Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa
File: 3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa (raw, json)
Hash identifier: aU/MtJ/9aeIF0VSIvMVL3f1p1fHqwO9eh2i+7lRvC14=
Subject key identifier: E1:3B:78:40:91:87:16:82:97:41:FB:19:C5:55:B7:4E:82:0A:F9:AC
Certificate issuer: /CN=B52A0D870CC703D8D9FE35123E1890C611011310
Certificate serial: 254470B1F6DA34C6C2D99BE286AA1A68AD1E5FD5
Authority key identifier: B5:2A:0D:87:0C:C7:03:D8:D9:FE:35:12:3E:18:90:C6:11:01:13:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa
Signing time: Sun 12 Jan 2025 22:09:01 +0000
ROA not before: Sun 12 Jan 2025 22:04:01 +0000
ROA not after: Sun 11 Jan 2026 22:09:01 +0000
asID: 264448
IP address blocks: 131.255.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:44:70:b1:f6:da:34:c6:c2:d9:9b:e2:86:aa:1a:68:ad:1e:5f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B52A0D870CC703D8D9FE35123E1890C611011310
Validity
Not Before: Jan 12 22:04:01 2025 GMT
Not After : Jan 11 22:09:01 2026 GMT
Subject: CN=E13B7840918716829741FB19C555B74E820AF9AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:40:7f:5b:a0:ab:1f:e4:7f:23:5d:4b:b3:32:
c6:5b:e6:44:31:2a:20:4a:ac:8d:bc:70:9a:51:55:
b2:8c:72:60:ca:d1:3b:be:4c:6e:b1:19:49:84:c8:
80:d9:b0:8b:a7:ae:04:ab:b5:d7:62:6c:bf:b9:9b:
51:85:93:8f:d0:31:75:2a:54:95:38:bb:09:51:d8:
f1:dc:9b:71:22:16:08:26:ee:25:c2:24:13:9c:b0:
0d:f5:3c:f5:60:2a:0c:f4:4e:8b:53:e1:f4:8e:40:
c6:98:5e:5c:ef:22:f5:dd:d8:b2:0e:b7:5d:49:41:
0a:89:4d:87:6c:c3:84:80:d5:0f:bb:20:10:a2:02:
51:e2:2b:17:51:ff:54:db:55:4e:2d:d5:18:1f:bd:
5c:6d:7a:bb:25:46:4e:1b:1b:6c:e9:34:bb:4d:c9:
23:b9:55:71:d2:41:4c:a3:d4:1d:66:62:8c:d4:88:
36:e1:48:46:84:12:25:3d:dc:18:e3:69:e3:bf:ed:
9d:e4:c9:41:bd:9d:98:b2:06:2c:60:f1:05:23:6a:
ae:5f:6c:3c:56:79:4b:ba:6d:36:04:bc:98:8a:e6:
c2:fb:40:eb:be:39:aa:c7:ef:2f:b1:76:ce:bf:db:
77:24:27:47:fc:11:88:dc:41:96:6e:c7:f6:18:8f:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3B:78:40:91:87:16:82:97:41:FB:19:C5:55:B7:4E:82:0A:F9:AC
X509v3 Authority Key Identifier:
keyid:B5:2A:0D:87:0C:C7:03:D8:D9:FE:35:12:3E:18:90:C6:11:01:13:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:d7:be:70:72:03:50:a7:c3:86:9c:67:7c:cb:28:88:e3:a3:
67:98:e1:d9:1f:72:eb:fc:79:48:71:28:6b:70:99:16:3f:48:
2c:a3:70:2a:a4:1b:be:d6:b0:db:b8:79:0f:56:42:18:81:c4:
44:64:91:d7:0c:a2:e4:e9:c8:80:d6:44:a6:51:a0:59:ce:58:
88:d8:88:2c:42:e2:1c:9b:3d:eb:cd:33:c9:3d:5c:f0:fd:ad:
16:0a:33:dd:0a:05:94:8b:de:90:65:b8:55:92:93:34:5b:f2:
ff:18:6b:cf:26:b3:33:4c:30:f1:9a:ca:e5:63:bf:3b:3a:7b:
e0:c7:85:20:fc:b8:3f:8f:1d:79:15:9e:0c:8c:1b:f2:23:98:
6c:eb:21:5c:d5:45:01:6c:25:7b:68:e5:58:33:92:13:8a:a8:
25:29:3a:97:c5:48:f1:e4:3b:df:59:38:8e:de:4f:34:0c:80:
6b:c6:ed:88:ef:7c:ed:29:86:e3:e0:8c:70:f8:d3:16:7a:36:
bb:d0:ee:38:00:82:0e:01:12:75:03:b9:50:9b:96:22:9c:a4:
6d:37:0f:e0:1c:e3:49:2e:6e:ea:5f:02:d4:09:25:9d:43:d6:
38:fb:0e:45:3f:4a:d0:fe:f1:f2:c4:4e:b4:f7:d6:c1:5c:fa:
38:2e:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:43:33 2025 by rpki-client