Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa
File: 3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa (raw, json)
Hash identifier: VnTNvSlCvTfyOIRqKSMk8JJ0PiWny8fpWfRq7c971Jg=
Subject key identifier: 5E:1B:CF:3C:D1:A9:12:33:CF:4E:E9:78:9D:A0:22:DB:33:7A:71:2F
Certificate issuer: /CN=5744E945CF5532C0BDD7C4EC46A744AA22A13C70
Certificate serial: 53C94425B96BF44CFDC76792D59C6F0AE7CA5969
Authority key identifier: 57:44:E9:45:CF:55:32:C0:BD:D7:C4:EC:46:A7:44:AA:22:A1:3C:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa
Signing time: Fri 17 Jan 2025 19:51:40 +0000
ROA not before: Fri 17 Jan 2025 19:46:40 +0000
ROA not after: Fri 16 Jan 2026 19:51:40 +0000
asID: 266217
IP address blocks: 192.144.120.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c9:44:25:b9:6b:f4:4c:fd:c7:67:92:d5:9c:6f:0a:e7:ca:59:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5744E945CF5532C0BDD7C4EC46A744AA22A13C70
Validity
Not Before: Jan 17 19:46:40 2025 GMT
Not After : Jan 16 19:51:40 2026 GMT
Subject: CN=5E1BCF3CD1A91233CF4EE9789DA022DB337A712F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:71:1c:08:56:9c:90:f7:61:71:8f:d6:7a:38:
d2:2d:7d:d4:a1:7a:55:19:17:14:04:9d:c2:13:2d:
89:d4:d0:49:41:81:18:8f:71:0c:4e:69:76:eb:b4:
9b:72:21:4e:84:a7:bd:57:e1:14:d0:f7:62:aa:51:
5b:27:fc:4d:c1:69:0c:ea:20:d7:20:7c:8d:ff:11:
e1:a9:68:df:46:39:d5:e1:39:b1:6e:32:8f:d6:08:
e0:0b:f3:e7:e8:9c:57:de:41:83:53:4d:fe:df:79:
9c:91:55:92:8c:6d:d9:76:04:5b:fe:7c:06:1f:b1:
69:3c:05:82:22:3d:9c:f6:aa:14:34:69:f1:c0:a8:
19:2a:dc:6d:e3:e3:6e:05:1f:9a:78:a7:a8:33:07:
4c:dd:f2:8d:46:0c:79:01:41:f5:04:34:47:cd:e2:
26:d3:c5:ab:39:c6:ba:ac:cf:ee:76:6a:8e:df:3f:
06:4f:f9:e4:ed:56:21:5e:d5:e2:91:8a:02:98:0b:
d0:9f:26:2b:18:09:de:d4:d2:e7:18:f0:9e:a3:4c:
27:82:b0:72:7d:25:73:ff:e0:34:5e:66:b3:68:4b:
2f:80:92:69:df:1e:57:f7:00:2e:ca:c2:2f:c8:6b:
9d:e4:5b:d1:f1:2b:82:70:6b:52:47:25:0b:da:2c:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1B:CF:3C:D1:A9:12:33:CF:4E:E9:78:9D:A0:22:DB:33:7A:71:2F
X509v3 Authority Key Identifier:
keyid:57:44:E9:45:CF:55:32:C0:BD:D7:C4:EC:46:A7:44:AA:22:A1:3C:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.120.0/22
Signature Algorithm: sha256WithRSAEncryption
35:c9:13:24:ec:14:39:02:52:48:1c:b9:b1:3b:82:de:c3:58:
1e:4f:95:80:96:e8:0d:29:e5:a4:d0:c3:6b:ed:ca:3d:5d:cf:
ad:9d:dd:4f:4c:b1:d6:be:bc:98:35:0d:aa:7a:9c:c8:54:37:
05:48:35:36:a9:e6:21:6b:af:28:2d:9a:94:a7:78:79:8e:f0:
be:1b:84:d1:7f:ab:47:18:19:a8:b5:ac:f2:6e:f1:fb:58:36:
3c:ea:3f:ad:ba:f2:d0:42:04:4c:46:0a:c4:f0:89:a4:dd:f5:
3d:25:42:a9:70:69:d4:b9:44:26:a8:5c:7b:38:f6:cf:0b:63:
b1:70:98:d8:51:38:e3:81:a3:9a:99:fa:5d:7a:43:da:a5:38:
ad:c0:83:80:bb:d4:7f:da:16:f2:39:a1:eb:89:44:75:cd:cb:
3a:b9:fc:cb:86:4c:15:a7:d6:5a:f1:20:13:c4:04:76:bc:b5:
18:dc:d5:ae:1f:21:4f:9c:47:2d:76:af:1d:bf:4d:26:26:93:
53:3f:5d:39:ed:ff:a2:38:3b:66:c2:f6:ad:fd:e7:d8:1d:f4:
e9:9f:ca:4e:85:de:6b:3e:2d:88:11:96:e1:80:aa:b5:c5:ce:
97:25:64:21:9d:f7:86:b1:55:62:e6:2e:8c:2e:dc:8a:a9:78:
77:5c:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:41:09 2025 by rpki-client