Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3137302e3135302e302e302f32322d3235203d3e20323632363037.roa
File: 3137302e3135302e302e302f32322d3235203d3e20323632363037.roa (raw, json)
Hash identifier: Vs11E62UIq5Si95Zvszsd8Lh5ZLVX5VAocUC+eb+TcQ=
Subject key identifier: 70:B5:FA:CD:8A:81:BC:AC:22:17:EF:D2:C7:54:A1:8F:0B:4A:45:EC
Certificate issuer: /CN=B9095BB2B66362B38306199DFC51A80D9FFFA04A
Certificate serial: 10D4CBFFFB515D6230E38B19D1673FD90B398704
Authority key identifier: B9:09:5B:B2:B6:63:62:B3:83:06:19:9D:FC:51:A8:0D:9F:FF:A0:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9095BB2B66362B38306199DFC51A80D9FFFA04A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3137302e3135302e302e302f32322d3235203d3e20323632363037.roa
Signing time: Wed 18 Jan 2023 23:19:44 +0000
ROA not before: Wed 18 Jan 2023 23:14:44 +0000
ROA not after: Wed 17 Jan 2024 23:19:44 +0000
asID: 262607
IP address blocks: 170.150.0.0/22 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d4:cb:ff:fb:51:5d:62:30:e3:8b:19:d1:67:3f:d9:0b:39:87:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9095BB2B66362B38306199DFC51A80D9FFFA04A
Validity
Not Before: Jan 18 23:14:44 2023 GMT
Not After : Jan 17 23:19:44 2024 GMT
Subject: CN=70B5FACD8A81BCAC2217EFD2C754A18F0B4A45EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:ce:60:d3:8f:69:a1:8e:14:36:36:84:36:
74:92:75:96:8e:2a:7b:92:f8:14:2d:d5:6f:ba:c1:
65:e4:23:63:91:e7:a8:f3:50:cb:5c:3b:d4:75:e3:
3a:d1:e8:28:28:ab:01:ea:d8:94:c3:40:0d:34:ab:
ed:92:83:52:2d:94:67:1a:16:07:c0:9c:96:cd:14:
1c:ac:9a:ba:c7:9b:16:07:45:ea:6c:de:d1:ac:3a:
41:88:03:47:d9:64:a9:c6:11:5e:28:ea:ec:8c:4b:
18:f5:98:1c:a3:f2:b0:41:87:33:c5:0e:4e:fe:e0:
58:62:2f:d1:c6:ec:5c:5b:f1:5a:62:c7:cf:81:1c:
3c:9f:e6:90:04:0d:19:ba:57:f0:74:67:6e:5b:0a:
bb:12:3e:ab:4e:7c:df:88:2b:0f:69:ed:4b:59:36:
9b:d0:13:97:a4:64:80:1d:b7:10:fd:fd:5f:0e:11:
dc:27:04:1a:1a:3b:2e:32:09:f8:e1:3e:c9:64:98:
d2:76:3d:37:b8:b9:69:18:b5:32:d3:03:86:86:21:
9f:a0:36:9f:15:45:50:fc:7f:9d:3a:1a:21:74:71:
96:2a:2a:9a:00:c0:9d:60:ab:2d:6a:58:3f:24:79:
90:c6:ee:71:97:2e:15:77:2a:56:9a:88:e2:42:7c:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:FA:CD:8A:81:BC:AC:22:17:EF:D2:C7:54:A1:8F:0B:4A:45:EC
X509v3 Authority Key Identifier:
keyid:B9:09:5B:B2:B6:63:62:B3:83:06:19:9D:FC:51:A8:0D:9F:FF:A0:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/B9095BB2B66362B38306199DFC51A80D9FFFA04A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9095BB2B66362B38306199DFC51A80D9FFFA04A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3137302e3135302e302e302f32322d3235203d3e20323632363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.0.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:12:9f:52:9e:df:ce:40:80:ab:e9:6d:9c:e1:58:8a:87:ba:
3f:78:05:de:b4:44:d7:b3:89:a0:15:42:43:e8:91:0d:20:4f:
a2:5b:27:96:7d:27:8c:b9:a0:8b:7d:26:b1:1f:f6:2e:18:0d:
59:eb:b3:10:d2:df:f1:01:35:db:a5:a4:df:f7:eb:4a:7a:c2:
ac:92:de:1f:ee:e6:bf:22:3f:4e:b5:67:93:f0:d6:fa:50:ac:
ff:76:38:e0:71:71:d6:37:da:d2:91:b5:5e:b7:7b:0c:95:2e:
1c:ec:20:c0:15:2e:2c:16:6b:13:bf:e5:0d:d8:53:0c:0a:8f:
c1:57:e0:db:3e:91:4f:75:50:21:c5:ab:a9:51:20:99:c0:2d:
63:e1:13:49:12:fe:49:31:e7:b2:5f:3e:8a:82:b5:6b:c6:9c:
51:45:91:9f:91:3f:e3:3c:54:2c:b9:0f:48:1d:8a:c2:ec:80:
6d:7a:06:f3:2f:aa:8e:10:09:b8:0d:0f:fc:51:3c:71:fb:21:
56:ea:9c:32:ad:34:9f:5d:f9:03:6d:61:7f:15:3c:bd:f5:24:
e0:d8:e5:4e:5b:0f:7b:de:0f:d8:f6:37:19:48:b4:61:51:d7:
7c:7d:87:ac:94:65:85:91:2c:f2:44:3b:8b:f3:56:d6:9c:5d:
55:21:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:09:02 2025 by rpki-client