Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa
File: 3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa (raw, json)
Hash identifier: IlKPNsjGYIr+xMvxoys4z5tm987MYCGPqKADXKW4DhI=
Subject key identifier: 72:4F:0B:15:A8:B2:26:31:92:9B:E9:E6:32:91:7D:81:54:EF:AD:EA
Certificate issuer: /CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Certificate serial: 125BA758F3CD9938D003148DB6473F88CDCAF05A
Authority key identifier: 98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject info access: rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa
Signing time: Thu 04 Apr 2024 02:15:59 +0000
ROA not before: Thu 04 Apr 2024 02:10:59 +0000
ROA not after: Thu 03 Apr 2025 02:15:59 +0000
asID: 266256
IP address blocks: 192.140.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5b:a7:58:f3:cd:99:38:d0:03:14:8d:b6:47:3f:88:cd:ca:f0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Validity
Not Before: Apr 4 02:10:59 2024 GMT
Not After : Apr 3 02:15:59 2025 GMT
Subject: CN=724F0B15A8B22631929BE9E632917D8154EFADEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:e8:55:ac:8e:44:f3:d6:4c:c1:19:39:85:
ef:8e:f4:06:c5:93:03:c8:13:d0:32:8b:a9:9d:67:
d1:56:c7:af:6d:c9:c4:0a:1b:36:fe:6c:3f:ab:61:
40:f6:11:89:48:de:08:35:f2:6d:9c:86:fc:96:a2:
12:75:60:7f:b7:36:9b:fa:78:7b:03:83:c0:a5:aa:
0b:60:25:49:60:8c:f6:a0:59:3a:d5:06:5b:97:d2:
55:5b:d8:56:07:36:32:3d:6e:7f:46:4e:91:95:67:
eb:24:4c:33:d5:e7:70:0d:15:49:a1:51:c7:39:42:
cf:6e:3f:af:73:02:8b:38:4a:bc:b0:a0:5d:96:9f:
6e:d5:e1:b0:cd:2b:f2:4f:64:7f:dd:b7:e9:9f:7d:
09:08:a1:76:0a:3d:53:a5:c3:26:47:ad:36:fd:e0:
be:04:09:33:5d:03:7c:25:7f:cd:4a:15:fc:08:0e:
02:8e:cd:07:cd:f0:cc:46:57:da:f5:eb:e3:f1:7c:
8b:bc:39:b5:6b:ad:d3:49:68:d5:a9:56:a5:c7:38:
16:62:9f:29:a8:d5:c3:21:72:8c:9a:dc:57:c2:63:
df:84:36:84:9b:e7:ed:2c:05:58:77:1d:a7:65:2e:
cb:86:b4:89:dd:09:37:0b:f5:cb:c6:b3:a3:b8:2c:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4F:0B:15:A8:B2:26:31:92:9B:E9:E6:32:91:7D:81:54:EF:AD:EA
X509v3 Authority Key Identifier:
keyid:98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130322e302f32342d3234203d3e20323636323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.102.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:17:84:e9:da:d1:0f:9b:78:01:62:19:94:80:8f:3f:36:db:
17:de:e2:0a:25:0c:6b:5c:81:3a:56:57:b3:45:2d:d0:c4:7c:
eb:93:92:3e:9d:20:3d:b4:d3:b7:aa:01:05:09:39:c3:7b:a5:
8d:30:3d:b9:78:21:32:82:8b:53:39:20:e0:71:48:a3:1e:4e:
9b:82:c0:33:fa:58:02:49:38:3d:29:31:f6:5e:93:db:92:9b:
c1:9f:ef:87:f0:55:7d:99:6b:2a:f0:45:08:37:a7:e5:35:b2:
a3:c6:d3:6f:6e:5d:46:7e:a1:32:f6:62:d8:77:c5:28:d3:b3:
51:06:f4:60:32:f7:25:dc:9b:c8:0d:10:e8:30:9a:d1:b3:6e:
d8:a1:78:da:cf:87:81:9d:06:4c:21:b9:08:59:8d:76:9a:97:
09:71:0d:7c:0d:0e:de:40:f6:c8:db:da:ff:60:60:97:02:41:
df:91:28:d0:7f:36:48:f0:0e:6e:f9:50:9e:1f:1e:61:f2:bb:
d6:6e:e0:bd:0c:bf:ee:87:70:76:e4:d3:33:f6:38:29:d3:de:
93:4c:46:8b:47:34:47:35:73:fa:3d:ad:da:2d:04:c0:08:42:
2d:c9:12:5f:e5:6a:04:e0:fe:f2:56:1c:d4:96:01:90:aa:06:
95:b9:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:06:05 2025 by rpki-client