Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39372e302f32342d3234203d3e203532373231.roa
File: 3137302e3234362e39372e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier: W4IZtsYcOzy1HylUOmBPQvo1GYmI/vsXsRJpE9YP3vY=
Subject key identifier: FB:49:C8:F7:3D:97:1A:A1:B0:B0:7B:B7:37:36:2B:60:72:F5:88:94
Certificate issuer: /CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Certificate serial: 3A57F6736F840B730359E971EA0B1D4F85FD134B
Authority key identifier: C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39372e302f32342d3234203d3e203532373231.roa
Signing time: Tue 01 Apr 2025 13:13:35 +0000
ROA not before: Tue 01 Apr 2025 13:08:35 +0000
ROA not after: Tue 31 Mar 2026 13:13:35 +0000
asID: 52721
IP address blocks: 170.246.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:57:f6:73:6f:84:0b:73:03:59:e9:71:ea:0b:1d:4f:85:fd:13:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Validity
Not Before: Apr 1 13:08:35 2025 GMT
Not After : Mar 31 13:13:35 2026 GMT
Subject: CN=FB49C8F73D971AA1B0B07BB737362B6072F58894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:d3:c8:1b:b4:8d:83:b2:9a:1f:fb:e0:99:
f7:be:cf:9b:51:d6:09:0d:95:fc:d6:ec:29:a3:00:
56:76:7a:6a:3e:ba:e0:6d:63:dc:14:63:87:ce:5c:
82:bf:09:a2:d3:9c:3b:59:19:1f:ed:a2:a8:e1:d2:
96:92:a4:15:9e:6f:a1:be:3e:c6:af:83:71:f9:8f:
c8:bf:74:d7:da:8f:d4:57:13:55:e9:51:50:85:7b:
44:5b:38:54:ca:c7:a1:38:19:e7:17:ba:13:b4:c5:
9b:fb:98:34:b4:ec:43:ed:5d:cb:00:79:a8:74:19:
19:ac:80:51:af:96:0d:ae:56:30:46:b2:b4:7e:3d:
fa:e6:45:89:12:8e:cb:be:5b:ac:cb:44:a1:1e:54:
66:bb:56:35:0f:e7:e8:ed:02:9f:7e:33:fd:0e:49:
ea:2e:29:2f:d7:17:cb:98:63:2a:5e:6d:bb:3c:21:
b6:28:a7:dd:a9:43:0e:a0:36:50:47:33:ea:62:12:
2a:7b:b7:1e:f2:5a:50:76:54:15:e5:03:24:7d:16:
47:76:d5:16:87:ce:05:a0:14:48:28:1b:38:fa:bf:
5c:2b:93:cb:bc:bc:aa:75:1d:56:b8:0b:57:b5:50:
e5:a5:70:98:40:05:ec:0c:da:11:43:d9:c4:95:30:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:49:C8:F7:3D:97:1A:A1:B0:B0:7B:B7:37:36:2B:60:72:F5:88:94
X509v3 Authority Key Identifier:
keyid:C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39372e302f32342d3234203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.97.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:48:3f:0e:4d:9b:88:a0:62:02:8c:de:cc:8c:a6:e7:76:c0:
58:98:8c:63:e2:fd:e9:56:a4:c0:c6:b4:4d:58:27:ac:04:1e:
7a:b2:fd:53:67:76:59:76:32:09:e1:41:08:46:1e:39:71:9a:
8e:5a:16:6b:ac:9b:a0:95:58:0f:4f:76:5e:68:6c:30:30:c9:
17:d6:b6:5e:b2:36:a5:1b:7e:3d:88:41:59:30:80:27:45:e7:
d0:8a:70:b7:5b:08:52:1b:18:78:d1:bf:38:81:8a:3e:8f:ba:
bd:57:19:9b:b0:51:e5:96:23:14:7f:ff:be:78:d1:76:76:62:
62:c4:85:6d:c1:62:4a:8b:0d:9a:1c:1c:47:68:7a:d0:a2:b8:
bc:80:97:9c:3c:5b:53:c2:9c:f2:a1:c0:0d:d2:ba:78:08:52:
97:28:0e:f3:81:d6:42:59:64:e0:1e:22:7b:12:71:4e:39:fe:
3b:35:8d:0c:dd:5c:b7:65:05:e6:d4:89:6f:ae:ae:d8:3d:41:
e1:e0:c2:2d:dc:49:2a:86:83:5d:8c:13:6f:6a:fe:a4:1c:3e:
ff:51:ab:6b:d1:75:11:8b:02:b0:6a:33:e8:b3:1c:dd:e0:f2:
76:fc:69:e1:9b:fd:77:b1:a0:f9:50:3a:e0:44:6d:08:9a:67:
d2:aa:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:10:11 2025 by rpki-client