Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa
File: 3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa (raw, json)
Hash identifier: KBLFLiV7r3SYbsaZ3VRS5FXXp70+qx91KIhxQQHpeGU=
Subject key identifier: 35:89:5A:D3:E8:AF:D3:05:86:15:73:D3:AC:1F:6E:81:E9:4B:FE:00
Certificate issuer: /CN=2424063D980D1824DE6EFE6E89927FC7550A458F
Certificate serial: 3B732764D95BEF10767E10265B93DFD5577DBC7E
Authority key identifier: 24:24:06:3D:98:0D:18:24:DE:6E:FE:6E:89:92:7F:C7:55:0A:45:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2424063D980D1824DE6EFE6E89927FC7550A458F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa
Signing time: Fri 20 Dec 2024 13:59:20 +0000
ROA not before: Fri 20 Dec 2024 13:54:20 +0000
ROA not after: Fri 19 Dec 2025 13:59:20 +0000
asID: 262669
IP address blocks: 143.202.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:73:27:64:d9:5b:ef:10:76:7e:10:26:5b:93:df:d5:57:7d:bc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424063D980D1824DE6EFE6E89927FC7550A458F
Validity
Not Before: Dec 20 13:54:20 2024 GMT
Not After : Dec 19 13:59:20 2025 GMT
Subject: CN=35895AD3E8AFD305861573D3AC1F6E81E94BFE00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:3d:dc:5c:36:2b:af:c3:20:a0:b3:32:85:
1d:27:fc:19:7e:aa:da:6e:3d:51:94:26:c1:df:8f:
c7:1a:4a:f9:03:5b:1c:6a:27:bc:c9:04:30:71:dd:
8e:e6:cf:18:98:d9:49:b0:90:ea:f4:a9:78:53:12:
b5:4b:2f:c0:44:b9:0d:1f:5e:93:fd:d6:ff:dc:22:
dc:92:72:81:4c:92:fe:73:48:24:e0:69:be:de:a7:
dd:df:7d:88:d3:ee:79:87:86:86:8d:ad:f6:3a:ea:
5d:d7:cd:3e:16:c4:de:f8:81:a5:ab:7c:c6:5d:f4:
56:e1:d0:b0:9b:c5:94:c8:6e:20:45:39:22:62:f8:
d0:a8:db:a0:61:6e:fd:74:cf:ee:d2:4f:27:75:bd:
2c:a6:a6:4c:a9:9b:4e:a4:b1:63:82:65:cf:04:72:
1a:84:de:70:3c:dd:f4:87:c5:67:b2:f1:28:53:6d:
52:77:41:7e:62:9a:c7:86:7a:3b:8f:05:ba:96:0e:
d8:4a:ee:c9:68:7a:00:72:a3:b4:03:49:71:b3:53:
35:99:82:4d:ca:28:30:72:0b:60:e2:71:d5:ab:1a:
cb:5a:4c:95:4a:34:c2:2c:f4:04:e0:4c:5f:0f:14:
cb:92:b7:9a:24:94:66:e2:b8:49:b0:17:26:55:14:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:89:5A:D3:E8:AF:D3:05:86:15:73:D3:AC:1F:6E:81:E9:4B:FE:00
X509v3 Authority Key Identifier:
keyid:24:24:06:3D:98:0D:18:24:DE:6E:FE:6E:89:92:7F:C7:55:0A:45:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/2424063D980D1824DE6EFE6E89927FC7550A458F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2424063D980D1824DE6EFE6E89927FC7550A458F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.148.0/22
Signature Algorithm: sha256WithRSAEncryption
61:b9:d0:08:87:d2:4e:a0:9b:d4:23:09:5b:4f:e3:62:39:bb:
57:42:ee:b5:5e:c3:1e:9c:62:44:39:3e:17:90:1c:7f:f4:ac:
3a:70:cd:48:43:8e:31:73:6f:9f:d3:d9:75:34:d6:d0:52:c2:
8c:03:b1:86:9f:30:55:60:c9:42:7c:7e:cf:06:93:18:cc:64:
85:c6:e7:bd:2d:09:10:bc:4d:bd:c8:ad:9b:5b:57:bf:f5:f3:
b6:32:fb:34:8b:c6:cb:d8:9f:6b:49:7b:10:b0:54:b8:8d:7b:
ec:64:4c:d1:fd:72:a0:45:10:73:79:6e:11:63:04:83:4a:32:
bd:ba:db:40:43:80:f7:f8:fc:5b:47:8d:58:b8:fd:61:91:b1:
eb:68:e5:7a:08:33:3a:4b:55:66:6c:f6:4d:5b:20:ca:d3:64:
11:80:fc:07:26:22:b2:95:7b:e9:b0:1c:0a:27:5a:f0:67:7a:
4e:22:e3:fb:38:a6:03:8e:72:b0:cf:c0:e8:f5:d7:3e:59:49:
95:8d:99:c0:0c:7e:c9:11:7a:b4:c7:6b:99:29:fa:09:6c:4a:
58:f8:ae:e3:0d:c7:77:7b:2c:f3:15:9c:81:eb:9f:13:5d:f0:
37:2d:0f:51:af:df:2b:b7:da:6b:ad:e3:a6:35:c8:ff:8d:bd:
56:95:e5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:15:59 2025 by rpki-client