Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e322e302f32342d3234203d3e20323635343931.roa
File: 3137302e37382e322e302f32342d3234203d3e20323635343931.roa (raw, json)
Hash identifier: mteE8qov3ZFm1o9xNX4M5kHl8SDbcESuAQDet1wNuqU=
Subject key identifier: 57:B9:22:D1:03:FC:8E:97:0B:30:35:32:BA:1D:36:38:BE:B4:94:B9
Certificate issuer: /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Certificate serial: 1C7CFE7DEF4ACCE14751107E01AAC7867238C251
Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e322e302f32342d3234203d3e20323635343931.roa
Signing time: Tue 25 Feb 2025 19:17:30 +0000
ROA not before: Tue 25 Feb 2025 19:12:30 +0000
ROA not after: Tue 24 Feb 2026 19:17:30 +0000
asID: 265491
IP address blocks: 170.78.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7c:fe:7d:ef:4a:cc:e1:47:51:10:7e:01:aa:c7:86:72:38:c2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Validity
Not Before: Feb 25 19:12:30 2025 GMT
Not After : Feb 24 19:17:30 2026 GMT
Subject: CN=57B922D103FC8E970B303532BA1D3638BEB494B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:c6:67:f4:20:01:c2:8e:ac:aa:4b:4e:6d:
4e:cd:d7:3f:d3:61:42:90:cb:68:a5:27:58:c3:40:
61:2a:fa:bf:60:24:4d:d3:29:9e:5d:a2:d9:4b:41:
b1:58:29:53:18:41:fd:5d:9f:3e:dc:27:bb:dd:c9:
84:44:de:8b:9c:c7:09:36:9a:a0:14:b7:b2:28:89:
ae:9c:47:e4:60:c7:b3:e4:d3:01:2e:60:60:29:0d:
65:da:d3:c4:d0:53:92:8b:49:b3:ba:7e:88:50:dc:
5c:a2:30:d9:b9:79:03:51:12:c9:7f:70:f7:e0:17:
b6:42:06:4d:20:c2:1f:56:94:5d:f8:8b:8e:0a:e0:
42:48:4f:32:ba:67:de:49:88:f4:65:54:3b:b4:79:
ea:d1:6c:28:78:bb:a2:15:01:60:b1:13:f6:52:be:
be:ea:33:6a:ee:c2:53:d3:2f:cb:4d:64:76:97:1f:
30:b3:ef:aa:6c:5d:50:18:90:9f:59:f8:11:61:ed:
32:6b:e5:75:5b:04:1c:0d:d7:69:d4:44:bf:39:67:
25:39:31:34:ab:db:12:24:53:2a:97:4d:e2:a6:37:
5b:22:52:87:bd:e3:69:1b:fd:f2:9c:fc:5b:78:2f:
4b:d1:fb:7b:01:63:14:50:c0:ec:26:3c:aa:a0:ff:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B9:22:D1:03:FC:8E:97:0B:30:35:32:BA:1D:36:38:BE:B4:94:B9
X509v3 Authority Key Identifier:
keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e322e302f32342d3234203d3e20323635343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.2.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f5:5c:9d:da:76:fe:85:9b:4c:45:50:aa:80:25:0e:34:18:
6b:13:50:b0:f2:68:45:35:de:a0:d0:d8:dc:85:10:9a:a7:45:
b3:39:a1:00:54:30:0e:70:3c:3a:4d:67:df:7f:74:4e:f9:1f:
3b:49:56:b9:fb:19:b4:90:d5:ae:9e:10:b0:c5:c4:f7:6b:15:
84:c8:4d:ec:71:fe:9f:9c:ba:dc:24:bd:88:6c:d6:d0:c3:f9:
5d:17:9d:a9:f3:fd:e6:7b:09:5b:bb:ac:c6:4e:e5:5d:fe:f7:
3b:02:e2:8b:09:d4:de:ba:75:bc:7e:f8:87:3b:87:5e:ec:25:
11:3e:43:16:31:e8:dd:db:d4:a9:01:fd:9d:34:4b:66:2a:4d:
c6:69:a0:a9:14:3f:ce:c5:59:47:61:64:f9:6d:56:3c:7a:be:
11:6c:41:0f:9b:b6:78:b6:67:db:dc:78:17:ea:3a:b5:dd:26:
43:a0:cc:28:65:d7:9a:eb:23:d8:85:4e:5f:5c:67:8b:63:f3:
53:61:4e:6a:5f:20:32:86:c3:23:ac:ef:33:87:89:f5:94:05:
28:5e:0e:a5:cf:94:72:bf:1b:9b:38:3a:c3:88:7e:0f:d9:0e:
52:82:59:5b:fc:e7:7f:c5:94:f3:5a:f8:b5:a6:ca:46:1b:8e:
31:c6:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:42:23 2025 by rpki-client