Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa
File: 3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa (raw, json)
Hash identifier: 4ial0zG0Hlh0wQryAzFWfdM1DwjPagTJxoQv7hSVoFs=
Subject key identifier: CF:11:77:1C:51:72:F3:F5:FE:0D:6C:42:6B:87:EA:11:67:AD:4F:0B
Certificate issuer: /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial: 4E2B8A49FE77391DD05240359A64D6326A780170
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa
Signing time: Tue 26 Nov 2024 10:19:54 +0000
ROA not before: Tue 26 Nov 2024 10:14:54 +0000
ROA not after: Tue 25 Nov 2025 10:19:54 +0000
asID: 61745
IP address blocks: 186.219.254.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2b:8a:49:fe:77:39:1d:d0:52:40:35:9a:64:d6:32:6a:78:01:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Validity
Not Before: Nov 26 10:14:54 2024 GMT
Not After : Nov 25 10:19:54 2025 GMT
Subject: CN=CF11771C5172F3F5FE0D6C426B87EA1167AD4F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:cc:58:4a:82:e7:18:87:3b:ec:01:17:0d:
58:ce:08:68:3a:c6:ed:07:ce:26:92:50:b3:f8:1c:
43:d9:d0:9e:04:c6:d9:0a:bf:b8:0f:96:1e:d0:03:
33:6b:6b:52:ef:b1:65:a9:ab:3d:13:ca:79:97:f5:
7c:0a:c5:8a:29:30:ad:2e:c7:d6:fc:5e:21:0e:8c:
f5:87:c5:03:6b:04:a8:c4:9b:81:57:6d:6d:77:d8:
2f:86:64:27:24:23:32:e6:fe:61:b5:a3:e4:cc:b2:
a9:87:b1:07:78:fe:ce:82:65:3d:19:6a:3d:98:d3:
88:ce:0b:3d:65:3d:2d:3c:b7:66:e3:29:7e:9f:20:
7e:e2:9a:d2:72:5c:ce:8f:2c:89:0d:36:62:73:dc:
64:df:bb:25:d6:e6:c6:c8:d3:92:55:96:44:00:ef:
91:2b:d8:f9:17:54:94:bb:37:7f:f6:22:d0:6a:43:
3c:a7:45:35:fc:23:f3:99:98:ad:3d:d7:72:cc:96:
09:9f:6d:87:dc:f8:9f:59:16:98:01:7e:a9:bc:9e:
75:64:3b:88:9c:b7:67:7f:17:86:06:b0:8c:80:c0:
df:bb:c3:07:67:ad:f3:29:0f:e9:b4:a3:87:3e:01:
a3:66:10:72:50:fe:bd:d6:21:3d:50:29:e5:07:63:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:77:1C:51:72:F3:F5:FE:0D:6C:42:6B:87:EA:11:67:AD:4F:0B
X509v3 Authority Key Identifier:
keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.219.254.0/24
Signature Algorithm: sha256WithRSAEncryption
27:14:9d:53:71:cb:38:6e:ce:4a:84:13:1a:76:95:55:83:08:
e2:7b:13:6e:4f:5b:fd:79:e5:72:b1:f6:4d:32:8a:9f:63:30:
c3:da:78:5d:c8:f6:fd:e2:67:46:84:ff:6c:6b:c5:2a:6e:fe:
00:ca:bb:c8:03:a7:e3:93:74:3c:be:0d:c8:39:72:25:68:0f:
67:96:dd:d8:d2:68:85:87:5a:a2:c2:5c:68:7f:5d:af:6a:7f:
5a:90:b4:f7:fd:ca:d5:74:d8:04:43:8a:a6:25:17:09:29:a4:
7f:17:24:61:67:bb:05:33:37:b3:a4:76:14:b2:78:60:1f:c8:
ee:9d:15:0e:4f:17:af:46:8b:6c:b3:5e:58:b6:55:69:2f:11:
7c:bf:8e:e9:96:2f:d3:b3:c0:76:20:c1:0e:a1:68:26:94:69:
f0:ef:3e:43:40:e9:d7:ad:aa:35:2d:31:ba:6b:77:31:b0:04:
fa:80:53:4f:a9:28:fd:aa:77:97:af:38:8f:43:66:66:b8:9a:
2d:17:0b:ea:85:03:40:4d:72:d0:8a:59:53:4f:a0:1d:b3:dc:
20:32:98:3d:03:3e:6c:6d:fa:07:c4:da:99:11:6c:10:e0:9c:
1c:f5:0f:ce:03:a6:1c:40:ec:ff:92:0b:37:b7:b9:c4:16:39:
b0:a0:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:49:07 2025 by rpki-client