Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa
File: 3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa (raw, json)
Hash identifier: SLdN7miKDj6zZuAzWis/kDxA3bVq8JmQYeBgk9u4V2o=
Subject key identifier: E1:ED:9B:B7:32:F5:FC:5B:8A:B4:85:CB:09:9D:7F:37:2F:1F:CA:8B
Certificate issuer: /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial: 3D12609286FE69BADE94BF846A6BC00EF77C3317
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa
Signing time: Thu 06 Mar 2025 22:34:05 +0000
ROA not before: Thu 06 Mar 2025 22:29:05 +0000
ROA not after: Thu 05 Mar 2026 22:34:05 +0000
asID: 263143
IP address blocks: 191.242.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:12:60:92:86:fe:69:ba:de:94:bf:84:6a:6b:c0:0e:f7:7c:33:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Validity
Not Before: Mar 6 22:29:05 2025 GMT
Not After : Mar 5 22:34:05 2026 GMT
Subject: CN=E1ED9BB732F5FC5B8AB485CB099D7F372F1FCA8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:a1:3f:ad:1d:77:0d:35:dc:d5:49:85:88:
08:02:ee:a7:f6:63:e1:4b:03:9e:24:dc:25:67:c3:
95:e0:c4:a4:fe:cf:bd:00:d9:55:2a:fe:7e:c5:ae:
a7:33:75:0d:71:91:57:b9:36:9f:69:f0:a1:e7:58:
c3:e0:7d:71:1f:02:3c:ca:ea:b9:3c:06:f2:87:7d:
0e:36:11:2f:85:57:a7:1a:2d:ef:30:bb:76:32:e4:
ab:0d:be:f3:61:77:88:ad:df:66:8a:33:ae:b9:73:
e7:31:9d:4f:7d:39:73:10:71:2a:9a:cf:de:8c:b1:
1e:5c:c3:a4:b9:37:38:24:f7:c2:0f:90:33:4f:bb:
f3:b8:16:31:21:72:0c:17:ed:2c:1c:d5:22:b5:91:
e0:be:63:ef:7a:a5:b7:09:82:a7:f3:cc:9e:6f:2d:
30:b2:04:85:20:97:c5:3d:a9:29:47:72:21:aa:1e:
f6:67:dc:8c:61:ad:72:87:13:c8:fd:24:c1:98:bd:
5b:aa:9b:3a:c7:05:14:f3:5c:4b:5c:6f:e0:1c:48:
e8:ab:f9:1c:1f:c6:81:da:8d:32:72:66:6f:c2:27:
f3:f4:ab:66:b6:d0:28:cf:7b:09:fa:fd:2b:ce:35:
a7:5a:41:f8:3a:79:67:d2:f7:63:45:8c:10:5b:8c:
27:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:ED:9B:B7:32:F5:FC:5B:8A:B4:85:CB:09:9D:7F:37:2F:1F:CA:8B
X509v3 Authority Key Identifier:
keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:e2:39:e0:dc:e9:e8:3a:b9:fa:94:ba:4d:51:17:4f:ed:20:
55:69:ad:5f:37:71:32:02:98:02:1b:8e:48:22:3a:10:51:50:
ce:44:10:d8:c2:51:29:0b:21:03:2c:8b:0e:62:5c:52:27:b6:
95:09:d7:f8:97:03:6a:e0:46:f3:62:5e:d5:e6:45:e6:c1:8c:
25:de:34:7c:6d:2c:40:c7:7b:03:ae:c2:4b:0c:12:25:fd:a9:
00:68:1e:e8:eb:5d:0c:0d:43:8b:05:c4:02:d0:44:ce:4d:26:
86:d2:8d:27:e8:9b:8f:ba:f4:df:a1:e3:88:be:fa:3b:98:a0:
b9:8c:13:d1:11:36:7c:ad:fe:00:51:ae:8b:ea:07:b3:92:10:
2d:11:0f:06:cf:dd:5e:57:46:bf:0d:67:a6:0d:c5:04:2c:da:
14:23:d0:9e:e7:a3:77:5f:09:79:5f:a4:51:c2:23:8b:a5:c4:
21:fa:d8:0e:03:56:e6:aa:d2:7f:63:6b:66:d0:b5:d4:d5:8b:
13:94:ba:31:43:47:a4:4f:f6:5d:10:73:f6:c9:4d:89:e8:b1:
d5:53:8f:12:5a:87:ce:b2:27:47:d4:89:06:54:44:74:2f:e3:
e1:87:b1:2e:fe:50:f7:6b:d3:2b:f0:5e:bf:11:b0:17:ee:b3:
dd:b7:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:40 2025 by rpki-client