Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa
File: 3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa (raw, json)
Hash identifier: ohncBCmyXUzrHKvX9zMnLaZici/ZynzGdXz91tV6HcQ=
Subject key identifier: 5D:43:13:9C:B4:49:23:E0:32:40:C3:04:20:7E:01:87:08:F9:2C:86
Certificate issuer: /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial: 6A6C09C46F8A9CD4B8CCAE3A07EA46CC77B156DD
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa
Signing time: Wed 05 Mar 2025 19:00:20 +0000
ROA not before: Wed 05 Mar 2025 18:55:20 +0000
ROA not after: Wed 04 Mar 2026 19:00:20 +0000
asID: 61639
IP address blocks: 131.100.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:6c:09:c4:6f:8a:9c:d4:b8:cc:ae:3a:07:ea:46:cc:77:b1:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Validity
Not Before: Mar 5 18:55:20 2025 GMT
Not After : Mar 4 19:00:20 2026 GMT
Subject: CN=5D43139CB44923E03240C304207E018708F92C86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:65:97:94:a4:1a:7b:e4:a4:4a:93:05:5f:42:
f5:9e:2b:e8:52:c1:1b:30:64:f7:de:00:02:14:3c:
94:5a:52:8d:73:b9:3f:8d:b7:bc:6f:da:88:b0:12:
90:f3:ce:f4:e9:ba:b0:8b:b6:53:3b:c9:da:24:7c:
ac:1b:47:65:79:50:7d:7c:06:6b:57:21:e7:df:d1:
5d:e7:a0:79:67:26:c1:79:d7:e5:b5:d7:ad:c8:26:
c6:d7:0b:22:63:17:d1:32:f9:fc:ce:69:db:6a:dd:
d0:16:a5:88:ae:27:56:7d:25:e0:2e:13:87:ad:2e:
f4:b9:02:98:38:59:1f:f5:b5:74:e4:ce:fb:d8:5a:
c1:33:7e:a5:d2:d3:fd:6f:dc:4b:11:7d:20:b3:4d:
1c:a8:e5:cf:72:2e:44:06:ed:8a:e2:44:0a:a6:8f:
58:49:6d:c7:6b:7a:1c:1b:1c:36:32:5b:2d:57:0c:
d8:39:95:ac:22:ee:31:1c:93:1f:78:40:33:0f:bf:
4b:a8:f2:bb:12:9c:b1:69:7a:8f:81:86:7f:12:bf:
7b:87:9c:aa:3d:6f:44:57:04:98:2e:db:4e:15:5f:
7a:4c:32:48:b8:17:59:0f:06:b1:f1:1f:34:00:13:
28:37:22:8c:92:1f:81:98:f6:75:b9:2b:f0:7d:82:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:43:13:9C:B4:49:23:E0:32:40:C3:04:20:7E:01:87:08:F9:2C:86
X509v3 Authority Key Identifier:
keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.152.0/23
Signature Algorithm: sha256WithRSAEncryption
60:56:e6:91:a8:a1:19:93:a7:88:3c:db:df:a2:0b:ff:a1:8f:
e3:40:19:df:42:d1:73:b6:e9:18:bc:9f:c8:79:af:18:01:03:
a6:2b:5a:1a:bf:b4:5b:04:da:aa:9a:64:23:77:e4:2d:5d:0b:
f4:60:5a:b9:ce:da:21:76:37:dd:67:c3:23:bc:df:1f:50:f7:
0e:bd:38:0d:a5:17:ce:30:e4:76:b6:57:14:b6:19:be:a3:ff:
98:08:49:4c:5f:eb:ec:00:d3:15:02:e1:a3:15:9c:c5:b7:92:
c8:c1:4e:21:f9:8a:73:11:76:bd:62:30:6f:f7:20:39:b6:8a:
bf:8a:a2:33:ff:3d:78:06:c0:de:1e:83:03:35:98:a5:f9:bd:
4d:7c:38:fe:74:bf:55:86:39:aa:3b:c9:5b:ff:37:12:bd:a8:
9a:96:6d:c3:cd:84:a8:96:22:19:74:48:95:88:f4:9d:c3:d7:
91:6c:7a:9f:f1:0b:28:a7:12:df:cf:5b:75:eb:14:c6:70:ef:
2a:25:c6:6e:fd:c3:ae:c0:21:79:da:69:58:a9:fc:5b:0a:e5:
74:0d:6d:87:27:78:4e:ab:e4:75:52:63:ad:7e:8b:ce:72:8c:
c0:4b:41:ee:4c:25:62:2c:c7:14:47:7e:a3:c6:84:6a:6d:16:
f0:81:25:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 21:36:34 2025 by rpki-client