Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32322d3232203d3e20323635303938.roa
File: 3137302e3233332e3233362e302f32322d3232203d3e20323635303938.roa (raw, json)
Hash identifier: +GgPt4l0/gpSl1kzXcIHfFA6xsMu6RYpIl9EA51zwtc=
Subject key identifier: F8:94:25:F2:44:2D:DA:5F:08:B0:AD:E5:DB:5D:C6:BB:18:01:30:C5
Certificate issuer: /CN=E9BD4A328B09F70063C93430A11B2332DB5EE4BB
Certificate serial: 377AB94587219EFE20B5BFD1C5F3B4823DAED0C6
Authority key identifier: E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32322d3232203d3e20323635303938.roa
Signing time: Thu 09 Jan 2025 17:12:05 +0000
ROA not before: Thu 09 Jan 2025 17:07:05 +0000
ROA not after: Thu 08 Jan 2026 17:12:05 +0000
asID: 265098
IP address blocks: 170.233.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:7a:b9:45:87:21:9e:fe:20:b5:bf:d1:c5:f3:b4:82:3d:ae:d0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9BD4A328B09F70063C93430A11B2332DB5EE4BB
Validity
Not Before: Jan 9 17:07:05 2025 GMT
Not After : Jan 8 17:12:05 2026 GMT
Subject: CN=F89425F2442DDA5F08B0ADE5DB5DC6BB180130C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:b9:53:99:f3:04:73:13:20:0d:b3:c4:1c:
5c:21:de:42:f3:79:7f:a1:9d:6f:74:40:4b:9e:f8:
5f:b3:87:b4:90:59:17:a3:0a:81:aa:26:e4:f7:23:
b6:51:b0:6e:9b:41:03:0f:2a:9a:d1:3f:1b:52:80:
fe:3c:af:c4:b1:d6:6f:09:25:a5:ba:49:93:38:94:
77:34:c4:99:93:23:5b:44:6e:96:43:bf:9f:16:7a:
ec:40:91:d0:eb:9a:38:a6:bb:ac:a5:0f:03:16:a2:
db:c0:d9:d6:36:b1:8f:8a:41:10:e9:e2:a3:f6:3f:
d0:e3:ca:43:b0:22:f8:1e:09:da:04:d1:94:26:c5:
ee:27:4d:64:da:49:90:8b:7c:b9:9f:c2:d2:d6:62:
c1:a6:d2:4f:e6:9a:5e:59:67:98:f3:d8:2e:e8:3e:
be:51:a3:c0:1d:bb:d0:6f:48:a6:a6:8c:f2:cb:6c:
7a:12:9f:24:6a:62:83:3f:eb:ef:42:59:61:d9:90:
0b:c8:88:97:7b:79:d3:65:2a:15:50:b3:54:cf:5c:
14:e2:82:d0:a2:8f:2f:f0:57:09:c1:4d:d6:a3:24:
f6:91:f8:03:df:79:15:ba:0e:c1:77:bb:ff:65:08:
ba:ff:d1:9c:b7:27:81:9c:11:e0:80:c3:81:db:d4:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:94:25:F2:44:2D:DA:5F:08:B0:AD:E5:DB:5D:C6:BB:18:01:30:C5
X509v3 Authority Key Identifier:
keyid:E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233362e302f32322d3232203d3e20323635303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:e8:31:6f:0a:63:6e:bc:51:47:46:e6:b6:27:f1:af:1b:57:
22:dc:06:24:74:cb:0c:99:84:68:0c:f3:62:ab:c5:08:9f:e5:
c9:8c:75:f8:3e:47:79:2c:91:40:32:cf:92:f3:37:82:8e:9b:
ee:f6:6a:ee:c8:35:ee:20:36:96:5f:0f:06:c4:05:6b:e2:41:
f7:3b:8e:4e:c3:01:9d:2f:96:19:3b:49:da:f4:fc:c2:22:9c:
e2:f6:f5:e7:13:5f:a9:24:a6:5c:b9:4b:5e:f8:16:2b:38:47:
fd:d6:b9:95:14:39:21:9d:b7:d7:ec:9b:a4:ae:c6:ed:5a:f4:
a4:65:af:f7:3d:4d:44:10:a8:0f:65:73:a3:fa:04:34:02:37:
bf:c5:a3:5e:5a:93:20:45:5e:7b:0e:d2:a3:82:1a:85:20:83:
ca:67:5e:99:bd:6a:a7:d3:22:28:dc:c9:c3:f8:10:75:42:0c:
26:9b:3a:b8:e8:3f:23:9e:35:bf:c1:a7:1f:41:88:27:63:c4:
44:2b:36:e1:12:6c:30:23:28:f9:8d:65:90:7c:39:72:61:25:
03:26:13:ed:b5:5e:2d:52:2b:13:dc:10:03:85:0c:d9:af:05:
4d:f8:01:c6:82:bb:a9:00:88:80:d7:e0:21:65:f2:fe:c2:11:
f7:05:38:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:07:03 2025 by rpki-client