Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e302e302f32332d3233203d3e20323635343931.roa
File: 3137302e37382e302e302f32332d3233203d3e20323635343931.roa (raw, json)
Hash identifier: bnIZl/x7B7ddxK7nu+EgdBU0M/wgxevJM2lT/VBya+8=
Subject key identifier: 50:1A:F1:A6:3A:33:1F:D1:23:4C:E6:0E:F2:3D:7E:D3:88:5C:2B:FD
Certificate issuer: /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Certificate serial: 4FD33B6A1C65E5EA16BF5A2AD589346CE2A2B921
Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e302e302f32332d3233203d3e20323635343931.roa
Signing time: Tue 25 Feb 2025 19:17:28 +0000
ROA not before: Tue 25 Feb 2025 19:12:28 +0000
ROA not after: Tue 24 Feb 2026 19:17:28 +0000
asID: 265491
IP address blocks: 170.78.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d3:3b:6a:1c:65:e5:ea:16:bf:5a:2a:d5:89:34:6c:e2:a2:b9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Validity
Not Before: Feb 25 19:12:28 2025 GMT
Not After : Feb 24 19:17:28 2026 GMT
Subject: CN=501AF1A63A331FD1234CE60EF23D7ED3885C2BFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:68:be:2b:51:f1:5e:69:4c:dd:e8:fe:49:
79:c2:d5:4f:b5:42:42:42:5f:97:e6:e5:be:4a:cd:
f2:b9:c5:51:ca:43:99:b6:b8:bc:59:27:d1:4b:77:
22:c9:81:fa:d0:9d:58:d5:71:d4:c8:a2:96:9c:12:
6d:3e:83:bd:db:3a:08:68:37:6c:20:f6:84:2c:09:
61:55:a9:f5:2b:f7:48:d5:b6:55:16:c5:c8:6b:3c:
af:e7:ad:9b:a9:77:99:7e:f2:dd:c7:ab:a7:88:2b:
6e:a6:a9:d9:2b:bf:4a:39:05:c2:aa:52:f9:96:74:
35:36:ac:4c:ab:18:73:1f:0c:7d:15:94:60:7f:c9:
7f:11:b4:a6:52:64:d5:8c:55:e1:04:a4:6c:c5:fb:
6e:98:3e:41:3b:be:4a:f5:5d:0c:3c:cb:06:e2:70:
81:74:90:1a:4f:ab:b0:96:d4:0f:dc:78:35:55:84:
ad:69:97:ca:94:6f:a4:2c:0e:b7:03:ff:40:e3:4c:
7d:02:90:51:6c:5f:60:d0:38:95:2f:56:db:f3:94:
21:c3:64:a3:dc:4b:98:71:fa:19:e4:35:d4:86:70:
95:3d:6a:44:84:3d:5f:fc:5c:35:6f:cb:3a:42:ca:
0c:5a:ae:0d:4c:8b:38:f0:8d:b8:e7:f0:08:c4:79:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:F1:A6:3A:33:1F:D1:23:4C:E6:0E:F2:3D:7E:D3:88:5C:2B:FD
X509v3 Authority Key Identifier:
keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e302e302f32332d3233203d3e20323635343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.0.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:66:0d:eb:f2:47:83:a0:68:bd:18:cd:fa:fc:86:40:46:fb:
1a:c8:4c:d1:f6:83:d1:8e:ca:33:3f:31:ed:5b:f4:0a:4d:66:
a2:22:a6:d0:f4:86:fe:1d:aa:02:25:20:af:c0:e2:16:ff:c4:
5d:95:4f:b5:55:f4:f9:9e:cf:b5:b5:59:38:4e:0f:f6:d2:db:
03:08:7b:6b:20:f5:8d:73:a2:3f:56:3d:49:c9:50:6b:d5:6a:
c4:2c:65:11:28:fa:29:a6:91:84:35:52:b0:ed:37:bf:e5:05:
e7:ce:d3:b6:6e:28:cf:cc:f3:90:d8:62:e5:d6:14:30:e8:e8:
04:0e:8a:6b:a3:f4:41:76:b2:6f:f3:f5:bc:36:c8:3e:23:0b:
a8:b3:3b:94:72:d9:1d:ad:fb:29:f8:94:04:8c:94:bb:d3:28:
56:c2:c8:eb:0c:65:6c:71:58:8f:0e:73:09:21:a4:8b:1a:9d:
fa:e6:e1:d6:c4:aa:df:9d:68:68:7f:2e:5a:85:4b:10:36:8f:
af:78:d5:92:48:13:2d:d4:41:c5:fd:33:7a:aa:b6:f0:22:69:
f4:21:fe:4c:3f:be:f3:b3:62:36:a6:30:6d:36:84:b8:ba:93:
d1:38:7b:13:1c:e7:8b:4f:a7:31:81:04:26:6d:88:63:db:3e:
41:21:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:42:35 2025 by rpki-client