Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131382e302f32332d3233203d3e203237303536.roa
File: 3138392e38352e3131382e302f32332d3233203d3e203237303536.roa (raw, json)
Hash identifier: QxFR0XpoLB91R4VuxtnDyejxAEhonI1+RkkYp7rMC9Q=
Subject key identifier: 9B:FE:91:A9:C9:E2:D7:7A:F7:D9:F6:EC:D2:29:6D:3D:E8:B4:8A:65
Certificate issuer: /CN=D76AC9525C9299F8D9F26853A5246419EB9913D9
Certificate serial: 152F22CFF447042B38719DCB1B34AF1E3F78F18F
Authority key identifier: D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131382e302f32332d3233203d3e203237303536.roa
Signing time: Thu 12 Dec 2024 01:44:24 +0000
ROA not before: Thu 12 Dec 2024 01:39:24 +0000
ROA not after: Thu 11 Dec 2025 01:44:24 +0000
asID: 27056
IP address blocks: 189.85.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2f:22:cf:f4:47:04:2b:38:71:9d:cb:1b:34:af:1e:3f:78:f1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D76AC9525C9299F8D9F26853A5246419EB9913D9
Validity
Not Before: Dec 12 01:39:24 2024 GMT
Not After : Dec 11 01:44:24 2025 GMT
Subject: CN=9BFE91A9C9E2D77AF7D9F6ECD2296D3DE8B48A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:ec:b2:a6:aa:62:cb:ca:4a:3b:6d:58:0a:
90:e3:7f:08:5f:cc:9f:e2:2e:04:28:70:1a:85:ad:
26:30:b8:c5:a0:84:07:0e:5f:12:75:3d:2d:67:3c:
05:11:97:87:95:8b:95:8e:53:e3:ab:e6:90:d4:6c:
a6:7f:a0:b7:67:ad:f3:9d:c5:95:24:32:70:b0:05:
71:25:e5:c7:a9:af:b7:2f:10:37:b3:ee:f8:66:10:
e8:7d:1c:19:81:f9:8d:98:9d:82:ab:0b:88:75:54:
dd:27:84:10:5d:e3:c9:ba:42:e1:aa:48:13:37:8a:
ab:18:c4:03:4b:24:8d:64:81:4c:0d:51:c4:e6:8b:
9e:10:4f:f4:6a:e8:b7:ff:8a:4e:7a:62:46:b9:fd:
cf:5f:ca:e1:f8:1f:f7:f9:ef:fa:3f:d5:53:03:95:
36:0d:70:b6:10:6c:bd:4a:21:fb:7a:21:1a:39:2f:
db:8c:7f:21:d4:c0:e1:9e:e0:fd:aa:ab:40:1d:ec:
0f:98:c4:67:b9:40:37:90:47:3d:1c:fe:72:94:d2:
25:92:a7:27:a2:c6:82:0a:c8:2e:7c:ec:d8:5a:0e:
10:26:bd:13:e1:29:6d:1a:e7:f5:30:00:64:ad:a1:
73:09:03:81:3b:96:a7:b8:ba:96:82:82:85:23:82:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FE:91:A9:C9:E2:D7:7A:F7:D9:F6:EC:D2:29:6D:3D:E8:B4:8A:65
X509v3 Authority Key Identifier:
keyid:D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131382e302f32332d3233203d3e203237303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.85.118.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:18:51:3d:6d:23:4c:5a:b9:e5:23:9e:77:78:4c:37:17:b4:
9a:cd:2f:3e:54:bd:58:e6:3f:92:48:51:70:98:9b:e0:b9:6e:
c8:b7:47:2f:a3:b0:c4:f6:1b:df:fb:45:c6:83:1d:4b:0a:19:
90:b9:35:f0:5b:1b:ee:1d:8d:61:da:f8:08:1d:6e:84:69:75:
31:41:cc:bf:27:ce:68:cb:c5:ff:12:c6:29:7d:bb:58:7a:84:
af:9e:64:b1:fc:30:f4:cb:e6:18:03:9a:26:18:a2:85:1d:a3:
1e:e7:b5:d7:89:a2:c9:4c:68:ed:91:72:25:55:9d:ed:05:80:
fc:13:82:8b:31:c2:08:58:ee:3d:35:12:91:97:3b:cb:05:14:
a1:0b:cb:e0:a1:1b:3e:82:3a:d6:e8:0e:93:3c:f7:68:b3:a6:
4c:2d:79:c2:9f:2e:73:3c:5c:bf:9d:14:bf:14:76:9b:e3:62:
70:c8:ff:d8:37:dd:92:6c:fd:42:14:27:27:06:d4:db:1b:b3:
ef:41:25:ff:25:1c:f0:de:f3:d2:b9:a5:fe:7c:8f:01:de:7e:
03:d0:35:12:f6:4e:ec:53:0e:c5:81:85:f4:26:70:09:b6:54:
c4:bf:79:07:33:da:f7:c6:34:bb:5a:11:bb:9c:2c:e1:df:d7:
9c:34:57:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:43:45 2025 by rpki-client