Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32342d3234203d3e20323633323536.roa
File: 3139382e35382e382e302f32342d3234203d3e20323633323536.roa (raw, json)
Hash identifier: qbxrxc651hjrHtTFFq5MAH/DqsNan+W8TFjurOAex1U=
Subject key identifier: 31:B5:2E:B8:D4:3B:63:B6:43:C6:BE:FB:CA:C5:4B:DF:4E:B4:69:84
Certificate issuer: /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial: 1384087410C544B79DFDC2B8CD4E04379C38D421
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32342d3234203d3e20323633323536.roa
Signing time: Fri 10 Jan 2025 16:41:54 +0000
ROA not before: Fri 10 Jan 2025 16:36:54 +0000
ROA not after: Fri 09 Jan 2026 16:41:54 +0000
asID: 263256
IP address blocks: 198.58.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:84:08:74:10:c5:44:b7:9d:fd:c2:b8:cd:4e:04:37:9c:38:d4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Validity
Not Before: Jan 10 16:36:54 2025 GMT
Not After : Jan 9 16:41:54 2026 GMT
Subject: CN=31B52EB8D43B63B643C6BEFBCAC54BDF4EB46984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:6e:ae:9c:05:16:a7:ac:3c:4e:64:53:1a:
0f:16:30:64:ec:72:e1:46:10:69:5b:67:23:39:7f:
17:09:83:b3:d3:73:87:88:ba:2c:7c:cc:58:29:84:
53:21:41:2f:34:53:59:11:65:ab:e1:2c:95:b6:cd:
d6:26:fb:ec:9c:37:40:45:44:6a:d4:12:9f:8b:2b:
7a:ef:38:6b:93:98:f7:43:2e:35:f7:4f:48:3f:4b:
0b:50:75:f6:0a:f0:72:00:aa:ee:ad:ca:7c:56:c4:
8f:76:67:10:28:d1:2a:c8:15:7c:51:75:c9:50:c9:
ff:4f:90:4f:d0:a2:58:d1:ef:75:c9:dc:cb:c9:e0:
44:25:d8:96:93:8c:62:cd:cc:9c:80:17:2d:13:4d:
3a:77:20:8b:da:5b:30:5f:58:1c:14:31:42:e2:4a:
b4:db:1a:f2:c3:b1:0f:96:99:c3:67:35:77:72:a1:
77:44:6d:51:3d:d1:e0:6d:34:0b:ce:c5:42:40:41:
28:b4:ce:3e:a4:aa:42:a1:f5:81:fa:4b:ae:72:ec:
44:20:bd:49:a2:70:3e:b7:cd:7d:60:97:11:e5:b0:
1e:bd:fe:6b:c6:31:3b:9d:13:c8:f9:1d:78:7e:be:
55:9f:93:fe:28:db:dd:62:2f:c5:30:ae:19:f0:8a:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B5:2E:B8:D4:3B:63:B6:43:C6:BE:FB:CA:C5:4B:DF:4E:B4:69:84
X509v3 Authority Key Identifier:
keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32342d3234203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.58.8.0/24
Signature Algorithm: sha256WithRSAEncryption
24:98:8a:42:3a:2d:25:41:72:bb:5a:83:b2:03:ee:27:6e:11:
c5:3a:f3:5a:68:c5:a3:cb:e7:ad:92:74:f9:b8:90:3a:89:36:
16:18:14:0f:4c:e6:a3:24:3b:7a:c0:4c:56:37:6b:45:d6:7b:
67:d8:89:1f:c4:36:f8:b4:00:08:c7:cb:26:28:c2:76:f1:ed:
47:3e:f7:bc:a8:2e:2f:83:20:cf:15:52:ed:12:8a:1c:31:b9:
f0:75:6b:4c:c8:63:62:9a:35:c4:aa:62:43:43:91:7b:54:0f:
1d:08:d1:13:ed:78:d6:a3:68:7a:0f:93:45:de:93:48:87:dd:
4e:a4:48:e6:c8:9c:1a:59:5f:6c:77:77:02:54:cf:77:e1:1c:
49:63:94:c0:ae:54:79:cb:aa:2a:eb:4f:dd:25:52:22:c5:13:
06:bd:0b:91:94:00:03:78:3e:ef:a2:d4:ea:18:da:22:77:0a:
33:30:c7:cd:71:6b:ad:86:79:86:d9:7d:8b:2a:0b:4c:cb:cb:
3d:02:f7:7c:3b:55:44:86:3d:b7:0c:9a:fe:07:08:b6:6e:95:
d3:44:2e:e3:82:d6:e2:be:e1:33:49:63:a1:6e:7d:6a:2b:6b:
3c:8c:36:1a:9f:ff:09:e4:10:33:77:f9:0b:76:05:b4:5e:f6:
e7:54:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:01:43 2025 by rpki-client