Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa
File: 3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa (raw, json)
Hash identifier: Iv/VcMIAX8LV2PweGNcbhhfG2zNqgYXzbMdyNmsgCjw=
Subject key identifier: 7F:08:08:F0:CA:DA:A0:85:AC:C6:48:33:BD:F8:34:9F:25:2D:EE:42
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 38F5E4AF623BDBE459ED818B46F3B8E00534A951
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:12 +0000
ROA not before: Thu 07 Nov 2024 20:35:12 +0000
ROA not after: Thu 06 Nov 2025 20:40:12 +0000
asID: 28270
IP address blocks: 179.191.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f5:e4:af:62:3b:db:e4:59:ed:81:8b:46:f3:b8:e0:05:34:a9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:12 2024 GMT
Not After : Nov 6 20:40:12 2025 GMT
Subject: CN=7F0808F0CADAA085ACC64833BDF8349F252DEE42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9e:dc:4d:90:5c:e0:1d:d6:a3:46:3f:ed:04:
df:d6:7d:55:7d:75:ce:a2:a1:df:00:15:60:f3:7c:
4f:e3:84:18:9f:f7:0e:0c:9c:b4:19:32:51:95:f7:
51:e6:23:65:9a:d3:24:f3:e0:b4:b9:e9:e4:73:05:
1c:51:55:e5:4a:87:7f:d0:10:0c:d9:6e:34:d5:e8:
5a:db:57:17:05:96:0e:89:83:4c:eb:c9:43:af:7c:
47:d3:26:22:c9:14:dc:1f:aa:65:c9:81:aa:fb:a9:
e5:0e:6f:f5:43:ff:e9:75:08:d4:35:09:9c:07:3d:
ee:d9:ea:20:d8:27:27:aa:31:52:75:80:11:d2:f5:
bf:92:3f:bd:c2:57:18:1e:87:09:c2:b6:e8:b4:e6:
08:a2:35:5c:57:b9:8d:c0:42:29:3c:4c:b3:46:0b:
40:f4:f9:92:23:bf:1a:a8:ed:48:f7:cf:d8:81:bf:
9a:cd:6c:9c:10:8d:34:d1:91:3b:73:c6:c4:be:e5:
17:08:e1:90:71:35:ab:27:18:99:2a:c0:24:5a:4f:
ed:c0:b8:31:a7:98:77:ee:5c:00:37:c9:fa:6d:b7:
4c:f7:e6:ee:0a:44:0b:44:e9:8c:13:95:7e:fe:e2:
82:2e:ae:b8:7e:d8:6b:69:0a:bc:f5:45:dc:05:c6:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:08:08:F0:CA:DA:A0:85:AC:C6:48:33:BD:F8:34:9F:25:2D:EE:42
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.191.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:4c:ec:1c:6b:31:14:15:21:58:44:6b:cc:f7:a2:e6:71:d1:
60:64:7e:2d:83:4a:c8:84:43:3a:d4:4e:6b:4b:33:17:25:71:
9a:48:9e:80:e4:a3:b4:76:0c:e9:74:4a:4e:97:c5:e0:a8:cd:
5f:51:1c:82:d5:d9:09:76:03:cd:34:ec:6c:57:4e:90:52:f1:
ff:61:5b:da:e5:9e:56:00:51:3d:ef:d9:94:24:57:11:74:45:
d1:1d:f7:d1:79:cb:04:ea:b3:7f:58:7e:77:fb:5a:f8:56:3b:
ba:c8:ea:05:c8:c9:c2:df:1a:65:12:23:ae:b0:2f:27:ad:be:
1b:e1:b3:e1:04:07:04:0e:68:2f:14:a0:25:08:70:1b:5e:39:
12:8f:84:34:ea:6c:60:a2:d2:84:97:d7:72:62:df:44:99:da:
ab:df:44:f9:4a:de:48:17:7f:65:61:c3:5c:5b:95:33:53:c0:
94:96:60:ea:e7:28:84:15:d2:67:d5:fb:c6:bf:4b:56:bd:dc:
5a:4c:72:89:df:c7:c1:e7:a4:f7:11:af:4c:77:71:1a:a7:7c:
07:fe:9f:e3:e6:92:89:7b:ed:8e:1c:c2:e2:24:97:cf:24:f9:
58:2a:3c:7d:26:71:f8:a1:56:cc:6c:09:cc:0c:b2:ed:e5:c1:
44:52:3a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:00:36 2025 by rpki-client