Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/3139322e3134312e37362e302f32322d3232203d3e20323637343731.roa
File: 3139322e3134312e37362e302f32322d3232203d3e20323637343731.roa (raw, json)
Hash identifier: 31GYOHVEb3h1/buaA/2oWZzLdgJpBqjQU0DB29OrJv4=
Subject key identifier: CD:1D:BE:EB:B7:1A:29:EB:37:A6:37:96:A4:F0:7C:EB:C2:85:65:7B
Certificate issuer: /CN=70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345
Certificate serial: 570BFBBB97C5031228BAE6410B0734884D256F40
Authority key identifier: 70:EF:5E:1A:EE:B9:FF:8D:5F:AF:7F:72:DD:2B:B9:0C:BE:10:93:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/3139322e3134312e37362e302f32322d3232203d3e20323637343731.roa
Signing time: Tue 11 Feb 2025 13:13:17 +0000
ROA not before: Tue 11 Feb 2025 13:08:17 +0000
ROA not after: Tue 10 Feb 2026 13:13:17 +0000
asID: 267471
IP address blocks: 192.141.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:0b:fb:bb:97:c5:03:12:28:ba:e6:41:0b:07:34:88:4d:25:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345
Validity
Not Before: Feb 11 13:08:17 2025 GMT
Not After : Feb 10 13:13:17 2026 GMT
Subject: CN=CD1DBEEBB71A29EB37A63796A4F07CEBC285657B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:df:fd:78:ec:a0:56:66:6c:c9:0c:0d:e8:
05:5f:d0:a1:0c:54:09:3f:6a:ac:c1:88:7f:34:45:
27:dc:f2:4a:7b:6f:db:f3:f1:77:ac:76:5b:60:1b:
f6:7c:ef:e1:5d:a8:fa:cf:4c:2d:89:95:d3:05:ca:
df:0b:78:a3:fd:03:56:b9:2d:59:42:29:22:b2:1b:
b3:4a:97:fc:5b:be:89:84:71:74:c3:18:bd:d8:5c:
07:9c:1b:ff:d4:b4:0c:c7:03:2d:78:60:0f:dd:1a:
d8:61:f5:0a:a8:d1:35:6b:de:53:6e:fb:cb:58:e8:
45:d9:8a:57:9b:53:8c:47:04:bd:81:dc:fd:db:1b:
af:1f:5d:af:d8:c9:49:8c:17:94:9c:88:53:41:dd:
b6:b3:78:75:2e:c5:0c:11:6c:26:c2:e2:a5:78:8d:
ff:5b:10:bb:93:54:67:be:3d:cf:ce:bc:06:03:7d:
77:08:04:9d:43:55:fe:46:3f:bd:9d:51:8d:89:3d:
6f:28:d9:75:4f:29:3e:35:05:24:29:1a:b1:1b:07:
35:b7:57:5c:b1:27:18:f7:bd:b3:5a:f6:96:d0:61:
a5:02:77:de:aa:fd:6e:7b:75:2c:52:fb:45:20:47:
79:35:21:59:e3:15:0c:67:25:d3:5b:df:32:2b:5b:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1D:BE:EB:B7:1A:29:EB:37:A6:37:96:A4:F0:7C:EB:C2:85:65:7B
X509v3 Authority Key Identifier:
keyid:70:EF:5E:1A:EE:B9:FF:8D:5F:AF:7F:72:DD:2B:B9:0C:BE:10:93:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/3139322e3134312e37362e302f32322d3232203d3e20323637343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.76.0/22
Signature Algorithm: sha256WithRSAEncryption
81:11:09:f4:a4:11:6c:25:92:16:80:ad:93:2d:a6:ac:e1:69:
6d:16:38:91:fc:b9:c2:6c:9c:b7:eb:88:8a:c5:6e:1f:e3:f9:
2d:ad:5d:2c:73:e7:dc:c5:00:b6:27:ce:66:04:92:c7:56:75:
7f:d9:6d:af:49:b1:ec:7f:fc:1d:f5:ce:10:fd:ee:ff:cb:71:
c5:0b:9f:36:d3:ea:1e:9a:7c:60:3a:54:0a:80:a7:8f:fa:eb:
74:a2:ea:72:44:df:fb:cc:7d:ba:b8:17:3b:7d:2c:2e:12:0d:
5c:06:a8:2f:37:b7:93:50:2b:93:79:dd:c6:5e:98:d3:65:7c:
a1:e5:20:7a:b7:57:a4:67:4d:d2:90:39:12:3f:9f:b2:11:0d:
cc:26:1a:79:81:87:c9:cc:35:01:0d:d5:35:85:28:96:5e:97:
5b:43:9f:a7:cb:fa:b2:14:79:52:30:06:41:ea:6d:f4:b6:b2:
4f:cc:0a:ed:67:66:e5:22:5d:a7:e9:6d:d7:ab:3f:30:f3:ba:
a7:65:4e:e9:0a:27:d6:1d:8c:5a:73:cd:64:55:cf:6c:c9:dc:
73:22:ab:be:fa:28:1d:76:16:27:46:2f:e3:42:42:8e:ff:47:
d8:d5:17:a0:3f:32:45:bf:5a:80:62:0b:4b:d1:71:bb:37:2f:
83:14:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:20 2025 by rpki-client