Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32342d3234203d3e20323635333737.roa
File: 3136382e3139342e31322e302f32342d3234203d3e20323635333737.roa (raw, json)
Hash identifier: /pNhv5ng6YfuI/H4KSwqPDFmTGpaELRPncgZqOnlOeY=
Subject key identifier: 72:6A:05:9B:91:DF:95:2B:C0:D2:CD:A1:24:71:E1:90:6A:7F:9D:68
Certificate issuer: /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial: 7C3545E79DB09B57ADF3BC2041649EED476935BA
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32342d3234203d3e20323635333737.roa
Signing time: Thu 06 Mar 2025 22:52:53 +0000
ROA not before: Thu 06 Mar 2025 22:47:53 +0000
ROA not after: Thu 05 Mar 2026 22:52:53 +0000
asID: 265377
IP address blocks: 168.194.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:35:45:e7:9d:b0:9b:57:ad:f3:bc:20:41:64:9e:ed:47:69:35:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Validity
Not Before: Mar 6 22:47:53 2025 GMT
Not After : Mar 5 22:52:53 2026 GMT
Subject: CN=726A059B91DF952BC0D2CDA12471E1906A7F9D68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:4c:38:b6:90:e6:47:5a:80:8d:d9:99:44:
01:fe:85:a1:e2:39:c2:07:1e:01:ff:f9:2a:c8:45:
e1:8d:4d:ad:5d:52:70:8c:63:ca:cc:10:45:f4:31:
b1:6c:4e:49:39:ed:53:8a:23:40:5e:39:99:41:55:
ea:d7:5f:5a:04:6b:26:1a:7e:e9:49:20:c1:02:32:
fd:11:5f:2e:58:3c:28:c2:8e:33:11:45:47:87:b6:
05:79:28:c8:b1:51:d4:cb:6f:cd:49:2b:0f:5b:7d:
ec:83:c2:1e:3a:72:60:b8:fe:ea:df:ce:e9:6e:88:
2e:ce:1b:0a:89:88:b5:fc:4d:97:c0:35:b1:e5:55:
73:e5:8c:03:a5:bf:c5:99:b2:e4:a6:d3:56:c0:ba:
1b:31:e9:52:4d:fe:56:31:83:df:20:a6:be:d6:04:
99:98:44:10:ed:ad:47:5a:c3:42:c2:f4:ff:5d:3e:
f8:c0:57:e2:b1:e7:e8:ca:40:65:3a:b5:fa:92:85:
bb:ef:7e:63:9a:77:aa:55:97:a1:33:db:85:10:cf:
3a:71:0f:6d:3e:4f:ad:d3:c9:de:fa:76:76:bd:86:
06:d8:72:c7:dc:b1:72:cc:b8:a7:6e:5c:a1:f2:58:
e5:dc:42:66:84:39:83:73:36:9c:02:f6:3f:89:7a:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6A:05:9B:91:DF:95:2B:C0:D2:CD:A1:24:71:E1:90:6A:7F:9D:68
X509v3 Authority Key Identifier:
keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31322e302f32342d3234203d3e20323635333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.12.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:fb:d9:0a:ae:41:52:cc:ec:c0:8e:76:58:af:33:c4:d4:e2:
91:7e:dc:bc:ab:09:ee:15:66:2a:91:00:53:a8:fe:86:9d:bc:
95:a6:0d:bd:70:71:98:48:dd:f0:e7:02:96:04:8d:a8:62:ae:
66:07:e6:bd:97:43:ab:33:f9:7b:00:52:1b:b1:c9:d3:61:26:
a0:aa:31:2b:8f:11:b3:57:22:34:4f:9b:0b:ca:75:85:f5:8d:
f5:7d:72:80:17:b6:bb:89:c8:08:60:eb:aa:e1:a1:57:d8:be:
49:21:3f:34:e5:2d:7f:c0:b3:1c:7b:5a:3d:0d:d4:41:44:6e:
39:8a:8f:8e:7f:fa:38:ac:0d:16:b5:67:b2:bf:a3:e3:4a:ed:
c3:c1:f0:1e:32:dc:f1:46:20:8c:fa:04:0a:01:eb:5f:c3:b7:
9d:04:b3:43:54:68:3a:7e:13:58:82:f5:16:e0:e7:6d:56:6a:
4f:88:12:bf:0b:59:09:7f:9e:f3:c9:59:bc:aa:30:eb:b6:fd:
eb:63:00:a7:a9:bc:1d:fe:a7:da:81:b0:e3:50:52:9c:63:25:
12:b5:1a:8a:d5:ad:c6:d7:1a:3b:83:75:a9:59:b6:77:25:ae:
0d:4c:ff:41:f4:4d:b1:2f:bf:05:7c:23:c9:bb:5e:8a:b9:a2:
97:e1:a4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:49:18 2025 by rpki-client