Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/1/3137302e37392e3133322e302f32322d3234203d3e20323636323933.roa
File: 3137302e37392e3133322e302f32322d3234203d3e20323636323933.roa (raw, json)
Hash identifier: Qwt215ueUe/mLhJLoJzhYUms4iKiwHemMukpmA/1TYU=
Subject key identifier: B8:71:9D:D2:DE:CF:1E:1F:4B:EB:A5:E9:36:04:62:E6:78:EC:24:27
Certificate issuer: /CN=7ED94AD8B4C548F921063196C3F8F89B0E259837
Certificate serial: 626D650713748CFCDF20566BADDCD147FDF8E31B
Authority key identifier: 7E:D9:4A:D8:B4:C5:48:F9:21:06:31:96:C3:F8:F8:9B:0E:25:98:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ED94AD8B4C548F921063196C3F8F89B0E259837.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/1/3137302e37392e3133322e302f32322d3234203d3e20323636323933.roa
Signing time: Thu 06 Mar 2025 18:33:28 +0000
ROA not before: Thu 06 Mar 2025 18:28:28 +0000
ROA not after: Thu 05 Mar 2026 18:33:28 +0000
asID: 266293
IP address blocks: 170.79.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6d:65:07:13:74:8c:fc:df:20:56:6b:ad:dc:d1:47:fd:f8:e3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ED94AD8B4C548F921063196C3F8F89B0E259837
Validity
Not Before: Mar 6 18:28:28 2025 GMT
Not After : Mar 5 18:33:28 2026 GMT
Subject: CN=B8719DD2DECF1E1F4BEBA5E9360462E678EC2427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:92:1e:45:47:92:25:93:bf:54:39:a2:a0:
51:bb:f2:41:2a:ef:ac:46:0a:bd:8b:98:ca:1a:cb:
c5:d7:67:f3:29:ce:b8:5b:48:38:0f:24:18:0f:2e:
dd:27:e1:c0:a2:33:42:2a:28:f2:13:f6:0b:fb:c2:
bd:a0:5f:62:b7:a3:36:cc:e9:e8:60:9b:27:cb:0c:
95:28:f1:3e:b2:dc:a3:64:d2:39:a2:86:70:16:69:
19:08:89:da:1f:bc:d7:fb:33:4b:c3:62:50:e9:d9:
42:66:03:52:7b:ae:70:9b:01:68:a1:e7:22:af:c4:
12:1e:bb:39:53:5e:b5:34:a3:6d:39:b6:b1:67:2a:
fc:5c:f8:af:e1:fd:e6:df:44:4c:69:fd:67:69:b6:
34:56:9f:72:c3:df:5b:7f:40:3c:53:cf:5d:00:97:
f4:34:7a:38:1f:61:ea:c6:38:78:fb:03:d9:1e:3b:
0d:fa:01:3b:5f:f3:8e:22:f9:1f:fd:4d:43:90:0c:
3a:72:27:35:a0:3c:01:9e:d7:92:d2:f8:4b:22:dd:
6e:f4:07:96:73:f2:de:b3:9c:c9:86:cd:c0:f9:31:
f4:84:7d:21:03:df:75:5f:ee:03:51:c0:e9:24:1c:
f6:f6:a0:4a:12:fb:fc:f2:aa:7a:a4:d3:40:9c:13:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:71:9D:D2:DE:CF:1E:1F:4B:EB:A5:E9:36:04:62:E6:78:EC:24:27
X509v3 Authority Key Identifier:
keyid:7E:D9:4A:D8:B4:C5:48:F9:21:06:31:96:C3:F8:F8:9B:0E:25:98:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/1/7ED94AD8B4C548F921063196C3F8F89B0E259837.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ED94AD8B4C548F921063196C3F8F89B0E259837.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/1/3137302e37392e3133322e302f32322d3234203d3e20323636323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.132.0/22
Signature Algorithm: sha256WithRSAEncryption
75:57:55:09:a8:31:b9:b8:78:0b:f5:08:76:d3:81:31:db:67:
ab:fc:70:98:a5:1e:e2:0e:45:00:57:b7:28:d3:ee:de:2a:0d:
50:f4:03:9d:4f:bc:47:9e:a6:ec:b5:bd:08:7e:01:6f:5a:36:
24:82:3a:d7:e1:de:72:2a:7f:f1:a6:fc:08:b3:e6:d1:b0:ab:
45:cf:55:29:96:6c:87:80:7b:f3:b4:d9:30:43:f6:86:a3:9e:
d5:3a:a6:0f:d8:19:0b:64:39:c8:0e:58:4a:0e:5d:50:f8:aa:
c7:fa:df:7a:e0:8d:99:aa:0b:fc:5d:cf:c1:16:b0:31:0b:39:
31:89:84:85:b9:ab:60:70:c3:26:57:ea:7f:09:d7:ed:ef:45:
8c:84:b1:5c:33:62:36:3e:b4:bf:9e:8c:6e:87:92:31:2a:62:
a7:74:2f:50:46:8d:5d:e5:03:7a:67:ef:ab:6f:f3:78:f3:fe:
e4:f4:56:09:ff:74:e7:04:2c:e7:83:12:c6:5d:39:bf:0a:bf:
65:78:c4:31:7e:2a:4b:ee:9e:bb:aa:5e:15:d4:24:2e:b5:88:
4f:02:71:1c:57:8b:b0:99:91:0f:91:e1:ad:4f:fc:11:59:da:
84:f8:4b:dd:da:28:ed:fd:7d:b0:08:96:13:76:4b:fc:d9:04:
cb:81:d1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:32:26 2025 by rpki-client