Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa
File: 3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa (raw, json)
Hash identifier: +FZe3/GZkagt33qvR402xt+sHt5bbMI94in3uZcKxU0=
Subject key identifier: 85:2B:81:95:75:FE:52:16:F3:41:C1:58:0A:D7:35:59:FF:1D:9E:78
Certificate issuer: /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial: 0A3BA564C45544DD2049BF313A1979ACDBAF6F61
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa
Signing time: Thu 06 Mar 2025 22:34:05 +0000
ROA not before: Thu 06 Mar 2025 22:29:05 +0000
ROA not after: Thu 05 Mar 2026 22:34:05 +0000
asID: 263143
IP address blocks: 191.242.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3b:a5:64:c4:55:44:dd:20:49:bf:31:3a:19:79:ac:db:af:6f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Validity
Not Before: Mar 6 22:29:05 2025 GMT
Not After : Mar 5 22:34:05 2026 GMT
Subject: CN=852B819575FE5216F341C1580AD73559FF1D9E78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:7a:94:bd:dd:4f:b3:21:73:b5:c4:5f:3e:
07:a8:3e:ae:20:9c:fa:14:28:b7:e5:18:f7:cf:15:
6c:b1:8d:89:4e:cc:5b:e2:a8:68:1f:50:e4:e3:e8:
af:2a:43:f0:81:89:5b:c6:ad:8b:b5:7d:1d:93:31:
4c:dd:6e:66:a7:35:d8:a3:0b:d9:36:0b:f1:b3:64:
ac:68:fc:5c:85:89:09:4c:cf:f8:62:a2:37:86:11:
47:86:3c:78:09:2e:f0:d6:4a:3a:d3:ef:45:91:72:
1c:bc:34:61:17:81:f8:22:81:9b:f2:78:1d:22:e0:
2b:bb:81:77:a7:aa:8a:63:5e:0a:de:a1:d0:51:1d:
58:cb:e3:a0:72:eb:64:a5:59:a1:ba:32:36:ab:c7:
7d:6f:74:b5:4d:fd:e8:7e:c8:1a:0d:01:98:1c:7d:
4a:c7:4c:51:8c:d3:98:7e:22:09:83:c9:1d:69:89:
6a:a2:c5:f4:1d:f3:33:c9:c1:0a:ef:df:c6:d8:db:
e1:1c:a1:58:d1:31:89:f2:c5:b0:44:fe:fb:a9:9e:
bb:1b:03:d2:88:54:8b:c7:01:a5:b7:24:84:df:52:
97:c7:ae:bb:f8:56:44:90:fa:7b:a7:32:32:b8:20:
69:89:79:5f:fe:39:37:ac:73:2e:a0:bb:d1:8e:2c:
fb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2B:81:95:75:FE:52:16:F3:41:C1:58:0A:D7:35:59:FF:1D:9E:78
X509v3 Authority Key Identifier:
keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.196.0/24
Signature Algorithm: sha256WithRSAEncryption
95:62:e0:ed:33:1e:50:4f:68:78:02:4c:69:46:be:33:81:da:
77:04:43:4c:19:83:78:55:90:7d:5f:8d:60:5d:c0:f6:64:82:
8a:39:44:d1:25:dc:fe:f1:fc:f1:8b:73:b8:f0:0b:2c:b7:7d:
23:0e:5d:f7:69:84:72:9d:b7:eb:6f:7a:05:79:ad:c9:52:d4:
6e:15:db:6d:ce:4d:6a:1b:a8:3d:6c:93:27:4f:7c:c5:e1:c6:
6b:72:f7:20:fd:51:35:34:d4:a0:97:a9:e5:c1:61:c2:60:5a:
91:b7:59:fe:7f:04:3e:d2:f1:28:bc:37:01:88:1f:b5:8f:fc:
d7:9d:13:30:13:a9:80:8c:29:da:8c:2b:c0:bf:2d:b8:c4:e1:
fe:a0:19:e3:f2:5b:22:a6:1d:e7:4b:f8:2e:bb:20:29:f6:d5:
14:3a:ac:60:95:b7:d2:f4:49:74:3a:f6:50:5d:e0:c1:61:e3:
d3:4d:99:6c:6f:46:35:c0:e4:a7:f7:2d:38:57:c8:bc:9a:1e:
f9:98:c9:17:b7:53:eb:b5:86:83:36:77:19:18:3e:52:6c:b1:
79:20:13:1a:ec:ef:f5:68:ec:64:4d:8d:9e:98:27:70:51:32:
1c:21:85:b0:95:1a:88:94:6b:6a:37:2c:81:28:57:b8:02:ff:
9f:1b:16:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:42 2025 by rpki-client