Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa
File: 3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa (raw, json)
Hash identifier: RjLgFF4ZPoGS2MfrKSraS8Yslu9EuiDjwfE+a8DBEUc=
Subject key identifier: D0:41:13:0A:14:DF:D2:6A:DE:FD:77:D2:F3:27:B7:24:6D:EC:AC:ED
Certificate issuer: /CN=994D499817907EB8F4D1290AD0C3115D0214B589
Certificate serial: 64917920D560BB5E12679483FEECDA34A92F212B
Authority key identifier: 99:4D:49:98:17:90:7E:B8:F4:D1:29:0A:D0:C3:11:5D:02:14:B5:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/994D499817907EB8F4D1290AD0C3115D0214B589.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa
Signing time: Sun 02 Mar 2025 22:11:31 +0000
ROA not before: Sun 02 Mar 2025 22:06:31 +0000
ROA not after: Sun 01 Mar 2026 22:11:31 +0000
asID: 61776
IP address blocks: 143.208.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:91:79:20:d5:60:bb:5e:12:67:94:83:fe:ec:da:34:a9:2f:21:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994D499817907EB8F4D1290AD0C3115D0214B589
Validity
Not Before: Mar 2 22:06:31 2025 GMT
Not After : Mar 1 22:11:31 2026 GMT
Subject: CN=D041130A14DFD26ADEFD77D2F327B7246DECACED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:eb:9b:29:a4:5f:d5:6d:40:5d:8f:cb:9f:
09:e8:38:14:bb:15:c6:cc:83:b0:9f:ca:64:11:6b:
5a:8e:51:a1:e6:61:7f:1e:7c:3b:85:51:09:94:74:
91:69:72:10:a3:a7:f5:98:24:41:45:1a:7d:6c:fc:
ff:4d:49:7a:c1:d1:5d:c5:60:b2:f2:0b:de:58:99:
ed:99:cb:e1:be:26:b8:88:7c:38:b3:a0:40:98:6e:
29:f1:56:a7:c5:ec:b4:3c:62:fb:91:c5:17:01:ec:
a5:ae:8c:3d:d6:b0:c9:4f:54:3d:05:9a:42:99:5b:
82:db:93:95:81:5f:5d:64:6b:1e:df:8d:cd:73:e9:
2f:d2:06:47:15:1a:43:99:48:05:c5:48:22:f7:d6:
6a:09:89:08:8b:01:b1:54:c2:2a:dd:34:be:1d:15:
99:3c:4b:82:2a:79:96:28:05:5e:1e:29:6e:e8:9c:
75:a3:ec:ef:29:c5:a3:55:b8:52:f0:2f:70:e0:1c:
97:fa:81:1a:d4:7f:09:d5:b1:be:e0:9a:70:c4:74:
ed:64:8c:34:7d:92:19:3a:78:be:f6:39:fc:61:1d:
ea:6f:0c:21:67:f4:b4:c1:d6:71:67:56:2b:65:8d:
05:40:31:09:db:a3:bf:67:44:db:45:74:ac:c1:24:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:41:13:0A:14:DF:D2:6A:DE:FD:77:D2:F3:27:B7:24:6D:EC:AC:ED
X509v3 Authority Key Identifier:
keyid:99:4D:49:98:17:90:7E:B8:F4:D1:29:0A:D0:C3:11:5D:02:14:B5:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/994D499817907EB8F4D1290AD0C3115D0214B589.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/994D499817907EB8F4D1290AD0C3115D0214B589.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.136.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:03:fe:37:00:83:fa:31:64:2a:ac:83:3f:c0:f8:9f:9e:fd:
c0:41:92:a9:2e:89:d6:dd:6a:a1:d2:7c:c6:06:36:a3:f8:b0:
44:84:21:04:79:ca:7b:cc:02:44:6d:9a:c9:1c:c3:c3:69:fd:
6f:bf:d5:74:6e:27:eb:9e:95:3a:cf:d2:e3:ba:b4:83:a9:fa:
aa:07:65:02:d7:fd:f6:9b:ea:30:99:d9:92:1e:82:12:b1:65:
5f:87:ac:a0:4b:68:78:e4:aa:cc:c5:ad:fd:6a:fd:b3:d3:f8:
d6:b6:12:94:f9:c8:91:b1:26:d0:e0:8b:34:1a:70:a7:84:57:
ab:ae:0d:18:c7:17:af:34:e2:df:c3:82:11:cf:76:1f:6f:ea:
0e:d2:bf:42:fc:0d:24:62:b5:d4:0d:c2:6f:b9:32:98:ff:7b:
00:56:bc:22:c1:bd:09:2f:bd:29:f1:72:2b:22:33:2d:90:15:
26:e2:e6:fb:39:37:5e:ca:89:ad:c3:8c:b6:9b:d2:ff:d9:f6:
4d:d1:db:0e:c1:30:b5:64:a1:d1:fe:af:de:26:61:74:47:47:
17:4c:ea:c0:31:88:af:fb:66:b0:77:ba:0d:15:2c:91:0c:30:
c5:95:16:46:f6:a3:ba:bf:86:5c:b4:56:5a:8a:f8:22:34:80:
80:4d:3b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:55:08 2025 by rpki-client