Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3134332e3230322e3234342e302f32322d3234203d3e20323633353639.roa
File: 3134332e3230322e3234342e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier: vu4XuvE+re+H7/3akml/fkWz2ZeAO18S5Ahqo+9FrFQ=
Subject key identifier: 92:6E:C1:97:02:ED:1B:34:EE:34:C3:43:3E:D4:88:16:59:5F:62:57
Certificate issuer: /CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
Certificate serial: 4DC343ECF15DBA00C96029BCC06680742D049E39
Authority key identifier: 82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3134332e3230322e3234342e302f32322d3234203d3e20323633353639.roa
Signing time: Fri 24 Jan 2025 18:46:33 +0000
ROA not before: Fri 24 Jan 2025 18:41:33 +0000
ROA not after: Fri 23 Jan 2026 18:46:33 +0000
asID: 263569
IP address blocks: 143.202.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c3:43:ec:f1:5d:ba:00:c9:60:29:bc:c0:66:80:74:2d:04:9e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
Validity
Not Before: Jan 24 18:41:33 2025 GMT
Not After : Jan 23 18:46:33 2026 GMT
Subject: CN=926EC19702ED1B34EE34C3433ED48816595F6257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:57:e0:ce:f9:df:ea:22:1a:2b:a3:97:9f:
36:e1:37:22:88:d7:88:6d:f0:92:3c:43:14:f5:de:
98:8c:cd:67:77:25:f0:2b:ba:dd:f7:80:6a:88:47:
0f:c4:ac:0f:bd:7f:bc:4a:e3:9a:f0:21:9e:e8:52:
53:39:74:9e:e0:9c:24:4c:e6:29:30:ef:d4:6b:65:
06:1f:37:af:92:a1:2b:46:c4:b0:9b:67:01:72:b7:
0d:63:b8:3a:5d:0d:b2:ec:be:97:90:fa:27:35:b1:
51:7f:56:ae:8f:f3:ed:17:96:b1:93:c2:63:47:13:
f1:40:d5:b3:90:ba:b6:23:61:e4:d7:63:35:da:bc:
3b:26:46:56:1c:e4:88:f3:be:51:c8:e8:e4:f7:d9:
21:e7:d1:ab:a3:42:02:82:a5:9d:ae:2c:45:b9:63:
be:6c:58:a1:4b:e8:28:4f:d7:bd:9e:87:4b:57:21:
6c:d7:c7:54:cd:6d:20:bd:c9:b3:bb:71:ea:20:2d:
a3:7d:9c:89:c2:5e:3f:0f:29:93:45:75:9a:3b:f9:
bb:e1:23:5f:6f:f5:05:ea:7e:5f:25:17:c7:9f:8e:
2c:44:51:be:fc:80:7b:0e:c3:25:0b:10:a5:57:e0:
b2:73:10:9b:6b:ee:53:78:3c:73:97:f1:88:ae:c9:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6E:C1:97:02:ED:1B:34:EE:34:C3:43:3E:D4:88:16:59:5F:62:57
X509v3 Authority Key Identifier:
keyid:82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/82BD943EADDE8D043442C08B37EFCE567D8A3660.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3134332e3230322e3234342e302f32322d3234203d3e20323633353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.244.0/22
Signature Algorithm: sha256WithRSAEncryption
e6:57:e8:3b:63:ae:67:66:fe:8f:df:34:0b:54:2b:3b:8c:87:
60:2a:77:76:da:a4:4c:2b:c2:40:95:be:8d:99:ee:96:5f:e9:
ab:eb:49:cd:a3:92:ad:f5:72:61:c9:6a:81:96:97:5a:0e:57:
95:18:13:87:99:93:9b:25:df:24:f6:0a:3f:69:a2:71:41:d8:
6a:de:af:e6:43:25:11:d4:3a:64:79:42:36:5f:a9:c3:ad:5f:
c9:c9:76:59:7f:7a:c0:02:06:d7:dd:41:fd:77:00:88:1d:d9:
83:b1:34:19:5e:f9:3c:e2:69:60:10:f2:25:99:06:a9:40:46:
9a:07:3f:fc:40:e5:96:fc:05:70:96:99:4f:05:60:58:a3:7a:
71:4b:17:31:46:38:77:3a:eb:bd:b9:23:b8:1c:84:27:37:3a:
18:10:57:9d:36:e6:e0:fa:d7:41:59:2f:ed:3f:02:a7:72:c6:
b8:4b:7a:a3:41:f6:4e:6f:fa:8c:c0:04:b2:59:3d:49:f7:6f:
2c:bd:06:d6:31:25:3b:16:d1:3c:da:9c:b0:5b:62:a9:dd:0d:
e1:fa:9a:e8:59:21:7e:34:ff:40:d5:1b:c0:8b:18:40:88:09:
b4:cd:6f:98:fc:9b:46:c3:1c:00:1e:85:1c:72:36:4b:3a:3c:
fe:e8:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:22:06 2025 by rpki-client