Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa
File: 3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa (raw, json)
Hash identifier: oXTwamZBdeJN2EAApic5UDNV2NLZz87vu3DcDlPv/ro=
Subject key identifier: A1:DA:0F:F1:B0:2F:C2:E7:F0:AC:52:B5:B7:D1:3F:4A:F1:22:F4:37
Certificate issuer: /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial: 04FB1D683016CC8C6B0C5CFA80BB58297EE3821E
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa
Signing time: Thu 06 Mar 2025 20:46:03 +0000
ROA not before: Thu 06 Mar 2025 20:41:03 +0000
ROA not after: Thu 05 Mar 2026 20:46:03 +0000
asID: 262322
IP address blocks: 170.254.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:fb:1d:68:30:16:cc:8c:6b:0c:5c:fa:80:bb:58:29:7e:e3:82:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Validity
Not Before: Mar 6 20:41:03 2025 GMT
Not After : Mar 5 20:46:03 2026 GMT
Subject: CN=A1DA0FF1B02FC2E7F0AC52B5B7D13F4AF122F437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:c5:9a:ea:b6:2b:c9:27:7e:bd:e8:2e:49:
d8:17:6a:38:fe:3a:3a:30:60:18:a4:96:73:ff:6a:
77:29:65:57:ac:37:18:db:4c:19:d3:46:95:c4:06:
e6:87:35:92:b5:d7:05:6b:d3:76:66:9b:05:7a:c4:
6c:31:73:28:8a:f2:ab:93:96:8f:76:bd:77:82:37:
ba:d9:9b:1f:3e:dc:34:e3:0a:3d:96:8d:80:b2:52:
1d:b1:65:b7:74:30:1b:34:a6:fa:79:85:7a:72:7a:
8b:6e:e2:1e:cd:d9:c4:78:a9:ff:3a:de:6c:bb:5a:
8a:1d:62:2d:c1:b5:79:07:aa:9c:fb:09:91:8d:9c:
7d:85:68:9d:3c:e9:67:40:df:b0:51:73:ef:6f:47:
bc:d2:7f:64:e6:aa:30:0c:a1:a7:e5:e5:e9:8f:a2:
37:b2:b1:4e:62:74:a0:94:4e:ec:7e:3b:5a:a4:f0:
e0:3a:d9:6f:ea:57:52:82:49:6e:4e:9c:a0:40:03:
98:de:d6:85:e6:57:96:4a:7d:a3:7d:75:77:0a:93:
11:54:8f:03:18:39:38:6e:57:38:04:e0:30:97:81:
be:93:3b:f7:fe:2a:8c:b7:02:8f:62:8c:98:19:3e:
72:8b:fb:60:cc:2e:18:60:a7:5c:28:9e:28:8a:3d:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DA:0F:F1:B0:2F:C2:E7:F0:AC:52:B5:B7:D1:3F:4A:F1:22:F4:37
X509v3 Authority Key Identifier:
keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.112.0/22
Signature Algorithm: sha256WithRSAEncryption
35:55:93:5f:85:22:d2:02:63:a4:d7:e0:40:cb:8a:f0:69:90:
a0:37:5f:c3:60:b0:f2:a4:55:65:f7:a0:45:d2:0c:6c:2d:72:
75:fb:5c:9b:46:0a:68:53:7a:b8:4f:2b:4f:cb:dc:ba:b1:26:
95:e7:2a:96:ea:cd:e2:d3:8e:81:26:09:7c:c2:92:48:fa:d3:
c4:29:59:fc:9a:a5:5d:61:d7:13:2a:69:98:1b:65:9d:b5:ee:
3a:c6:00:0a:99:45:3a:85:b0:88:89:5e:d6:d9:5b:b2:e9:9a:
fc:5e:89:07:85:b3:42:7c:fe:a7:40:8a:c4:19:c0:00:5f:2a:
05:ca:65:dd:17:ff:4d:95:a0:26:9c:4e:2a:5a:30:79:64:cf:
bd:ae:1c:85:06:93:ad:2d:11:14:85:a8:f8:9f:96:71:ed:12:
1e:56:85:f5:1b:53:55:c3:d7:1a:3a:2d:9c:66:7c:5f:f7:11:
00:00:59:9d:a7:fc:6d:b4:7f:ee:58:d9:d0:b5:08:76:84:c4:
de:c0:95:bb:2b:28:30:f9:75:02:83:4e:a9:48:66:2c:4a:48:
8b:87:f5:63:7f:fd:f6:44:da:33:23:60:91:80:69:d6:ba:29:
52:9c:de:61:d7:41:05:cb:d9:64:22:ea:13:96:c6:96:70:54:
82:3b:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:00:18 2025 by rpki-client