Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3232203d3e203532373231.roa
File: 3137302e3234362e39362e302f32322d3232203d3e203532373231.roa (raw, json)
Hash identifier: BkJ80OBVYUCs/LCqNVr1ztU3c3kpwcJn53q5vgmdpoo=
Subject key identifier: CE:EF:78:1E:4A:DD:9F:40:E9:CD:6B:EF:CA:4E:06:CD:BD:C8:EB:F1
Certificate issuer: /CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Certificate serial: 0E3F449F760AAF7A6E329F7B48DF89C2E085FE06
Authority key identifier: C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3232203d3e203532373231.roa
Signing time: Tue 01 Apr 2025 13:13:31 +0000
ROA not before: Tue 01 Apr 2025 13:08:31 +0000
ROA not after: Tue 31 Mar 2026 13:13:31 +0000
asID: 52721
IP address blocks: 170.246.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:3f:44:9f:76:0a:af:7a:6e:32:9f:7b:48:df:89:c2:e0:85:fe:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Validity
Not Before: Apr 1 13:08:31 2025 GMT
Not After : Mar 31 13:13:31 2026 GMT
Subject: CN=CEEF781E4ADD9F40E9CD6BEFCA4E06CDBDC8EBF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:e3:87:d3:47:66:5d:17:bf:4c:7f:df:cd:
3c:54:04:38:a4:20:03:9c:53:5e:b2:a6:0a:83:d5:
eb:77:2f:20:36:cb:40:98:ce:ec:2b:85:55:ad:b5:
5b:10:51:29:b2:a8:d9:fc:8d:62:c5:e7:9b:99:f1:
01:21:87:db:1e:30:c6:35:ef:fc:9a:58:11:3e:d1:
79:33:47:20:2c:f6:05:be:4e:f3:f5:2d:d0:b4:14:
3c:2d:d8:da:5b:30:8b:d5:20:b4:cf:22:8e:76:49:
01:5d:b8:1c:cb:6e:e8:7f:3e:c3:47:b8:79:94:78:
e4:a1:30:74:ee:e4:2b:df:f6:4f:fb:7e:7b:76:e3:
4f:76:02:a9:f0:3d:0b:79:4d:1f:b3:98:35:f0:eb:
13:b2:9b:02:ae:48:a9:63:e3:79:7a:f9:a3:b4:e3:
3c:67:bd:43:e2:db:05:d5:05:bf:cb:08:4f:10:09:
63:25:ac:19:21:8c:4d:d6:03:e0:19:ec:56:bf:82:
fe:20:93:7e:7b:7a:d3:09:3e:3d:ed:81:28:8c:85:
df:f9:d5:19:1b:b4:57:53:b4:b2:cb:ce:28:88:eb:
ff:04:28:fc:a4:e1:00:d7:b6:7b:d9:03:62:f3:99:
66:76:bb:fe:65:8d:a6:5c:4d:55:d9:34:38:6e:71:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EF:78:1E:4A:DD:9F:40:E9:CD:6B:EF:CA:4E:06:CD:BD:C8:EB:F1
X509v3 Authority Key Identifier:
keyid:C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3232203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:f4:05:7d:58:a3:52:12:c0:90:86:00:71:86:87:2c:53:3a:
91:05:cf:d5:29:b9:a8:b5:cf:9c:a6:17:80:20:50:32:42:42:
32:17:c3:10:d7:f9:52:58:8a:b4:66:62:cf:44:66:9b:09:5c:
84:75:5a:08:ae:d4:65:45:b4:97:d3:e6:62:a1:fa:15:78:eb:
9a:a8:9f:ad:fb:88:5e:67:44:9e:cd:b2:8f:3b:fa:fe:8e:2e:
b2:8f:49:18:7f:66:29:f4:c1:3a:84:30:c6:d3:de:11:d4:ae:
52:28:21:95:75:00:09:d1:93:99:56:62:fa:3e:60:38:7c:cd:
84:d3:ab:84:4b:12:f7:1f:97:cb:b6:4f:85:a3:a8:58:18:3c:
a3:8c:a0:36:10:bb:fd:e4:3c:a8:ff:8f:88:93:0a:54:48:fa:
52:b0:8b:59:f9:28:53:ad:3b:b6:a8:9f:38:0c:4e:06:6e:f5:
f6:f7:3a:f9:2f:f4:2f:ab:b3:97:d9:20:0c:24:35:35:a6:97:
81:0a:44:4a:cf:61:fe:0e:89:50:92:ce:c0:00:26:4f:da:86:
4c:78:63:30:e2:22:26:c4:ab:74:b6:35:11:5c:e9:cc:23:9c:
a2:87:2c:22:d5:3c:51:0e:87:27:1f:c4:76:cb:de:46:f6:47:
7f:8e:e5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:21 2025 by rpki-client