Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa
File: 3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier: N6cw3dMJ6ahj+NqG5jjBO6rlt7erbBTU1v707ED52WM=
Subject key identifier: 09:58:60:8C:48:8C:72:4C:EA:D6:AF:37:AE:81:C0:CC:04:62:3A:58
Certificate issuer: /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial: 6544B7A6D16457C5006B7A4C5229981DC36441BF
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa
Signing time: Fri 27 Dec 2024 13:15:34 +0000
ROA not before: Fri 27 Dec 2024 13:10:34 +0000
ROA not after: Fri 26 Dec 2025 13:15:34 +0000
asID: 52573
IP address blocks: 143.255.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:44:b7:a6:d1:64:57:c5:00:6b:7a:4c:52:29:98:1d:c3:64:41:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Validity
Not Before: Dec 27 13:10:34 2024 GMT
Not After : Dec 26 13:15:34 2025 GMT
Subject: CN=0958608C488C724CEAD6AF37AE81C0CC04623A58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:29:ad:c8:5f:d1:31:63:9e:8d:52:f2:e1:
2d:c9:46:f8:88:e2:04:6b:50:0a:fa:89:65:f6:06:
44:5b:04:c7:19:c9:40:5c:df:49:ae:0b:f7:8b:35:
87:47:e0:b3:5d:16:40:78:ae:6f:5a:03:05:3b:c2:
32:28:98:b8:28:86:ba:c3:21:0d:80:3b:b7:9a:cd:
b1:b7:dc:ad:fe:1a:e3:76:5f:fa:a5:9e:5a:6c:f2:
8f:b1:cb:61:33:a2:3e:df:c8:96:85:80:63:e4:95:
c3:71:60:72:17:8e:31:9f:46:d5:71:18:6f:23:27:
d0:0a:e2:e6:a4:26:bb:25:b4:ca:d0:ad:0e:80:ed:
af:3a:b8:4a:19:4f:84:2f:e0:e5:b1:a5:51:21:40:
dd:f1:4b:e5:e8:34:f4:56:32:a3:5c:30:7f:c2:53:
0e:c3:31:52:f3:90:6d:9b:6f:4f:d1:62:e9:39:92:
b9:a7:2f:88:e8:1c:6d:30:20:d6:14:57:1f:73:46:
40:33:0d:31:b4:a9:4d:96:86:04:07:e5:f5:b3:25:
2f:9e:96:ab:a9:6f:fc:9c:25:20:6e:c2:0e:e8:fd:
fa:fe:d5:b5:ef:53:7e:47:11:ec:cc:ce:18:b3:90:
b1:c5:b7:55:17:9a:06:31:75:3f:b8:46:36:eb:66:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:58:60:8C:48:8C:72:4C:EA:D6:AF:37:AE:81:C0:CC:04:62:3A:58
X509v3 Authority Key Identifier:
keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.148.0/22
Signature Algorithm: sha256WithRSAEncryption
13:ca:e5:76:55:e0:50:2d:e0:c9:38:29:84:7d:79:31:11:49:
45:bc:43:dd:45:f6:f5:38:03:02:d2:14:cd:04:e0:15:cc:6f:
77:f5:8a:27:28:d0:1a:5b:98:a5:87:e6:00:7a:07:8d:8b:a6:
88:f4:cc:23:25:16:57:37:52:99:4f:05:91:64:a6:30:de:9e:
f1:7c:5b:3e:0f:2f:94:fa:8a:75:e0:17:c6:c8:8d:b9:99:34:
b4:f3:22:c1:21:1a:bc:7d:5a:7d:d6:8d:d4:5f:ac:50:82:fb:
97:cc:50:7d:06:c8:44:4f:5d:e6:9b:ed:df:32:44:02:d3:b0:
e9:06:00:77:6d:ed:db:c8:49:b8:71:3e:f5:06:ed:dc:e4:3a:
39:ed:48:15:81:ea:6f:ff:cf:b2:39:9b:8a:e1:12:d9:0a:66:
66:3a:0d:cd:9b:ae:2d:d6:0a:5a:64:98:8c:25:05:a4:6b:45:
65:b8:78:be:9c:24:a0:9a:ee:fb:9e:62:1d:cc:b0:65:98:2f:
d0:1a:3b:df:5c:34:1e:7c:e4:e3:25:3b:c8:e9:8d:6b:e4:c3:
4b:ac:87:dd:ca:0b:34:f9:99:06:b2:2c:cb:a7:e3:66:84:58:
8d:37:b0:76:e3:70:b9:44:9c:cb:ed:f8:ab:bc:c6:c5:2d:73:
50:37:88:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:20:59 2025 by rpki-client