Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231322e302f32322d3232203d3e203532373036.roa
File: 3137302e3233332e3231322e302f32322d3232203d3e203532373036.roa (raw, json)
Hash identifier: K2OK3Ds3CEnN7b1HO+Ao6q3ALGAKBh/gzAetgYFIyOo=
Subject key identifier: 4C:CA:1D:1A:08:29:67:D5:62:F5:14:C4:91:DF:D0:0B:74:AD:2C:CB
Certificate issuer: /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial: 354F30F52B5DF2F20693EE7C28B8899A27120C9C
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231322e302f32322d3232203d3e203532373036.roa
Signing time: Thu 06 Mar 2025 02:31:44 +0000
ROA not before: Thu 06 Mar 2025 02:26:44 +0000
ROA not after: Thu 05 Mar 2026 02:31:44 +0000
asID: 52706
IP address blocks: 170.233.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4f:30:f5:2b:5d:f2:f2:06:93:ee:7c:28:b8:89:9a:27:12:0c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Validity
Not Before: Mar 6 02:26:44 2025 GMT
Not After : Mar 5 02:31:44 2026 GMT
Subject: CN=4CCA1D1A082967D562F514C491DFD00B74AD2CCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:28:c1:be:2c:e6:4a:f6:4c:54:37:4f:33:b1:
50:7b:18:3a:8d:4f:99:65:bc:d7:8b:8f:46:51:1e:
18:ff:18:37:86:8c:e5:d9:71:fe:79:3e:2a:78:f6:
c3:8f:6a:8b:ff:86:ee:9d:4c:69:b3:5d:07:f4:ab:
06:85:6f:24:5d:46:fd:dc:18:49:dc:89:7b:72:9c:
d2:1a:f7:ff:41:ce:ff:2c:78:60:a4:38:6b:0d:c3:
8e:82:4e:8b:5f:fb:b8:fd:23:3b:a5:bf:99:4f:72:
1f:e5:73:37:89:e3:8e:3e:a1:4c:cd:98:2b:6f:e8:
22:f2:0c:c0:2f:1c:df:a6:15:a5:2f:a9:58:ba:b2:
c1:25:e8:52:1e:7c:ab:b1:1a:5d:f5:6d:6c:23:ed:
36:00:81:8a:3c:0b:64:07:a8:f7:78:b0:73:4e:a0:
c0:26:f6:8d:e1:fe:01:75:4a:53:88:9a:d4:b1:d2:
ee:e7:a1:58:8c:7c:50:2c:86:90:f5:a9:c7:fe:6f:
87:ce:ee:de:41:65:4e:ea:95:e0:77:c2:de:3a:2b:
c8:88:fa:1e:62:d3:bb:cd:92:33:8d:55:6e:cb:98:
bc:58:7d:08:47:4c:57:38:60:d4:07:b8:60:39:58:
96:03:d9:6a:50:b5:62:98:67:42:5e:d4:23:15:03:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CA:1D:1A:08:29:67:D5:62:F5:14:C4:91:DF:D0:0B:74:AD:2C:CB
X509v3 Authority Key Identifier:
keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231322e302f32322d3232203d3e203532373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.212.0/22
Signature Algorithm: sha256WithRSAEncryption
52:02:5e:76:14:73:0e:ff:2d:9e:b9:b6:44:99:f4:13:df:6f:
a2:81:17:e4:c4:d6:0a:c0:57:fa:4e:be:15:e1:4c:c2:c9:a8:
21:85:f7:ce:c6:0e:38:e7:a7:3d:cb:75:ae:d9:d4:1e:01:f0:
4e:ed:48:5a:81:af:18:78:38:29:e5:b8:b3:15:01:76:87:53:
67:4b:c3:0c:43:9a:43:05:84:cd:0b:73:14:65:a3:e4:65:da:
e8:3d:a6:54:ff:cb:9f:8e:4a:9f:b9:ad:d4:91:2c:47:6f:bc:
c9:83:d0:24:1a:cb:39:85:39:e7:8e:be:33:28:c0:d2:0d:bd:
2f:2b:16:2f:a1:e6:be:c2:87:49:aa:6a:46:7f:91:04:f6:fe:
fa:c2:9f:6c:1f:2c:3f:7d:1c:9e:32:eb:9c:51:e6:5d:96:33:
59:1a:d0:7d:56:e3:b6:b4:17:b1:c0:68:77:d1:8d:27:a2:d4:
8e:23:74:6f:c3:1c:5d:db:12:39:39:f6:20:96:27:73:64:8c:
53:05:67:ec:e1:f3:1f:14:3e:e4:77:f6:13:2d:d5:21:d7:36:
a3:aa:72:b6:60:59:34:11:c7:75:47:c7:b6:42:3c:d5:ec:04:
f8:c1:32:b3:cb:86:3f:5f:4a:98:d6:9c:03:b7:dd:74:c5:12:
be:33:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:04:14 2025 by rpki-client