Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
File: 3139312e3234302e302e302f31372d3235203d3e203238323032.roa (raw, json)
Hash identifier: fU/ahj5nmpoNPZyY4iZqFal+KTSTOYQUZPGPnJPsUNc=
Subject key identifier: 4A:42:6F:29:DE:58:2C:77:89:32:0F:98:51:20:C2:30:B8:30:D1:AB
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 304C187D578807B27400EB2BE045D9AED4E2A7EF
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:36 +0000
ROA not before: Mon 13 Jan 2025 13:27:36 +0000
ROA not after: Mon 12 Jan 2026 13:32:36 +0000
asID: 28202
IP address blocks: 191.240.0.0/17 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:4c:18:7d:57:88:07:b2:74:00:eb:2b:e0:45:d9:ae:d4:e2:a7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:36 2025 GMT
Not After : Jan 12 13:32:36 2026 GMT
Subject: CN=4A426F29DE582C7789320F985120C230B830D1AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:53:61:31:76:e6:3c:54:6a:75:9c:4b:9c:89:
01:1f:1b:ad:1d:e2:65:dc:9d:66:be:c1:f6:27:3f:
60:40:9d:de:45:21:54:ab:e8:bd:9d:e7:3d:21:d9:
f7:6c:55:5d:0e:25:c2:e5:ec:3b:d3:0f:a0:b6:a9:
e9:53:36:e5:ad:d6:e2:dc:d7:c3:ee:de:7a:5a:76:
48:21:bc:ad:0c:c1:f9:11:ad:d0:b7:19:b1:2f:8e:
9f:d9:b6:4d:f8:08:ed:7e:93:28:a2:23:2d:2d:d0:
70:b7:98:9a:4b:f4:f4:55:c1:1e:b6:69:d6:9a:02:
fc:d3:5f:ce:a0:ff:7a:9b:bd:87:11:08:e5:06:3c:
1a:79:38:63:bc:cc:c0:f6:24:0b:b5:4b:86:a1:75:
4b:6f:fc:1e:16:31:9e:31:cd:f5:a8:d4:f1:0d:f9:
5b:f6:3a:d2:f0:f4:26:b2:2a:5b:ed:25:d5:a8:7f:
62:f4:82:fe:ea:08:b2:0c:3d:c4:71:b3:25:a4:63:
03:b2:70:1e:94:65:22:02:0b:58:f4:2e:88:c0:53:
6b:ff:36:f9:1b:34:b7:7d:54:ff:5c:c5:0b:30:73:
1c:c6:22:f8:a3:86:16:b7:f9:24:9f:65:36:ce:72:
40:38:5d:78:68:f4:56:df:37:29:a9:69:10:85:a5:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:6F:29:DE:58:2C:77:89:32:0F:98:51:20:C2:30:B8:30:D1:AB
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.240.0.0/17
Signature Algorithm: sha256WithRSAEncryption
18:22:ae:36:7b:19:3d:05:91:03:d3:6d:26:84:5f:ed:32:16:
76:e4:76:b4:f9:7e:67:4a:ef:28:ee:70:6f:74:50:00:84:f7:
b6:54:63:e5:75:d5:cf:36:aa:47:f3:db:fb:09:ee:6b:09:88:
3b:a1:f1:7b:eb:39:5f:7d:7a:43:89:a5:1c:a3:c4:d0:01:1c:
69:80:64:49:c9:10:87:34:cd:12:c3:66:66:06:66:43:31:64:
3c:3c:f9:4a:33:89:7b:32:de:84:cb:44:30:1a:85:5d:23:2d:
f8:7e:51:f2:3f:30:6d:37:11:39:2c:f8:0f:58:49:27:17:60:
ab:ec:be:5e:04:69:3a:10:a2:c2:ed:2e:58:66:03:56:e3:8b:
10:7f:d7:f9:b2:d6:0f:81:bc:a6:16:59:94:30:be:6b:12:eb:
29:06:b7:9a:a3:a5:e8:3c:05:aa:bd:6f:79:1d:11:11:5d:21:
dc:88:73:31:88:a3:34:3d:d1:5a:46:52:54:b1:5c:ba:1c:cb:
1e:bd:f3:ef:a9:a5:b7:28:b4:f4:31:f7:ad:a4:08:13:a6:7b:
8d:1a:2e:04:44:46:7c:b2:5c:3e:e9:11:65:76:5e:c0:4d:b2:
82:1e:fe:b2:ac:43:8d:a1:c2:ce:49:09:cc:00:6f:8f:d2:0a:
48:fe:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:58:31 2025 by rpki-client