Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3235332e302f32342d3234203d3e20323633353730.roa
File: 3138362e3234392e3235332e302f32342d3234203d3e20323633353730.roa (raw, json)
Hash identifier: /YO8WThIusApGkzVop8ECP/1BhN8apdQCkhjNQPB1cc=
Subject key identifier: 4F:9E:95:6D:92:96:46:DA:26:71:4E:35:E5:AC:F5:F8:F6:48:73:10
Certificate issuer: /CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
Certificate serial: 6E31F81FD54A72726E248E45E7D3B113BECAD5D7
Authority key identifier: 9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3235332e302f32342d3234203d3e20323633353730.roa
Signing time: Thu 06 Feb 2025 13:57:38 +0000
ROA not before: Thu 06 Feb 2025 13:52:38 +0000
ROA not after: Thu 05 Feb 2026 13:57:38 +0000
asID: 263570
IP address blocks: 186.249.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:31:f8:1f:d5:4a:72:72:6e:24:8e:45:e7:d3:b1:13:be:ca:d5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
Validity
Not Before: Feb 6 13:52:38 2025 GMT
Not After : Feb 5 13:57:38 2026 GMT
Subject: CN=4F9E956D929646DA26714E35E5ACF5F8F6487310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:75:3d:19:24:e0:04:64:02:ce:2f:c7:15:
d6:9b:4b:72:cb:85:29:bb:2f:c0:e7:57:44:be:0f:
99:01:97:af:49:3a:5d:eb:8d:9d:7f:07:e1:9b:9e:
74:df:26:8e:8e:97:66:fe:4d:06:7f:c9:0c:b3:69:
0d:41:cc:c9:10:e9:07:25:61:c9:f3:46:9f:98:a5:
df:37:83:55:8a:4d:fa:fd:c7:7b:04:cf:c3:d2:58:
7a:c7:60:74:62:1b:8b:96:a9:7b:d9:3a:8c:9b:d1:
d6:c7:25:67:28:d5:01:00:4a:20:64:fd:01:73:b3:
6f:3c:ed:e2:e0:5d:5b:e9:2f:e2:66:57:3d:4a:d5:
14:19:84:0f:22:20:0c:80:87:62:b6:07:8b:8d:73:
74:a7:cb:88:1d:07:37:d8:33:ab:be:f8:86:db:53:
4d:16:c0:86:26:de:1d:ca:90:b0:91:5a:f8:52:f0:
07:fa:45:9d:f1:8f:fe:20:4e:d9:7b:f3:5d:b3:07:
f7:40:58:66:e8:a8:87:a2:c3:ae:c0:ad:50:c5:ac:
27:e0:74:de:62:26:03:94:e5:96:d5:4b:eb:1d:37:
ea:3f:6f:9f:e9:21:ff:0b:09:68:53:3f:f1:63:de:
d7:55:27:8f:22:db:e0:3c:df:d9:30:a3:82:fb:47:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9E:95:6D:92:96:46:DA:26:71:4E:35:E5:AC:F5:F8:F6:48:73:10
X509v3 Authority Key Identifier:
keyid:9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3235332e302f32342d3234203d3e20323633353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.249.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a4:82:d0:8c:f5:88:3d:ec:dd:be:cd:fe:20:43:f3:43:b9:
ea:df:81:e8:63:05:74:f2:d9:63:91:dd:7e:dd:c2:87:44:81:
da:64:39:87:09:e4:0d:db:57:bb:96:e5:11:42:46:e8:1a:62:
ba:de:bd:96:99:7a:fc:a5:c5:b6:4b:28:68:fa:2f:4e:54:6d:
32:89:89:84:4c:fc:ca:7d:90:1b:2a:37:c7:65:73:46:de:36:
1f:24:1f:ff:a0:96:9b:16:f4:78:e4:4a:1c:dd:61:af:a7:49:
5e:8c:31:0a:66:44:e0:66:53:40:4f:3d:82:f3:52:ec:5f:bb:
7d:a1:d2:f7:eb:dd:0a:f8:93:1f:0d:8c:e0:d7:1d:84:35:71:
38:4a:6c:ab:c7:4f:e1:c5:ed:a8:c4:00:aa:3a:94:31:72:a5:
a1:b8:34:fd:b4:fc:ca:8a:f8:19:e7:a5:a7:86:59:fe:7c:50:
59:b5:3b:e6:f3:a1:ca:f2:72:01:41:e3:30:6e:4f:96:d2:70:
92:93:c0:cc:54:53:bb:ae:80:c1:1e:a9:2d:e1:cf:ae:75:89:
2c:cf:ca:88:e4:e8:73:c7:5d:bf:b8:ff:29:c1:b4:d5:b8:a2:
78:bd:2e:32:36:0a:75:3a:26:27:1e:84:26:68:26:96:1e:e6:
d0:2f:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:59:40 2025 by rpki-client