Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3139312e35322e3232342e302f32302d3332203d3e203238353938.roa
File: 3139312e35322e3232342e302f32302d3332203d3e203238353938.roa (raw, json)
Hash identifier: yqQXYhU2lhSNANm5T9jPtR92SYFegyOb5168HwCkvQM=
Subject key identifier: AC:10:F3:77:E2:3E:A0:E6:54:A8:77:CF:20:60:C3:E9:D0:90:54:BA
Certificate issuer: /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial: 2578FF945AF15F5B47EF3BC76ADA1B125B32601E
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3139312e35322e3232342e302f32302d3332203d3e203238353938.roa
Signing time: Tue 22 Nov 2022 15:00:40 +0000
ROA not before: Tue 22 Nov 2022 14:55:40 +0000
ROA not after: Tue 21 Nov 2023 15:00:40 +0000
asID: 28598
IP address blocks: 191.52.224.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:78:ff:94:5a:f1:5f:5b:47:ef:3b:c7:6a:da:1b:12:5b:32:60:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Validity
Not Before: Nov 22 14:55:40 2022 GMT
Not After : Nov 21 15:00:40 2023 GMT
Subject: CN=AC10F377E23EA0E654A877CF2060C3E9D09054BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:b3:ef:8a:7e:c8:30:58:bc:9e:cd:49:62:
09:6d:aa:66:dc:ad:c8:13:af:e2:e2:30:c1:26:19:
1c:d7:e6:81:bb:b7:74:f7:7f:30:0b:63:27:ad:4f:
07:ad:c7:f9:39:1f:a9:f7:ac:47:4c:64:2c:31:6f:
29:61:43:29:f6:d9:b8:e3:1b:4e:05:24:4a:ea:c3:
ed:43:3f:b9:8b:88:0e:08:71:24:9f:70:81:6e:59:
d1:7b:11:53:5a:76:3e:0c:bd:34:b0:08:a1:a6:66:
df:04:2c:fd:c3:f9:20:c9:02:15:b0:fb:83:47:3a:
fb:f0:85:45:e3:ec:18:2d:4b:e4:fc:e9:97:a1:39:
27:a1:81:af:38:1d:37:19:03:e7:67:48:5b:33:83:
99:4a:7c:3b:4a:45:75:93:1f:45:33:d1:ad:21:14:
dc:97:5e:be:a4:6a:7d:91:6a:21:3d:38:51:cb:db:
9f:87:f4:46:98:d3:54:a5:38:7a:ac:dc:1e:51:a8:
70:92:50:ad:60:0d:40:69:7c:bb:6f:92:77:4e:c4:
d4:f9:c1:3d:37:d1:ba:ed:d5:93:d2:6c:76:c5:cf:
2a:95:a3:e4:62:f3:f9:69:f5:ca:15:fe:7f:3b:10:
df:6c:f7:15:dd:9e:42:d5:94:be:84:81:b9:e4:b1:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:10:F3:77:E2:3E:A0:E6:54:A8:77:CF:20:60:C3:E9:D0:90:54:BA
X509v3 Authority Key Identifier:
keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3139312e35322e3232342e302f32302d3332203d3e203238353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.52.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:f9:5a:30:26:fa:d5:5a:46:1c:4e:49:1e:2d:5b:02:61:f3:
09:33:b4:2a:e5:e1:4c:5b:ed:b2:48:79:78:07:d8:76:4f:e1:
98:06:06:de:cd:8c:e1:11:86:cc:fe:8a:7f:b4:09:2c:0d:4e:
b7:28:f4:22:00:26:e1:0c:dc:14:19:43:b8:7d:48:63:db:55:
14:e4:64:a2:ac:b3:71:40:30:cd:04:49:35:2e:8f:d9:9a:d5:
35:dd:b0:ec:d4:9f:ac:44:2e:1d:e6:66:b5:b6:a8:cd:33:56:
f6:03:82:d7:0e:0c:5a:fe:9a:f2:55:94:0d:20:ec:a2:f9:ee:
7e:50:b9:79:c7:0d:17:10:cc:8f:2d:07:7a:3d:3d:b7:0a:2f:
58:1c:2d:9d:b0:ab:d4:03:d3:ce:92:e6:7b:7d:ea:7a:2d:70:
93:22:68:4c:68:10:2b:cd:68:10:74:f4:ee:06:1c:04:a0:17:
d2:db:34:36:9a:e8:34:c0:61:ff:d0:4a:bf:1b:e4:7b:b4:4e:
2e:6b:f8:9d:cb:7a:eb:57:bf:1e:b4:b5:73:82:b1:c4:3b:3c:
79:0c:f3:23:d4:bf:f7:23:9a:5b:e2:f3:6b:30:82:50:76:fb:
49:63:df:e8:68:84:96:ec:14:08:7d:1d:6b:5a:f9:b0:0d:6b:
8f:07:9b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:43:58 2025 by rpki-client