Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233392e302f32342d3234203d3e20323635303938.roa
File: 3137302e3233332e3233392e302f32342d3234203d3e20323635303938.roa (raw, json)
Hash identifier: UN4owLfRqiIneT0DfPq2vVX4FHWO1yUHswhijyhk3uU=
Subject key identifier: EC:0B:B9:2C:D3:66:F0:FE:2F:55:8A:A0:82:BE:06:FE:EF:9F:96:48
Certificate issuer: /CN=E9BD4A328B09F70063C93430A11B2332DB5EE4BB
Certificate serial: 6B97331F588F623ED359F3C753F3427782E81C61
Authority key identifier: E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233392e302f32342d3234203d3e20323635303938.roa
Signing time: Thu 09 Jan 2025 18:32:13 +0000
ROA not before: Thu 09 Jan 2025 18:27:13 +0000
ROA not after: Thu 08 Jan 2026 18:32:13 +0000
asID: 265098
IP address blocks: 170.233.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:97:33:1f:58:8f:62:3e:d3:59:f3:c7:53:f3:42:77:82:e8:1c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9BD4A328B09F70063C93430A11B2332DB5EE4BB
Validity
Not Before: Jan 9 18:27:13 2025 GMT
Not After : Jan 8 18:32:13 2026 GMT
Subject: CN=EC0BB92CD366F0FE2F558AA082BE06FEEF9F9648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:29:1c:96:d9:d5:f6:ac:60:1b:1a:41:64:
26:58:00:45:24:e7:d4:bd:8b:38:99:25:bf:5f:a0:
6c:56:2d:02:3b:f8:c6:38:20:7e:c5:c2:27:6e:24:
80:cf:8c:dc:5f:6c:83:dd:a1:6d:57:59:ce:4f:3f:
3f:69:fd:4c:ce:d9:d4:d9:14:56:bf:cb:11:13:7c:
7f:02:fe:fd:95:2d:76:8f:6c:80:78:cd:5f:40:5e:
88:2d:4f:44:75:29:3d:02:a3:68:74:84:3d:3f:2f:
6a:4e:76:fd:de:57:a8:ce:d9:1c:58:e5:79:fb:ec:
26:f4:4c:e7:bb:bf:2d:78:4c:a2:58:77:e8:81:ff:
c5:89:07:35:d2:f8:bf:f1:b2:c3:b2:b5:ec:8b:53:
f4:18:2b:55:7c:75:c4:7f:c3:d3:6f:27:fa:90:70:
f8:6b:02:b1:4b:eb:28:53:b5:86:a7:01:8d:18:76:
24:41:f9:8c:7a:53:e5:03:fa:46:b2:3f:c3:24:f9:
eb:e1:60:a8:bd:40:30:db:6d:e4:bd:1d:56:25:26:
f8:2a:bc:35:a5:08:1f:d0:d3:fe:35:29:a4:35:b7:
ba:23:6e:41:9e:7d:38:48:d3:78:ae:c7:72:38:fd:
58:c1:3d:a0:53:f9:f2:22:fb:3f:e0:d4:fd:c2:c4:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:B9:2C:D3:66:F0:FE:2F:55:8A:A0:82:BE:06:FE:EF:9F:96:48
X509v3 Authority Key Identifier:
keyid:E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3137302e3233332e3233392e302f32342d3234203d3e20323635303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:89:85:21:1b:f1:8c:14:2f:8f:67:1b:47:b9:c7:78:ef:ed:
48:ed:5b:be:f7:6b:f3:a2:65:d6:ce:18:a8:6f:75:f1:b1:4e:
2b:72:81:9e:f7:46:f2:d9:cc:35:43:4b:9f:47:a4:5c:7f:c8:
92:b0:f7:a0:41:1a:28:3e:6e:13:6c:97:54:a9:ea:3a:b6:c7:
9a:51:74:87:ac:97:d5:ef:a3:e1:0b:6a:75:cb:7b:67:7e:d2:
7a:5b:f0:22:5b:e3:01:cf:ac:f4:80:b4:3a:17:2d:fd:4a:bf:
2e:6c:08:4c:c5:9c:09:97:d5:57:b2:23:a4:34:12:5f:ad:34:
df:4d:39:98:c1:aa:12:2f:6f:3a:5c:18:86:29:75:30:61:b8:
88:0f:da:3a:10:c8:46:89:5e:7a:1d:b0:f6:d4:ef:3d:68:ef:
30:a6:33:36:fb:53:a2:ce:97:0d:77:ef:2a:d6:8a:0a:f2:04:
d3:c0:1e:72:1f:b7:bf:fe:bc:ce:fb:4c:3b:bc:71:d5:aa:c6:
18:c3:fc:26:d3:47:fb:67:51:ab:79:57:69:53:02:3c:d7:02:
8c:a8:4b:80:32:f0:c6:96:ee:f6:85:cd:7e:9f:bd:76:5b:5c:
ab:cd:32:e6:1d:de:59:1a:66:7f:c1:44:7d:16:2c:a4:2c:b7:
d6:9b:c2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:10:52 2025 by rpki-client