Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e312e302f32342d3234203d3e20323635343931.roa
File: 3137302e37382e312e302f32342d3234203d3e20323635343931.roa (raw, json)
Hash identifier: u5l5b/DUIQNoyX3rL5AnHAvqSpFTmlNQO8h4UCnNKBY=
Subject key identifier: 05:06:7C:2E:26:4D:C7:BB:B7:B1:D5:86:76:27:3D:F7:F6:75:A8:0E
Certificate issuer: /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Certificate serial: 062BE616A5308F4AF872C10A9074FD7FCB71F9E5
Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e312e302f32342d3234203d3e20323635343931.roa
Signing time: Tue 25 Feb 2025 19:17:31 +0000
ROA not before: Tue 25 Feb 2025 19:12:31 +0000
ROA not after: Tue 24 Feb 2026 19:17:31 +0000
asID: 265491
IP address blocks: 170.78.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:2b:e6:16:a5:30:8f:4a:f8:72:c1:0a:90:74:fd:7f:cb:71:f9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Validity
Not Before: Feb 25 19:12:31 2025 GMT
Not After : Feb 24 19:17:31 2026 GMT
Subject: CN=05067C2E264DC7BBB7B1D58676273DF7F675A80E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:ad:0d:21:b2:32:fa:22:8d:b8:c3:96:86:
30:2c:52:62:d9:9a:7e:2c:ae:b8:8b:66:dc:69:98:
fb:4c:a6:3d:9b:22:4e:08:ea:23:bf:c1:56:2b:15:
b4:61:c5:3c:13:2e:cf:03:f4:a0:3e:ca:84:10:42:
d1:f6:1a:63:cd:87:64:49:8b:b5:6c:e1:df:40:ac:
c0:c1:3b:6c:2c:b2:f0:ed:5a:dc:b5:c8:f2:a5:40:
e5:e2:19:b3:75:c3:b4:5b:74:87:b3:ac:4a:29:f6:
e1:03:81:aa:80:26:ce:01:b4:42:82:15:dd:fb:ad:
a6:4b:84:69:33:0a:69:d8:2a:87:fc:e0:a3:48:3f:
a2:46:76:47:cb:f7:07:77:49:fc:83:4d:cf:b4:12:
e5:80:43:9c:ab:77:fc:9a:1a:a2:d4:78:07:32:43:
88:3b:1d:36:6f:71:fb:94:7a:b5:d1:dd:bf:54:a8:
25:1f:13:7f:5d:09:b1:cd:da:49:87:c8:64:8e:f5:
b5:f7:34:1c:3e:95:9f:2b:17:b1:d5:a8:ac:5d:d4:
fa:d6:6e:7a:f4:47:56:6e:ea:62:5a:44:11:ac:ad:
45:ca:6a:c6:09:64:8c:c5:54:eb:9a:f3:1d:b3:6e:
51:a0:59:e7:f3:d5:8f:77:2c:6c:e1:4f:8c:80:5b:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:7C:2E:26:4D:C7:BB:B7:B1:D5:86:76:27:3D:F7:F6:75:A8:0E
X509v3 Authority Key Identifier:
keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e312e302f32342d3234203d3e20323635343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6c:a3:00:56:49:1a:e5:3d:6e:c8:48:d2:4b:b4:3a:f1:26:
9c:99:b9:36:68:f1:90:78:bc:6c:12:a3:aa:a2:e0:19:53:64:
a2:c2:c3:0d:b5:36:e8:54:98:e7:84:ee:ac:ac:a1:9d:9b:23:
f6:32:72:98:19:f7:a3:1e:ad:7f:e5:8d:d4:ee:6e:51:04:0f:
35:b9:21:63:1e:ba:cf:75:3a:bd:c4:4b:e3:68:5e:66:d1:9b:
f7:49:af:6d:66:ad:78:19:a3:a7:3e:09:29:f2:0c:7a:a6:f1:
0d:0b:d0:a8:5a:0a:c3:4c:f0:c0:db:dd:77:41:02:30:ef:56:
c8:e1:e0:0c:3a:42:ed:38:6e:e4:68:a9:58:3c:2b:86:98:60:
82:98:d7:d3:72:7c:79:fd:24:9d:71:ac:37:1d:70:06:9d:ef:
56:d4:ff:78:96:7f:a4:2e:a2:0e:06:ec:cb:da:96:7f:29:7b:
4c:4b:b6:7f:1f:35:98:2b:1a:49:8d:61:b8:a2:9d:44:36:3d:
f1:7e:17:49:69:c1:e2:cf:c9:c4:4b:56:5d:e5:42:6f:18:b1:
1f:79:ed:ce:7e:f6:d7:33:a9:6b:f0:44:96:11:27:e3:e8:5e:
c3:c2:cb:98:99:02:d4:1c:13:58:d7:91:c7:21:b1:5b:ae:c5:
51:14:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:48:23 2025 by rpki-client