Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235352e302f32342d3234203d3e20323636333630.roa
File: 3137302e3233392e3235352e302f32342d3234203d3e20323636333630.roa (raw, json)
Hash identifier: uX8e0lFGXkkmcA4ovgqJ2Lvht4ts+Wr6SbOjmGdDBWI=
Subject key identifier: AA:F8:FD:EF:A0:E6:26:69:2F:61:A6:85:2B:AD:B9:0F:DD:F3:DC:22
Certificate issuer: /CN=B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA
Certificate serial: 4D802D1C9D04947B27FDE3B392BD79A8C209F4B1
Authority key identifier: B6:6F:95:59:0F:BF:24:05:A4:D5:B9:ED:87:88:EC:EA:D8:74:B9:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235352e302f32342d3234203d3e20323636333630.roa
Signing time: Thu 05 May 2022 16:58:34 +0000
ROA not before: Thu 05 May 2022 16:53:34 +0000
ROA not after: Thu 04 May 2023 16:58:34 +0000
asID: 266360
IP address blocks: 170.239.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:80:2d:1c:9d:04:94:7b:27:fd:e3:b3:92:bd:79:a8:c2:09:f4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA
Validity
Not Before: May 5 16:53:34 2022 GMT
Not After : May 4 16:58:34 2023 GMT
Subject: CN=AAF8FDEFA0E626692F61A6852BADB90FDDF3DC22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:76:75:9f:e7:0f:51:81:d2:ab:5d:51:fb:
13:cc:9a:c8:e1:95:c3:94:03:98:c3:77:16:0b:24:
45:70:a9:83:a4:47:16:98:04:a5:7f:b0:d2:7b:8a:
57:a5:1e:16:e5:6b:89:ba:44:a6:8c:1f:a8:da:be:
06:3d:09:ed:64:cc:64:17:b1:50:59:c8:8a:21:4f:
92:3b:71:01:a4:ea:da:f9:22:15:8d:96:ed:45:de:
54:79:55:5f:9c:80:13:78:62:bf:e6:19:60:3e:69:
d8:71:fa:a6:f1:65:7c:f4:a7:3a:cf:de:f7:d4:ba:
7d:63:cd:33:9f:3a:cf:55:78:65:43:14:47:f3:3e:
50:8f:a5:26:df:2e:a4:83:3e:66:5e:90:52:29:d6:
d7:6e:29:01:c1:f4:17:da:d1:12:05:1e:e5:e7:68:
7d:6b:44:df:ee:81:b1:05:d3:95:9a:4a:02:30:72:
7b:b5:84:23:6d:f1:d2:fd:ea:0b:1e:18:e9:b3:ae:
88:de:a4:ad:cf:e7:6b:e4:3c:52:e4:39:33:eb:01:
14:ab:0a:7a:bc:80:b4:ce:1e:ff:c5:8f:fb:ac:29:
91:fe:a1:66:24:96:c2:23:04:bc:7a:b4:3f:ea:a9:
48:54:c0:8b:c0:d6:78:1d:19:ab:0f:b5:4b:c3:fa:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F8:FD:EF:A0:E6:26:69:2F:61:A6:85:2B:AD:B9:0F:DD:F3:DC:22
X509v3 Authority Key Identifier:
keyid:B6:6F:95:59:0F:BF:24:05:A4:D5:B9:ED:87:88:EC:EA:D8:74:B9:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235352e302f32342d3234203d3e20323636333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:91:d3:00:d5:1e:db:a2:ce:04:b2:53:a1:02:39:e6:71:96:
f3:c2:58:03:d2:03:17:59:87:46:2c:16:07:7b:80:d2:5f:af:
6e:71:d8:1a:1e:ee:a0:b4:57:84:f7:82:1f:0d:13:07:0e:06:
47:ea:f9:12:29:50:d0:e7:c0:f2:51:48:74:b4:c0:04:ae:2e:
eb:2c:d7:a8:b2:8b:a2:f0:f2:59:9e:6b:15:8f:c4:0a:17:f8:
16:2f:6e:2c:e3:53:90:4b:ed:2e:44:b9:42:6c:8e:8e:87:30:
d7:40:a4:94:21:1d:2d:ec:34:e5:16:c7:64:f0:02:53:7d:32:
a3:d7:b6:71:a8:93:06:84:ad:bb:31:f0:52:68:4d:e9:07:bf:
ad:85:89:76:4f:d9:2c:fb:09:5c:79:5e:d4:f0:a0:94:61:67:
31:c0:10:08:8f:c4:fa:2d:2e:0a:ad:f7:29:06:96:91:74:65:
35:15:44:7f:f5:07:4a:b9:88:b1:ad:61:4b:05:ae:52:27:b3:
4f:4d:d3:1a:bf:a6:77:91:ba:38:ca:b7:7b:e0:07:7b:90:ce:
fc:4b:01:c4:44:f0:bb:87:eb:33:33:67:80:d9:5b:d5:a5:a0:
11:05:fa:c0:88:bd:76:93:ee:a1:65:56:47:45:e1:d2:15:d1:
55:29:03:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:54:20 2025 by rpki-client