Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32332d3233203d3e20323634343530.roa
File: 3133312e3235352e33382e302f32332d3233203d3e20323634343530.roa (raw, json)
Hash identifier: krfFa/FXqC35Sn4M/umTPH2g1fp6sL1Mm5LJuxalpME=
Subject key identifier: D7:55:B1:39:8E:F2:0B:C9:8B:36:DE:D3:DE:8D:4E:1C:8F:85:29:11
Certificate issuer: /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial: 745290BCF2F80AE71D80CB6BEAA16ECCC51FD723
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32332d3233203d3e20323634343530.roa
Signing time: Fri 31 Jan 2025 18:08:54 +0000
ROA not before: Fri 31 Jan 2025 18:03:54 +0000
ROA not after: Fri 30 Jan 2026 18:08:54 +0000
asID: 264450
IP address blocks: 131.255.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:52:90:bc:f2:f8:0a:e7:1d:80:cb:6b:ea:a1:6e:cc:c5:1f:d7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Validity
Not Before: Jan 31 18:03:54 2025 GMT
Not After : Jan 30 18:08:54 2026 GMT
Subject: CN=D755B1398EF20BC98B36DED3DE8D4E1C8F852911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:3d:62:02:c9:36:de:7d:e0:1c:da:61:c7:
74:aa:44:11:1b:1d:6a:6e:42:c4:a5:76:ad:f4:b3:
7c:34:51:f1:35:cd:df:57:59:e7:b9:7b:16:9f:5e:
f0:ef:02:82:06:7c:74:94:f7:74:6e:9f:af:0f:37:
dc:55:ce:be:62:e7:9b:02:48:cf:9e:55:5e:ab:18:
9d:d5:22:ea:2d:de:96:19:b9:5b:4e:8f:d6:0a:13:
be:32:73:76:6e:a2:3a:87:15:86:3c:08:2b:4f:09:
58:8a:ab:ae:39:c4:a4:70:f4:ff:e1:da:55:f1:be:
2f:0c:3f:f1:5f:d3:d6:33:37:1a:78:86:48:fa:d9:
e5:29:b7:68:b5:f4:d0:29:aa:fd:23:87:79:53:46:
9b:04:1f:d6:5b:c7:c5:14:39:e5:cd:a4:8e:2b:4f:
ee:c2:f6:fa:4e:8c:8a:c9:7e:84:f4:58:79:cc:79:
88:9b:14:57:da:4c:38:d0:22:5d:ec:10:03:d9:fd:
38:b9:c4:75:32:df:14:1a:5b:ae:06:c5:60:03:5d:
c5:92:1b:3c:9e:6d:24:58:b3:fc:b4:4b:4e:08:f9:
7b:48:15:d2:76:1c:c4:db:35:02:46:77:89:b2:80:
ea:53:94:56:6b:47:c6:9a:9c:85:d0:25:c7:ce:4a:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:55:B1:39:8E:F2:0B:C9:8B:36:DE:D3:DE:8D:4E:1C:8F:85:29:11
X509v3 Authority Key Identifier:
keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32332d3233203d3e20323634343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.38.0/23
Signature Algorithm: sha256WithRSAEncryption
95:c7:df:b9:2b:89:71:b7:ce:09:a1:e6:42:c5:0c:70:69:78:
7e:8e:60:47:59:87:aa:64:ba:06:47:a5:01:48:1f:c5:67:6b:
e9:99:73:bc:8a:ed:8a:be:5f:92:00:7e:49:d1:2f:6e:f6:92:
ba:82:00:4f:b3:a8:96:da:ae:52:e5:a5:bd:24:17:2f:4d:70:
c1:71:ca:96:34:8a:ac:9e:24:38:74:20:25:cb:39:a8:e9:78:
f7:5f:71:28:78:cd:f9:e1:d6:44:6a:39:84:4e:01:73:9f:3e:
6f:fb:bd:34:85:88:82:b0:9b:cb:b1:62:0a:14:d0:49:a0:ad:
39:a5:62:d9:52:20:7d:fa:82:ee:05:12:f3:c7:10:87:6c:49:
dd:57:b6:88:73:6e:1c:f4:cb:1a:9a:a2:07:59:df:64:4b:d3:
b2:2d:82:b5:28:ca:ed:83:06:f8:d3:bf:4c:c1:44:50:5d:92:
8a:e8:0e:4b:69:df:09:43:1c:69:0c:0d:8c:01:78:69:3d:80:
26:3a:0b:28:fa:d0:2b:1a:d5:0d:53:82:bf:00:f6:fe:b3:72:
21:f4:a6:82:2a:95:cd:fc:ea:7e:ae:62:c3:72:15:cb:3d:f9:
a8:ac:46:0d:f4:5a:9b:13:fe:3b:fc:98:08:0c:d8:69:86:f0:
51:30:4f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:10:57 2025 by rpki-client