Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e302e302f32322d3232203d3e20323635343931.roa
File: 3137302e37382e302e302f32322d3232203d3e20323635343931.roa (raw, json)
Hash identifier: 3hvwKWXC0MK8sfcQbi3+7gGMkjbros8AtYaECWVsBcY=
Subject key identifier: 2C:C6:D4:F4:1C:1D:83:31:BF:4C:9A:27:5A:03:4D:35:F4:60:15:25
Certificate issuer: /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Certificate serial: 2CA60A8086F30385AE8C01565F0537242048327F
Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e302e302f32322d3232203d3e20323635343931.roa
Signing time: Tue 25 Feb 2025 19:17:34 +0000
ROA not before: Tue 25 Feb 2025 19:12:34 +0000
ROA not after: Tue 24 Feb 2026 19:17:34 +0000
asID: 265491
IP address blocks: 170.78.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a6:0a:80:86:f3:03:85:ae:8c:01:56:5f:05:37:24:20:48:32:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Validity
Not Before: Feb 25 19:12:34 2025 GMT
Not After : Feb 24 19:17:34 2026 GMT
Subject: CN=2CC6D4F41C1D8331BF4C9A275A034D35F4601525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a9:91:88:21:0b:99:ac:c7:06:20:a7:07:e0:
0f:21:7e:9f:0c:ce:0e:ad:ec:65:78:71:c5:30:70:
38:ae:39:46:ed:18:ef:2c:12:1d:e5:ac:f3:d9:fe:
19:20:c4:df:91:60:64:70:9e:5c:cd:38:62:a6:c9:
51:24:19:df:67:b8:86:c9:a0:ce:a5:9e:57:ed:56:
78:2b:c5:ce:05:56:61:1f:2b:2a:b0:fe:41:2b:c4:
61:2a:40:08:33:7f:19:a4:35:48:3d:a5:e9:4a:21:
82:f0:ad:9b:3d:fc:c4:23:fa:e1:da:79:57:3e:f3:
62:6f:3d:bd:a0:79:16:65:4a:b9:ce:dd:d2:d5:22:
0c:5e:af:aa:45:d8:86:f5:cf:94:99:cb:4f:80:ce:
c7:3b:09:26:4f:f1:dd:35:06:02:0e:bf:13:89:b4:
72:d3:7a:52:fb:d9:38:0a:76:14:2d:aa:9f:69:4d:
08:f7:9a:bd:b1:dd:8a:41:ab:f1:5a:13:a2:a2:da:
67:92:16:f9:52:dd:f9:d2:1d:57:34:73:9a:64:a2:
0e:0e:7c:10:00:b0:65:a8:f4:49:b4:77:43:47:a3:
78:cc:6f:f6:2e:19:da:cf:dc:67:bf:81:31:e1:dc:
6a:b3:a0:a5:2f:ec:c5:85:72:8e:ff:8e:b5:2e:57:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:D4:F4:1C:1D:83:31:BF:4C:9A:27:5A:03:4D:35:F4:60:15:25
X509v3 Authority Key Identifier:
keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e302e302f32322d3232203d3e20323635343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.0.0/22
Signature Algorithm: sha256WithRSAEncryption
87:e3:3e:15:27:52:a4:8f:d4:ed:32:81:c0:f4:fe:81:65:0a:
da:1c:31:54:3a:a6:6f:5a:1e:5f:db:45:4a:3e:f3:79:68:d8:
86:7b:50:dd:ff:ab:fe:b3:60:fc:82:b0:4b:60:d0:2b:09:53:
5a:2d:c6:c5:23:94:32:7a:bc:8f:71:f1:c7:9a:2c:a8:56:65:
f9:c5:58:c5:43:70:01:ef:fe:d0:c5:81:de:0a:c3:a8:82:61:
8d:e3:26:00:66:bb:83:b1:8d:54:37:78:91:72:be:cb:c6:ef:
39:a5:45:0f:e5:45:66:23:9b:6e:7c:da:0b:9a:ac:1c:9b:f7:
3d:bd:bd:3e:dd:a2:fd:c3:ee:31:03:9e:42:0a:d4:6e:63:e6:
6b:f8:8f:37:29:5e:6b:15:0f:24:df:2a:ab:21:e0:96:23:d2:
4a:d5:89:e8:74:15:51:11:ad:fa:1a:4c:76:63:b3:1e:36:57:
76:82:40:dd:69:24:8a:c2:13:78:58:01:3d:0f:50:d5:00:04:
5e:82:cf:43:60:41:df:87:23:e5:0f:85:7d:8a:2f:37:4f:eb:
20:8f:0e:48:e9:fb:a1:ee:33:99:bc:29:1c:16:04:83:8c:24:
0a:a6:4a:1f:27:70:62:2e:3d:03:e3:35:28:da:cf:c7:cc:c5:
2c:56:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:39:05 2025 by rpki-client