Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3137302e302e32382e302f32322d3234203d3e20323632373834.roa
File: 3137302e302e32382e302f32322d3234203d3e20323632373834.roa (raw, json)
Hash identifier: DohdFgZQqisR/vcKw043DusYNTjU+S30W/t6y5GQLEY=
Subject key identifier: 04:A3:41:EE:30:0A:61:0E:5F:0A:26:1C:40:84:FA:33:92:4F:E7:5B
Certificate issuer: /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial: 24DD054518069265C83436177B1351E08D42C472
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3137302e302e32382e302f32322d3234203d3e20323632373834.roa
Signing time: Thu 06 Mar 2025 07:52:36 +0000
ROA not before: Thu 06 Mar 2025 07:47:36 +0000
ROA not after: Thu 05 Mar 2026 07:52:36 +0000
asID: 262784
IP address blocks: 170.0.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:dd:05:45:18:06:92:65:c8:34:36:17:7b:13:51:e0:8d:42:c4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Validity
Not Before: Mar 6 07:47:36 2025 GMT
Not After : Mar 5 07:52:36 2026 GMT
Subject: CN=04A341EE300A610E5F0A261C4084FA33924FE75B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:07:e8:10:ba:e7:4b:fa:fd:db:d4:fd:06:
44:a4:a8:64:90:8a:6e:29:dc:e5:a6:07:24:fd:8f:
bc:7e:e9:7e:4d:d2:5b:1d:68:0c:a2:58:0e:b1:37:
39:dd:21:1c:16:ae:83:df:af:0f:a7:bf:16:55:f8:
36:41:91:7a:99:f8:84:08:3d:dc:14:b0:c0:ff:a0:
18:9e:53:18:d1:6b:79:12:5e:3c:5c:a4:a8:fd:3b:
7f:81:e8:db:23:d5:33:fe:4f:6d:6e:24:a4:7f:9d:
db:14:3d:c4:07:52:2d:52:f6:b0:b6:ad:77:c5:d6:
4c:72:fc:1e:6a:c8:a9:39:a6:fc:4f:00:03:66:e5:
84:1e:76:33:09:cd:60:85:7c:12:e2:03:e3:a6:38:
20:1d:fc:22:38:da:5a:af:fb:39:d2:98:aa:f4:63:
f3:0b:cc:85:f0:08:d6:7a:05:e9:86:c2:43:0b:5d:
c5:08:0e:40:00:9d:f6:89:b6:b6:fc:c5:8d:f5:59:
91:5e:c2:e3:40:e7:2c:14:e2:54:fb:bb:0b:e0:c1:
09:3e:ec:21:1e:e9:6b:be:ae:bc:b7:55:72:eb:7b:
44:d2:9c:3e:8f:18:e1:f6:c3:fb:c9:07:a0:db:a2:
67:04:c8:7d:e8:a3:0d:75:34:6b:ea:66:50:6d:d0:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A3:41:EE:30:0A:61:0E:5F:0A:26:1C:40:84:FA:33:92:4F:E7:5B
X509v3 Authority Key Identifier:
keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3137302e302e32382e302f32322d3234203d3e20323632373834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.28.0/22
Signature Algorithm: sha256WithRSAEncryption
39:bc:5c:a7:c1:4d:fb:95:23:6e:26:8b:c6:e5:e4:48:f0:fa:
8a:22:f7:9b:fd:95:41:f3:ae:e5:e2:80:ca:5e:dc:23:5b:17:
94:e6:ca:b3:b7:1a:1b:5b:eb:59:4a:2c:14:20:db:8c:36:df:
80:05:63:a8:9e:a5:8b:f4:47:79:74:cf:a8:0b:1f:6b:c1:92:
22:b4:b7:bb:36:00:9f:cb:db:61:f8:a5:67:2b:d2:45:82:0d:
b5:32:cb:76:bd:f6:f5:f0:17:18:1c:27:5b:3f:ea:f5:60:82:
24:22:76:b0:f3:9d:84:8c:56:82:86:c4:d9:c9:76:62:d3:01:
8f:d7:eb:c0:2f:28:ba:7b:23:f6:a2:e9:f0:45:71:28:e0:2a:
54:cd:53:8d:86:26:9a:13:85:87:fa:04:7f:91:21:1a:d4:91:
6b:4a:51:f5:a7:3f:9a:b9:46:16:37:df:68:e5:0e:1e:7f:e2:
41:a0:16:02:c0:c8:ea:fb:6f:88:47:d2:08:f1:59:03:b5:56:
47:7f:01:61:8d:c9:60:51:9b:44:3d:3d:41:a3:d7:c4:49:d7:
87:af:90:ef:56:7f:ab:bf:b1:07:d8:52:eb:cd:98:c3:3a:98:
86:92:16:aa:1a:4e:56:bd:89:46:c5:8c:b4:58:f7:9c:e6:2e:
a0:61:3a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:31 2025 by rpki-client