Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa
File: 3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier: vVf9xgto8XqfYergF1IU6rSRA3sQ5sZYrkRghkenW58=
Subject key identifier: 6F:17:60:52:47:33:1C:2B:1B:DA:39:59:B8:DA:49:02:76:6A:1E:13
Certificate issuer: /CN=AAC19A004E25530B8859C605F2862F7AB78E6003
Certificate serial: 2D32CB82A370EC7E68EE1464379E31F4F7DF9DD6
Authority key identifier: AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa
Signing time: Wed 30 Apr 2025 18:25:18 +0000
ROA not before: Wed 30 Apr 2025 18:20:18 +0000
ROA not after: Wed 29 Apr 2026 18:25:18 +0000
asID: 270793
IP address blocks: 201.159.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:32:cb:82:a3:70:ec:7e:68:ee:14:64:37:9e:31:f4:f7:df:9d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAC19A004E25530B8859C605F2862F7AB78E6003
Validity
Not Before: Apr 30 18:20:18 2025 GMT
Not After : Apr 29 18:25:18 2026 GMT
Subject: CN=6F17605247331C2B1BDA3959B8DA4902766A1E13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:86:db:46:1c:ea:c2:f6:b7:d6:bb:c6:30:
cd:6b:d2:58:27:3e:37:5b:b8:9c:94:d6:14:dc:08:
c7:b6:c4:6a:ce:7a:05:92:85:7e:5e:d2:ea:89:16:
d3:83:3a:69:09:40:31:95:73:1e:99:77:01:3e:81:
cc:9c:21:ad:06:7a:24:54:a4:ff:2f:5b:8b:98:fe:
dc:a2:a9:d7:ee:c7:e6:59:d7:04:2c:0b:2f:d9:07:
75:04:e5:be:8e:7d:ac:35:26:80:38:c9:d2:f8:af:
ae:71:1a:a8:34:4b:0a:eb:6e:6b:ee:40:a5:c4:c3:
af:69:fb:8c:56:be:d1:8f:9b:76:bb:86:58:3a:a8:
32:7b:23:10:7b:a0:4f:72:a0:e3:1d:83:44:6c:e2:
ec:ee:ea:b9:7d:82:89:17:28:9b:55:82:15:d7:17:
d1:e8:7f:8e:77:20:c4:b2:15:f1:01:f6:6a:c5:37:
15:8f:4f:e4:fd:36:3a:a4:89:dc:b6:2b:a2:46:6a:
e5:f0:f3:a4:aa:fe:46:1f:f9:04:b0:93:b7:f5:7a:
b2:97:92:59:4b:6e:22:0b:5f:5b:3f:c1:de:93:a0:
51:9e:6e:07:ef:9f:e9:ed:8f:cd:e7:c6:85:e3:dc:
c0:81:12:c5:d8:4c:23:57:90:4f:46:b9:32:eb:c1:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:17:60:52:47:33:1C:2B:1B:DA:39:59:B8:DA:49:02:76:6A:1E:13
X509v3 Authority Key Identifier:
keyid:AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.160.0/24
Signature Algorithm: sha256WithRSAEncryption
13:5f:a7:b8:d2:31:67:46:32:7f:78:01:06:cc:d4:c2:58:82:
e7:e1:8c:f1:8a:b6:e6:19:99:57:d0:35:7f:df:46:75:14:e1:
e3:4e:e8:4f:bb:79:82:6d:fa:f1:15:10:a7:06:ac:c6:3b:d5:
aa:4f:c0:6a:53:c9:5f:8c:dc:62:b2:3e:0d:15:c4:d6:e7:7c:
af:31:74:a5:b9:0b:4f:b3:92:61:23:e7:37:ed:39:b5:e2:9e:
2d:c1:08:78:45:13:b6:51:4c:19:fa:6e:a4:1b:ff:85:2e:38:
f5:2d:20:2d:07:e9:96:2c:e6:31:f2:38:8e:ff:50:9b:9d:be:
3f:93:46:5d:ee:6e:29:df:dc:28:66:c1:49:a8:50:46:4e:1f:
82:57:99:5a:9e:e0:99:d0:fc:70:03:a8:49:32:59:fb:15:4c:
5f:98:48:25:03:3d:7b:56:76:cd:21:d9:ef:5a:73:c8:7f:97:
c0:bb:51:96:2a:5c:b5:44:f7:65:71:7e:af:22:17:1a:cc:0c:
84:11:6b:47:3a:98:c2:8e:91:1f:06:0b:4f:9b:69:b9:d7:0e:
4a:31:42:9e:df:a8:28:d8:c2:fc:6c:46:09:5d:ff:ce:89:eb:
75:2e:f8:26:a1:4c:51:15:d1:04:83:5b:79:70:84:5e:9a:f0:
f0:72:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:59:42 2025 by rpki-client