Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/3134332e302e3134342e302f32322d3234203d3e20323634303230.roa
File: 3134332e302e3134342e302f32322d3234203d3e20323634303230.roa (raw, json)
Hash identifier: 7T1jtCGEIIftZKq4bt4aq6ybVybmzKArM4/JrfHXynw=
Subject key identifier: 7A:2D:72:B1:A7:57:15:AF:9E:81:A5:3A:BB:CB:1C:F4:34:47:8A:7E
Certificate issuer: /CN=1FB958013DB5E23529E65FC0CF7135987F37CBEF
Certificate serial: 1DF17945F8AB82321DFEA0C205DF4B859E2540C8
Authority key identifier: 1F:B9:58:01:3D:B5:E2:35:29:E6:5F:C0:CF:71:35:98:7F:37:CB:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB958013DB5E23529E65FC0CF7135987F37CBEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/3134332e302e3134342e302f32322d3234203d3e20323634303230.roa
Signing time: Thu 13 Mar 2025 14:38:17 +0000
ROA not before: Thu 13 Mar 2025 14:33:17 +0000
ROA not after: Thu 12 Mar 2026 14:38:17 +0000
asID: 264020
IP address blocks: 143.0.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f1:79:45:f8:ab:82:32:1d:fe:a0:c2:05:df:4b:85:9e:25:40:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FB958013DB5E23529E65FC0CF7135987F37CBEF
Validity
Not Before: Mar 13 14:33:17 2025 GMT
Not After : Mar 12 14:38:17 2026 GMT
Subject: CN=7A2D72B1A75715AF9E81A53ABBCB1CF434478A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:66:10:3c:bb:40:ba:38:85:77:d0:3a:cb:
7b:75:bc:e6:30:96:f0:3a:b3:4f:d4:83:60:9f:18:
59:3b:14:cd:71:34:b7:9e:50:1d:7f:e4:fb:9a:61:
ab:d1:e8:02:a7:f8:6f:f1:3e:a8:89:73:a5:76:c8:
06:f0:4f:e4:89:3c:28:1c:43:21:5e:d8:d5:6d:c0:
5e:57:fa:1d:11:76:3f:ea:a6:31:aa:6d:0e:f6:3c:
63:8f:3c:de:ef:60:79:7e:96:1a:4f:de:52:d7:33:
b5:31:64:49:30:ba:d9:3d:2d:bb:b4:06:70:cc:08:
35:47:a7:c4:6b:6f:61:46:ac:28:a9:f1:8e:07:ae:
5b:b3:06:98:c0:b7:89:03:d4:b7:23:12:28:b1:0f:
eb:2e:39:69:da:9b:a3:eb:29:5e:8b:21:62:f2:d8:
9a:ca:1b:19:a5:9e:4e:52:4b:e1:46:9f:35:61:5d:
fe:fc:23:27:e4:1f:d6:3d:f6:b2:2d:3b:ba:53:a5:
fe:74:19:96:19:b3:6e:f1:51:ce:9f:b6:1c:f7:67:
4c:52:a3:d0:08:7f:6a:66:00:e9:f2:73:a6:23:7a:
91:57:ee:f1:75:31:68:ae:2c:21:b9:d6:60:a5:8d:
0e:1b:e7:f8:87:51:c9:26:26:9e:45:ea:d9:d7:c4:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2D:72:B1:A7:57:15:AF:9E:81:A5:3A:BB:CB:1C:F4:34:47:8A:7E
X509v3 Authority Key Identifier:
keyid:1F:B9:58:01:3D:B5:E2:35:29:E6:5F:C0:CF:71:35:98:7F:37:CB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/1FB958013DB5E23529E65FC0CF7135987F37CBEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB958013DB5E23529E65FC0CF7135987F37CBEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/3134332e302e3134342e302f32322d3234203d3e20323634303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.144.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:fb:22:63:77:d9:ef:21:0f:51:bd:3a:9d:f1:25:43:45:4f:
4b:81:d3:8c:eb:82:a8:b2:17:6d:0c:c4:85:bd:80:c7:59:f0:
83:1d:22:4e:c0:7f:4e:32:19:d6:63:a2:b3:2a:f3:20:76:9f:
47:b7:0c:a4:c9:eb:82:a4:b4:f8:29:2a:ab:f3:85:1b:03:5b:
95:ad:49:e9:5e:81:98:fa:bd:95:9e:de:b6:f1:bb:53:29:8b:
65:24:58:c0:27:f9:80:87:06:6f:05:c9:49:e1:6c:6f:b7:3b:
90:d3:ec:6b:3e:e2:12:c7:7f:1c:ad:d0:bb:83:82:22:1c:85:
a2:f4:4f:52:ea:bb:1c:73:b0:6a:dc:7d:01:a5:02:7e:32:4b:
9c:98:aa:69:54:8a:1b:17:d3:69:d4:0f:c3:cf:67:2a:d1:c2:
ed:27:89:11:db:8e:45:e9:b8:46:b2:84:f9:a4:02:18:c4:45:
0a:79:71:17:fd:d7:d1:9f:fb:a3:2c:67:c5:3c:a8:5f:52:dd:
e2:26:fd:30:0b:61:a2:98:d2:f3:76:3c:33:b1:03:6f:d5:6b:
58:63:c6:96:23:e0:cd:55:0f:b4:dc:46:92:41:8f:24:15:3a:
7d:a8:86:74:70:a2:7e:f6:1d:38:9c:a8:ba:1e:65:6c:bb:61:
06:41:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:40:33 2025 by rpki-client