Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7SbY9QEuS4foCDkoDfpEkeCYWZze485LBqkfiofR3NRr/0/3137302e38332e36342e302f32322d3332203d3e20323636343835.roa
File: 3137302e38332e36342e302f32322d3332203d3e20323636343835.roa (raw, json)
Hash identifier: N1THrOy8BMUK7rheyLZbEAfFLLQV58WdDWwd4oJWLfU=
Subject key identifier: 80:39:11:2F:15:4C:A2:DA:44:74:BE:D5:4F:22:FA:2A:FF:4C:51:B1
Certificate issuer: /CN=29A900C215A505163BD9D2844266656FCCF69E76
Certificate serial: 371B4FB706B415573809BC7EB74E6C8D840EB1C7
Authority key identifier: 29:A9:00:C2:15:A5:05:16:3B:D9:D2:84:42:66:65:6F:CC:F6:9E:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A900C215A505163BD9D2844266656FCCF69E76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7SbY9QEuS4foCDkoDfpEkeCYWZze485LBqkfiofR3NRr/0/3137302e38332e36342e302f32322d3332203d3e20323636343835.roa
Signing time: Tue 17 Dec 2024 00:55:45 +0000
ROA not before: Tue 17 Dec 2024 00:50:45 +0000
ROA not after: Tue 16 Dec 2025 00:55:45 +0000
asID: 266485
IP address blocks: 170.83.64.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1b:4f:b7:06:b4:15:57:38:09:bc:7e:b7:4e:6c:8d:84:0e:b1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29A900C215A505163BD9D2844266656FCCF69E76
Validity
Not Before: Dec 17 00:50:45 2024 GMT
Not After : Dec 16 00:55:45 2025 GMT
Subject: CN=8039112F154CA2DA4474BED54F22FA2AFF4C51B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:29:1c:db:61:c8:a1:52:04:7e:74:b2:43:
68:00:a2:00:86:b2:81:a0:63:68:e8:08:b8:6b:9c:
0f:b0:f6:f8:c8:22:5e:58:35:e6:12:08:df:1e:21:
78:3d:f5:1a:d6:27:ac:39:8b:25:90:fd:89:32:96:
6e:2b:d2:64:01:cc:23:94:af:ad:df:44:95:26:e4:
1c:0d:76:b5:ab:a9:38:2e:66:98:b4:0b:d0:d0:c7:
a0:6e:a5:bf:fc:d4:a1:9d:4c:e9:55:3d:41:cb:44:
f2:af:24:4f:c3:51:a8:4b:18:a9:3e:0a:4a:89:fb:
bb:fd:3f:f2:85:88:fc:ba:77:99:ea:58:b1:7c:28:
85:36:93:bd:60:dc:8b:70:44:aa:c9:a5:c5:15:1f:
53:3f:1b:c2:98:97:2a:44:b7:15:f7:d5:ba:6d:bd:
c3:6f:fc:99:3e:f3:b7:cf:be:d0:7f:31:85:21:33:
20:8f:cc:1c:69:1b:7e:09:22:92:02:81:a9:b3:d8:
ae:e7:e2:aa:5a:dc:3b:0d:98:28:d6:36:3c:7c:b8:
11:29:e9:b7:a8:04:51:28:51:e7:86:08:ea:e0:5c:
df:8d:4b:9a:46:e0:e6:2d:46:af:37:1d:81:7a:8b:
df:fb:d4:ed:f4:3b:9d:de:9e:99:57:fd:41:ab:6c:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:39:11:2F:15:4C:A2:DA:44:74:BE:D5:4F:22:FA:2A:FF:4C:51:B1
X509v3 Authority Key Identifier:
keyid:29:A9:00:C2:15:A5:05:16:3B:D9:D2:84:42:66:65:6F:CC:F6:9E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7SbY9QEuS4foCDkoDfpEkeCYWZze485LBqkfiofR3NRr/0/29A900C215A505163BD9D2844266656FCCF69E76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A900C215A505163BD9D2844266656FCCF69E76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbY9QEuS4foCDkoDfpEkeCYWZze485LBqkfiofR3NRr/0/3137302e38332e36342e302f32322d3332203d3e20323636343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.64.0/22
Signature Algorithm: sha256WithRSAEncryption
20:1e:70:9c:cf:50:b9:32:46:38:9c:e0:b8:e8:3b:32:4f:28:
f6:26:be:df:58:69:39:d7:3a:e6:1a:13:87:3f:73:e5:ea:2c:
f7:4e:32:6c:ed:b4:59:69:51:f5:d4:99:5e:e2:25:dd:f5:22:
82:06:21:09:5a:c4:00:7b:0f:9f:93:c3:30:ce:de:ce:2c:62:
e8:18:73:00:e9:6b:66:da:23:3c:62:93:c7:1f:17:da:18:28:
c0:fe:70:f8:d4:ad:7e:a2:d4:7b:b9:13:d4:84:8b:2a:75:90:
b6:d4:3b:46:98:44:03:f4:9f:4e:a6:5a:a5:11:fe:19:fc:ba:
aa:0b:a2:51:75:5f:72:64:61:af:d7:9e:04:bd:30:4d:dc:50:
b8:41:ca:3a:f7:ad:95:5d:bd:5c:ff:9b:78:78:b7:72:58:cc:
f8:5b:d0:9d:e5:2e:13:73:44:1a:92:8a:49:ed:6e:8d:50:e5:
d2:d8:ff:30:17:f4:be:c1:1f:f5:11:f0:8a:a1:ec:b6:29:c7:
77:6f:23:38:51:ef:88:d9:f8:66:46:74:17:85:29:a8:3d:4a:
2d:49:c1:b1:b8:63:c5:57:66:d6:fc:5b:70:4b:36:eb:2c:40:
5d:17:24:94:3a:53:8a:c0:16:94:82:d2:d6:41:a6:3e:37:f8:
8b:73:8f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:34:55 2025 by rpki-client