Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa
File: 3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier: QNYexqxi8ZgpvO1oIsW72rOjkHsbCORODUg23wwI2QE=
Subject key identifier: 96:C6:68:F9:0E:68:94:E2:CB:87:72:47:9A:F1:1D:06:2A:65:23:6A
Certificate issuer: /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial: 05AE060A49B7533C47A321029BBE06A2B8F9D17B
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa
Signing time: Wed 26 Mar 2025 11:43:39 +0000
ROA not before: Wed 26 Mar 2025 11:38:39 +0000
ROA not after: Wed 25 Mar 2026 11:43:39 +0000
asID: 263424
IP address blocks: 170.231.152.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ae:06:0a:49:b7:53:3c:47:a3:21:02:9b:be:06:a2:b8:f9:d1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Validity
Not Before: Mar 26 11:38:39 2025 GMT
Not After : Mar 25 11:43:39 2026 GMT
Subject: CN=96C668F90E6894E2CB8772479AF11D062A65236A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:74:f7:6c:45:40:55:fc:e1:08:06:69:df:
95:5e:2b:9f:d2:b6:85:10:fe:8f:78:76:3b:19:fd:
6c:db:a1:6f:06:ce:0f:fe:35:ad:7a:16:d3:6c:b7:
dc:43:71:82:67:9c:0f:b3:22:eb:d3:62:41:90:00:
08:03:3a:f4:d7:6f:ad:50:4b:79:a7:da:f8:46:39:
41:41:3e:5e:06:bc:01:28:b9:d9:ab:10:78:35:65:
af:da:e8:8d:1d:b6:42:7c:92:28:09:bd:32:65:a3:
0e:01:85:db:48:82:c6:6b:a5:98:31:61:ab:7e:84:
e8:1d:87:2e:a2:53:35:33:50:5b:8d:70:ce:f8:b4:
49:f2:45:0c:e8:d9:19:93:ed:fa:c8:2f:8a:df:a1:
91:d2:30:db:b4:64:e4:68:15:ac:2a:82:b2:f8:d7:
13:07:0f:92:60:d0:70:bd:fe:45:91:4b:a7:b2:c5:
69:81:d5:ca:62:c2:ec:5c:b8:4b:b5:c3:30:24:a4:
10:b7:21:5a:22:6e:a0:32:fa:05:95:8d:aa:2d:fc:
ef:2e:4e:65:4b:9b:1e:7f:3b:88:af:8f:19:c3:ee:
02:b2:67:c5:43:e5:06:14:bf:8a:3e:65:f6:85:71:
00:53:75:75:b6:1e:51:a5:53:40:bc:ab:6a:f8:1a:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:68:F9:0E:68:94:E2:CB:87:72:47:9A:F1:1D:06:2A:65:23:6A
X509v3 Authority Key Identifier:
keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.152.0/22
Signature Algorithm: sha256WithRSAEncryption
51:a7:7b:10:60:af:a6:89:04:3a:ac:a9:a9:3c:bf:1c:f7:8b:
35:55:db:cb:c7:cb:bf:f7:55:3c:16:35:82:9c:2a:26:67:d1:
af:71:31:51:96:cf:eb:25:8a:cf:0a:d6:94:34:ab:ce:b7:f3:
ba:a0:c0:72:c0:35:e9:44:6e:56:7d:15:3f:3f:ad:58:28:3b:
08:11:03:da:66:82:b6:27:6c:db:49:aa:1c:3d:e4:71:bf:18:
e9:b4:f4:2e:37:2a:96:fc:0a:00:8c:63:79:cc:29:fd:d5:79:
b1:60:39:22:00:c5:94:e5:16:37:1b:0b:f3:9e:41:ac:fe:1d:
96:52:8b:49:ee:1f:6d:c5:d5:a0:56:2f:07:16:78:07:d9:4b:
fc:ea:17:58:42:6f:f1:48:9f:a9:8b:87:18:a3:ad:44:de:53:
b6:c2:a7:e8:0f:44:72:ed:3e:65:ff:e2:5c:16:48:38:3e:c0:
8a:a3:8d:3b:36:ab:25:d2:08:fa:fa:1f:24:66:03:b8:56:fd:
0b:ea:13:ff:19:2c:5a:2e:de:36:8e:c6:57:db:1f:57:bf:e5:
f8:c3:3f:b5:33:3b:eb:9a:6e:70:74:54:e0:26:75:5c:2e:8a:
dd:ae:92:1e:d7:b0:8b:86:d7:a8:a0:c9:78:25:d7:25:bf:d4:
66:79:00:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:19:40 2025 by rpki-client