Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa
File: 3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa (raw, json)
Hash identifier: VAYLpIvkIJzi9KLPWiYAYDGYSiEh8TDadxAy70Dt7J8=
Subject key identifier: C4:8D:50:67:A5:69:47:3B:B3:27:95:2C:29:C9:E0:43:55:61:40:41
Certificate issuer: /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial: 36B203ED0E1B32FBE6CA6B2B28024ACCAAF472F1
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa
Signing time: Thu 16 Jan 2025 12:21:54 +0000
ROA not before: Thu 16 Jan 2025 12:16:54 +0000
ROA not after: Thu 15 Jan 2026 12:21:54 +0000
asID: 263980
IP address blocks: 138.255.244.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b2:03:ed:0e:1b:32:fb:e6:ca:6b:2b:28:02:4a:cc:aa:f4:72:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Validity
Not Before: Jan 16 12:16:54 2025 GMT
Not After : Jan 15 12:21:54 2026 GMT
Subject: CN=C48D5067A569473BB327952C29C9E04355614041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:e6:e7:cd:0c:61:4e:74:20:20:f2:1e:c1:
4d:8d:a4:d8:2d:78:da:8f:68:e0:b4:7c:6d:2f:15:
d8:60:c5:d2:28:90:4b:47:e8:ca:12:c1:aa:cb:06:
54:60:22:0c:96:78:2f:d9:e0:fa:2e:5d:e6:01:03:
4a:9e:67:3e:bc:b6:88:cc:2b:2e:7b:a3:6b:67:d7:
87:2e:01:67:08:41:23:fa:81:47:04:cb:83:51:d5:
b3:71:3f:b6:f1:92:13:e2:3a:ba:33:9b:2d:7b:e4:
22:31:93:47:f8:45:aa:4a:47:6e:4d:f7:85:03:4e:
49:f5:bd:17:a9:57:91:15:b4:2e:c0:1e:67:6a:e3:
4a:42:96:d7:4f:d9:20:06:24:ee:32:c7:c8:73:6b:
70:47:8a:f9:de:c8:3e:91:e6:81:7c:e6:ae:17:03:
2d:d0:d2:93:08:b6:7f:eb:ec:d9:d4:6b:3f:a1:65:
ef:5e:19:f0:cd:b0:a7:56:89:39:7f:c6:90:0c:e1:
23:0f:68:8a:b5:2e:20:32:1c:79:6c:cd:f9:03:77:
c8:42:a1:97:4e:a3:7e:d0:35:f1:56:19:93:70:14:
50:56:d5:a0:68:70:f8:84:ad:8b:66:49:df:ac:38:
e4:b2:8d:e4:82:87:be:84:33:8f:34:13:9f:bb:5c:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8D:50:67:A5:69:47:3B:B3:27:95:2C:29:C9:E0:43:55:61:40:41
X509v3 Authority Key Identifier:
keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3332203d3e20323633393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.244.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:9b:cf:db:6a:04:d2:b9:69:79:5c:82:2d:05:19:4e:64:01:
21:d9:46:40:a4:6c:62:59:3f:d5:95:a5:ca:1b:8a:9d:7c:63:
56:a0:b1:66:7b:ce:05:13:07:b3:10:7e:5b:49:a2:4b:b5:4f:
75:d5:76:5d:bf:a3:37:33:69:9c:98:54:5e:45:5f:d8:b4:e8:
07:ed:ca:be:89:ed:f8:a2:1e:b6:90:fc:20:3f:8a:c9:01:d1:
d7:4a:0d:7d:56:6f:48:9e:5a:32:0b:7d:58:90:fa:2f:e2:1a:
88:8a:dd:48:2f:b3:3d:ba:04:0d:c2:69:ab:18:6f:8c:45:55:
b7:83:16:7d:6b:41:c8:d5:81:75:98:73:42:00:55:06:6d:c2:
89:cd:5f:b3:8e:19:58:5d:2a:20:62:4a:7c:e3:35:2b:56:20:
c5:c3:a8:ab:f3:16:35:e7:34:07:0a:49:80:c7:4e:37:20:70:
79:81:56:8f:73:57:96:aa:07:16:3f:cf:d6:d6:4d:3d:15:db:
73:59:70:17:f5:4d:38:95:e4:05:43:8a:28:41:cf:4c:67:71:
af:fa:15:31:f1:04:3b:98:5e:5f:be:12:fd:c6:0e:16:93:64:
f7:62:0c:c8:55:07:ab:e5:a2:bc:66:95:4b:44:66:75:a3:47:
bd:bb:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:29:00 2025 by rpki-client