Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233372e302f32342d3234203d3e20323635303938.roa
File: 3137302e3233332e3233372e302f32342d3234203d3e20323635303938.roa (raw, json)
Hash identifier: zRiTx8AU63VgcimgDgqo4uGEGIIZcSXEXvKh8SznhCY=
Subject key identifier: E3:C9:E6:BC:AF:B6:1D:63:F0:A2:8D:25:CE:A7:59:45:E4:1F:AA:8F
Certificate issuer: /CN=E9BD4A328B09F70063C93430A11B2332DB5EE4BB
Certificate serial: 22B40409FF3F68F83BA979CEDAC676C9FE951696
Authority key identifier: E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233372e302f32342d3234203d3e20323635303938.roa
Signing time: Thu 09 Jan 2025 18:31:25 +0000
ROA not before: Thu 09 Jan 2025 18:26:25 +0000
ROA not after: Thu 08 Jan 2026 18:31:25 +0000
asID: 265098
IP address blocks: 170.233.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b4:04:09:ff:3f:68:f8:3b:a9:79:ce:da:c6:76:c9:fe:95:16:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9BD4A328B09F70063C93430A11B2332DB5EE4BB
Validity
Not Before: Jan 9 18:26:25 2025 GMT
Not After : Jan 8 18:31:25 2026 GMT
Subject: CN=E3C9E6BCAFB61D63F0A28D25CEA75945E41FAA8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:a0:7a:9d:91:43:8c:f9:fe:8a:c6:7c:be:
c0:44:e9:74:ac:93:4b:de:b4:6f:0e:32:6b:9e:65:
a4:ea:84:a6:64:5d:98:f4:07:b4:41:ea:6b:d7:94:
f3:ac:85:c2:27:61:1d:c8:fb:30:66:e3:9a:ec:8a:
ed:a0:0f:3f:30:67:61:a1:db:84:2e:8b:03:0e:ac:
13:1d:1c:53:d6:31:eb:cb:ce:f8:95:00:6b:90:9d:
32:cb:4b:a6:7d:c0:c2:a5:e4:07:27:87:7a:cd:3d:
b6:67:db:9a:8f:3e:c5:a0:90:e7:92:fb:2a:1a:8b:
ca:8f:08:c1:67:bf:70:9a:cc:b3:47:4d:64:b0:e9:
b4:81:f1:a3:bd:66:8d:b3:11:54:8e:52:71:03:0f:
67:a7:4c:26:57:c3:b5:2a:e8:1e:a6:e7:fc:ad:f1:
96:72:b2:d8:20:5b:83:b4:bf:3f:92:b9:bd:23:28:
5c:c4:f8:61:55:c4:fa:c3:a2:8c:22:f7:68:f2:16:
cf:73:ef:e1:f7:da:37:48:10:08:f1:21:80:0d:de:
19:6a:5e:6d:6f:97:4b:bc:ca:aa:fe:3e:18:a9:99:
50:76:23:a3:09:59:2c:d1:b7:ff:48:5b:2b:16:00:
e1:a5:b3:8a:a0:de:26:68:79:e7:8b:82:a3:71:82:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:E6:BC:AF:B6:1D:63:F0:A2:8D:25:CE:A7:59:45:E4:1F:AA:8F
X509v3 Authority Key Identifier:
keyid:E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233372e302f32342d3234203d3e20323635303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c4:6e:be:e1:75:05:23:ec:ee:59:82:1b:ae:b9:c7:89:37:
ec:fe:29:a8:3f:fb:9b:7f:9c:87:9c:02:90:39:e1:32:eb:7d:
06:4a:56:6d:26:a3:53:88:9b:90:23:ef:ae:93:c3:d2:c4:c1:
d1:3c:09:68:9f:4e:32:ca:63:62:d1:09:1f:28:fa:aa:e2:8c:
f5:80:26:9b:30:27:38:07:bf:f6:fd:c6:fc:7b:82:e5:76:f2:
40:ac:9a:0f:ae:17:4c:3f:26:79:70:21:9b:05:02:0a:4d:af:
ba:81:34:43:46:7c:c0:dd:d6:df:e2:2e:c0:ec:e2:94:ef:66:
a7:f8:89:00:a2:38:a6:ac:37:00:b3:b4:08:50:dc:e2:21:47:
04:2f:fe:3e:a4:36:d4:c7:80:8b:0a:54:8a:96:1a:a7:29:12:
1e:6f:e6:4d:fc:8e:df:a2:ab:3e:34:22:34:25:05:91:37:fe:
5f:b6:d0:9b:d7:af:c5:98:21:63:e7:37:26:6c:6c:48:6e:6c:
95:f0:f4:38:09:ae:2f:5d:0a:b3:16:fa:65:88:17:24:6c:ea:
78:8f:9c:93:c9:2d:4a:59:db:65:25:4b:d8:28:19:40:c9:41:
2c:49:74:83:2a:e9:cb:7d:dc:29:65:59:c2:49:be:87:16:6b:
e9:a4:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:10:23 2025 by rpki-client