=69D5B64585082B32FD03A30E194BF2F8ED8B57E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:b3:65:fe:de:93:30:a8:d4:34:13:54:42:
26:85:f2:96:80:d9:2e:a5:3c:5d:45:78:c2:1c:12:
d8:2a:cf:7f:25:40:4a:9c:ff:2e:49:95:f0:ed:c0:
6c:25:ba:88:4c:66:15:4e:af:e6:ef:e2:36:74:92:
74:4e:a9:b3:21:f8:ba:8a:15:53:d2:24:86:fd:04:
b1:f0:af:e6:e6:f2:ff:8e:f9:43:17:cb:f7:25:15:
57:d5:37:06:ce:8c:52:3b:e1:b6:4b:86:db:ec:83:
45:5c:73:95:0d:f3:84:22:6e:5d:00:f3:ca:de:e8:
3a:4f:eb:af:e3:4e:9f:62:f6:48:f7:72:31:a5:53:
3f:0c:11:86:c9:1f:8f:90:64:d5:cf:fc:7c:79:09:
01:c5:af:37:f7:19:53:82:ed:53:65:63:94:f0:ef:
0c:5f:d7:12:19:67:14:ed:85:76:38:96:28:25:a4:
0d:a0:2b:f6:e0:d8:b8:37:1c:77:d4:0a:60:7d:18:
b7:9e:78:7c:93:de:04:96:c5:f2:a1:6a:47:1c:17:
06:a3:3f:15:87:90:c7:0f:da:a4:80:ac:09:28:d0:
b4:f1:4e:2b:dc:ff:11:a1:62:b5:b7:93:82:99:50:
ee:5b:0d:09:30:82:77:af:ef:72:ea:1b:ed:8e:b5:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D5:B6:45:85:08:2B:32:FD:03:A3:0E:19:4B:F2:F8:ED:8B:57:E7
X509v3 Authority Key Identifier:
keyid:53:0A:A7:DD:37:78:85:9A:D9:10:26:96:F2:AD:70:D1:8F:3B:EC:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/530AA7DD3778859AD9102696F2AD70D18F3BECA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530AA7DD3778859AD9102696F2AD70D18F3BECA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.12.152.0/22
Signature Algorithm: sha256WithRSAEncryption
25:30:97:13:ff:16:fb:10:95:45:91:54:8f:bd:f6:3b:ad:db:
1d:f0:52:b0:1c:c5:29:5b:8d:f5:36:17:43:79:f0:c3:9b:5d:
24:a6:3e:ed:00:d6:d6:67:fb:1b:31:f6:a1:d8:19:89:a1:bc:
0d:99:f3:b3:b3:e0:e4:c6:3e:d6:11:21:89:a7:0e:a8:fc:56:
73:f9:09:61:9f:0b:ba:78:0c:7f:0b:6e:a5:1b:7d:7c:5c:ed:
07:15:5c:81:d4:0e:00:f6:31:c2:c9:46:3d:16:3c:ce:8a:7d:
28:9e:59:1d:79:e3:14:08:0e:d1:4d:50:4e:81:42:a3:61:04:
22:1b:cf:2b:e6:c6:6b:f4:00:9c:2c:3a:5b:70:33:d0:b9:05:
95:06:ef:0a:fb:37:62:7d:58:85:d4:07:b4:42:3f:e4:1e:5c:
ea:5e:03:ad:43:3e:d8:1d:b7:9f:2e:cc:8d:00:83:3e:bc:1b:
07:56:40:e0:bd:df:95:96:4e:75:78:76:08:e7:f0:72:d7:55:
73:48:74:cb:ed:fe:02:9e:80:cc:06:52:70:a8:6f:5b:e4:5f:
0d:03:df:15:14:a0:51:27:0c:6b:31:5d:d2:bd:11:99:9b:20:
a5:02:8d:47:5d:fb:0f:b5:9f:99:dd:2b:85:4f:62:1b:52:4a:
ed:b9:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:47:32 2025 by rpki-client