Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138392e32382e302e302f32302d3234203d3e203238323739.roa
File: 3138392e32382e302e302f32302d3234203d3e203238323739.roa (raw, json)
Hash identifier: 1lVrNO0KNBLbFazA/al91uSmno5cnDpgovZDfgKqdrU=
Subject key identifier: 83:A7:54:47:D4:62:CA:FA:26:C9:6E:E2:46:40:0D:3F:67:B2:13:81
Certificate issuer: /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial: 666FB8160719D82635765B806763187EC1B2ED68
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138392e32382e302e302f32302d3234203d3e203238323739.roa
Signing time: Thu 06 Mar 2025 23:46:07 +0000
ROA not before: Thu 06 Mar 2025 23:41:07 +0000
ROA not after: Thu 05 Mar 2026 23:46:07 +0000
asID: 28279
IP address blocks: 189.28.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:6f:b8:16:07:19:d8:26:35:76:5b:80:67:63:18:7e:c1:b2:ed:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Validity
Not Before: Mar 6 23:41:07 2025 GMT
Not After : Mar 5 23:46:07 2026 GMT
Subject: CN=83A75447D462CAFA26C96EE246400D3F67B21381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:e5:5f:f6:b4:d5:65:58:f1:18:c8:c7:80:
ba:45:ed:29:4d:81:eb:4d:d3:e7:5b:e1:37:6b:5c:
c1:36:3c:2f:d3:b0:58:84:c3:f0:87:d7:70:e5:57:
f1:cf:f2:a3:74:54:50:8c:88:67:18:08:e2:ad:56:
39:10:a8:0f:21:01:d9:15:af:da:0b:14:c4:60:c4:
d3:39:73:60:fc:27:a9:0f:3a:96:98:99:09:86:53:
d7:d9:16:fd:a4:0c:e1:9c:00:c6:1b:ab:4f:7a:27:
c8:11:af:52:f0:f4:68:41:6f:8f:ce:f3:8c:6a:a6:
16:4a:f7:de:26:94:3d:a4:ff:fa:37:ce:5e:cd:c0:
43:e1:38:76:ef:6c:3a:38:47:07:46:0b:19:e8:48:
e9:50:31:28:78:f2:4e:7c:43:bd:a5:71:b7:73:d1:
ff:d0:00:dc:1d:d9:25:37:c7:1c:9f:1d:10:5b:84:
43:7a:f4:ff:0a:e1:54:71:ef:26:ac:11:16:60:7c:
2c:cb:bf:2c:43:5f:06:56:dc:08:f1:67:4d:c5:91:
c5:1f:15:d1:6c:61:96:1f:ef:51:a5:85:2c:bf:15:
dc:d3:42:80:21:1d:ba:50:62:3d:54:97:a5:b4:05:
69:2f:59:1d:d7:c5:8d:f1:77:28:25:2d:57:41:df:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:54:47:D4:62:CA:FA:26:C9:6E:E2:46:40:0D:3F:67:B2:13:81
X509v3 Authority Key Identifier:
keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138392e32382e302e302f32302d3234203d3e203238323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.28.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:6a:a7:c9:dd:e7:e2:eb:7a:dc:69:e8:d8:11:49:bf:7c:e7:
c5:5e:25:75:57:fa:dc:2e:ea:8c:d2:b1:90:d6:03:4f:40:9c:
74:66:cd:31:ea:be:e0:51:1a:46:43:99:ea:4c:ac:12:79:1d:
03:b0:07:af:a9:17:e5:7c:5e:40:80:1e:5c:f6:fe:11:c1:6d:
4f:de:51:3c:e6:5d:70:ae:8e:a9:f7:dc:bf:cd:b2:46:4c:fe:
60:eb:ac:b6:18:7b:75:48:7a:d8:e8:df:e7:b7:d6:e9:64:7b:
9c:38:58:43:17:7d:20:9b:e0:94:4b:ad:4c:82:d5:7f:d2:92:
8a:84:74:d6:9a:17:2e:05:d2:2d:bf:0b:fe:59:b6:90:cc:b4:
88:8c:aa:69:08:8a:be:1c:03:1b:59:74:d7:56:5f:1c:b8:c7:
59:2e:7a:60:60:62:82:4c:72:29:9c:e8:c1:ce:06:7a:90:71:
c5:15:36:1f:18:0d:8a:f7:63:a4:56:79:85:d1:d1:05:f0:a2:
c6:36:70:83:b7:41:d7:f2:56:d5:fa:9a:89:6c:87:c1:c7:9d:
0e:b1:5a:be:e5:f1:91:24:7c:a8:0a:92:93:38:b2:11:a5:06:
da:da:43:d3:dd:0d:32:86:ca:f3:a7:3e:ee:7b:41:4f:0d:64:
a1:22:50:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:35:31 2025 by rpki-client