Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/3137302e38332e31362e302f32332d3233203d3e20323636343636.roa
File: 3137302e38332e31362e302f32332d3233203d3e20323636343636.roa (raw, json)
Hash identifier: x4B1LtPBzgvr/NYNO/kI5y1007Ofw4ErONYM3ld42vo=
Subject key identifier: B7:52:39:B3:55:54:25:C2:84:E1:0B:99:63:79:7A:65:82:53:3E:50
Certificate issuer: /CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
Certificate serial: 774BC2D445FBCE49E3D649AB8ED74575C0F6A290
Authority key identifier: 64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/3137302e38332e31362e302f32332d3233203d3e20323636343636.roa
Signing time: Fri 17 Jan 2025 11:45:03 +0000
ROA not before: Fri 17 Jan 2025 11:40:03 +0000
ROA not after: Fri 16 Jan 2026 11:45:03 +0000
asID: 266466
IP address blocks: 170.83.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4b:c2:d4:45:fb:ce:49:e3:d6:49:ab:8e:d7:45:75:c0:f6:a2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
Validity
Not Before: Jan 17 11:40:03 2025 GMT
Not After : Jan 16 11:45:03 2026 GMT
Subject: CN=B75239B3555425C284E10B9963797A6582533E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:3f:86:e7:fe:56:26:69:94:84:e6:66:62:
a3:d6:9e:be:e8:de:8a:36:0a:07:77:52:3d:f9:22:
bc:ee:b3:83:a7:c8:30:24:5b:b8:49:4c:93:69:86:
1d:46:a5:cb:ca:4c:f4:4e:2b:f5:e4:e0:8c:76:8c:
b5:e8:55:ac:e6:fd:be:75:e2:f4:f7:34:88:25:b7:
c7:6d:23:2f:d6:2d:20:bb:ce:a3:6e:8b:e1:4c:84:
15:ea:93:9f:47:c6:aa:00:d2:25:ad:73:53:c7:ce:
97:f5:03:28:37:f1:39:91:d4:21:83:a3:4c:80:75:
b4:3c:1b:c6:6f:3a:16:9a:e1:55:67:34:09:b4:6e:
b2:07:df:f3:26:32:b7:75:89:1e:35:5d:43:33:8d:
76:7c:44:51:08:70:d8:39:25:28:5f:37:4d:af:6c:
ab:ff:d3:aa:18:56:a5:09:11:77:06:1a:d1:ca:31:
ff:35:6a:f3:94:ef:24:a6:82:60:bc:33:5d:48:93:
00:52:95:8c:05:56:cb:3f:35:d2:5a:9d:13:0a:52:
19:ee:58:dc:9f:5a:fc:e3:eb:69:7a:43:bf:6d:03:
2b:e4:6d:c4:1c:d1:46:19:0d:c2:6c:0c:ff:34:9b:
cc:1e:8c:ea:b0:2d:37:eb:ad:da:84:74:90:a2:36:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:52:39:B3:55:54:25:C2:84:E1:0B:99:63:79:7A:65:82:53:3E:50
X509v3 Authority Key Identifier:
keyid:64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/3137302e38332e31362e302f32332d3233203d3e20323636343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.16.0/23
Signature Algorithm: sha256WithRSAEncryption
37:8f:a4:25:1d:15:08:e5:fd:46:0e:e1:fc:35:00:f3:47:a7:
a3:16:41:ad:ea:c4:46:d6:cd:49:81:4d:de:04:86:69:ca:20:
5d:d9:50:e0:55:1b:3b:2c:54:ae:c5:e9:86:9f:95:b4:d4:a4:
fc:ee:ae:c5:0d:61:15:eb:26:c4:a7:db:86:8d:8f:41:a9:6c:
b0:81:0c:6e:0d:78:16:8e:55:85:e8:64:55:b6:57:fe:4d:d6:
d6:0f:5e:16:92:28:8d:9a:a9:84:e4:ef:c2:68:04:8d:a1:fc:
51:05:ee:9c:c5:7a:6b:f3:77:a8:e3:db:bf:a2:37:f8:0f:27:
22:dd:5b:44:5d:52:f7:af:b9:dc:82:95:f7:f4:1e:82:f5:a2:
5f:3d:b5:e2:60:f3:df:36:52:84:b6:62:4a:c1:9e:23:45:cb:
20:9f:3e:36:9c:e6:a4:ee:dc:48:ff:26:96:a8:a2:0c:b0:5a:
fc:5c:73:f8:92:7d:fc:1e:ec:81:6b:85:e6:93:d0:5b:58:25:
fa:fb:f7:d2:ac:39:c2:3c:42:39:7c:72:6d:ac:21:ae:06:2f:
0c:99:07:4e:ad:32:85:23:c5:32:a6:4c:fc:ab:a6:fa:9b:9c:
48:e8:18:6a:5f:ef:a2:80:19:9a:ad:8b:a0:a7:81:c6:50:02:
46:65:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:11:08 2025 by rpki-client