Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230312e302f32342d3234203d3e203238333238.roa
File: 3138392e31342e3230312e302f32342d3234203d3e203238333238.roa (raw, json)
Hash identifier: /+IwVdYSjHGiLKODxGmiaVJhITsfwdYwDDy/HEVzjes=
Subject key identifier: 77:38:AE:36:10:C2:FF:EB:21:6B:8D:E4:C4:AD:9B:40:5B:5D:61:24
Certificate issuer: /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial: 3C5040FB1C4C4EBC12D26D7179C3645B397D1B7A
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230312e302f32342d3234203d3e203238333238.roa
Signing time: Wed 26 Mar 2025 21:46:59 +0000
ROA not before: Wed 26 Mar 2025 21:41:59 +0000
ROA not after: Wed 25 Mar 2026 21:46:59 +0000
asID: 28328
IP address blocks: 189.14.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:50:40:fb:1c:4c:4e:bc:12:d2:6d:71:79:c3:64:5b:39:7d:1b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Validity
Not Before: Mar 26 21:41:59 2025 GMT
Not After : Mar 25 21:46:59 2026 GMT
Subject: CN=7738AE3610C2FFEB216B8DE4C4AD9B405B5D6124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:cd:53:68:fe:ea:c4:c7:e5:b7:f2:7c:d3:
b0:a1:2b:06:3e:45:ab:1f:b1:75:8f:d5:06:54:c5:
be:f4:d6:e9:50:47:17:88:74:3b:62:46:2d:1d:17:
c3:ac:44:92:43:ef:09:07:30:1c:76:60:91:8f:f5:
2c:ee:81:b0:c0:ed:cb:fc:72:01:85:e4:79:df:c6:
11:a0:9c:c6:fd:e0:e3:8a:dd:c0:2c:02:81:e9:8d:
0b:bd:94:4f:c2:0c:42:35:53:ab:2d:1b:20:b9:5f:
c3:49:5d:85:34:eb:fe:62:ad:ff:fe:fb:f5:3f:6e:
03:1f:c0:e0:25:a9:e4:32:f5:67:8c:45:09:05:cb:
52:fa:ca:70:1d:94:f8:56:b7:81:ad:34:67:ca:dd:
88:2c:68:93:60:43:de:4a:e5:9f:44:22:1c:65:db:
e0:1f:5c:b0:82:3c:f4:a3:08:c4:6b:c2:99:bc:2b:
29:16:fd:1d:f3:03:29:d7:f5:d9:8a:5f:db:66:c8:
a5:b7:2c:f4:08:e2:91:aa:4c:17:23:8d:1a:d2:90:
0f:3c:c8:fa:47:b6:7e:e4:dd:a7:32:a5:dd:aa:96:
e3:99:44:bc:f9:9f:05:22:8a:97:88:1b:4b:fb:31:
ae:d0:b8:cf:6c:8f:65:fd:a0:17:fd:23:25:f3:1e:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:38:AE:36:10:C2:FF:EB:21:6B:8D:E4:C4:AD:9B:40:5B:5D:61:24
X509v3 Authority Key Identifier:
keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230312e302f32342d3234203d3e203238333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.14.201.0/24
Signature Algorithm: sha256WithRSAEncryption
78:51:f6:90:ef:ca:de:77:25:55:43:b0:55:9f:63:7c:c8:00:
78:de:13:9f:2f:15:8a:6c:38:41:b8:c8:5d:4a:48:04:9d:d4:
46:d5:02:65:f3:d9:b5:6f:79:b4:f3:9b:0d:dd:4b:e1:71:00:
de:10:06:a8:eb:4f:56:60:61:ce:84:99:31:fa:c3:b4:23:3d:
d0:bd:a3:41:ae:7d:f5:f7:d9:75:69:aa:9b:97:3f:e0:86:95:
14:a9:1a:4c:f2:89:f8:ff:f7:84:59:4c:2a:b1:a8:c9:dd:52:
01:ce:d1:3f:cd:df:0f:05:3f:e6:cc:45:91:83:c5:54:fa:0e:
a5:ad:7d:a2:a2:f5:00:b4:d1:11:d7:ee:9c:61:6f:d4:0b:bf:
34:01:3c:37:c6:31:36:85:3a:0b:07:80:17:39:05:95:13:2d:
77:bd:a6:c3:8c:db:1f:09:d0:38:9b:2d:6b:16:2b:0b:1f:ef:
72:8b:ff:7c:d3:b8:38:0d:76:41:28:9d:3c:58:e7:f7:35:04:
3b:64:95:a5:8b:f4:53:78:a9:99:6e:22:71:e8:bc:44:98:cd:
e9:ae:91:9e:18:02:6d:f6:52:62:8f:4c:22:c7:d9:0c:09:35:
fb:18:b9:5b:02:07:82:67:48:fc:08:f4:ee:1a:cc:df:5b:85:
1b:50:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:05:21 2025 by rpki-client