Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e332e302f32342d3234203d3e20323635343931.roa
File: 3137302e37382e332e302f32342d3234203d3e20323635343931.roa (raw, json)
Hash identifier: fQpvCfCQEXMayEvkeZOFz80hGU3ZFCZSxjgMlKagf/4=
Subject key identifier: F5:89:02:FD:3C:D0:F2:15:38:D4:0E:4D:1B:FF:D2:15:1D:44:F1:B2
Certificate issuer: /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Certificate serial: 7882B14D3278F57A0B25423D7A8BB40D737D1724
Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e332e302f32342d3234203d3e20323635343931.roa
Signing time: Tue 25 Feb 2025 19:17:32 +0000
ROA not before: Tue 25 Feb 2025 19:12:32 +0000
ROA not after: Tue 24 Feb 2026 19:17:32 +0000
asID: 265491
IP address blocks: 170.78.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:82:b1:4d:32:78:f5:7a:0b:25:42:3d:7a:8b:b4:0d:73:7d:17:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Validity
Not Before: Feb 25 19:12:32 2025 GMT
Not After : Feb 24 19:17:32 2026 GMT
Subject: CN=F58902FD3CD0F21538D40E4D1BFFD2151D44F1B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:6a:a5:b0:c4:d6:19:95:b5:d0:d2:b7:35:
b9:30:6e:88:30:09:07:df:b3:1e:fd:ea:92:bd:a5:
05:6c:19:6b:5c:cf:6e:a4:af:b8:a4:3d:80:0c:ea:
c9:8c:b5:e9:b6:c3:69:da:f2:cc:3f:e3:f2:cf:5c:
ef:9e:a8:d6:f8:ee:d7:68:41:4e:33:dc:fb:6b:6a:
bb:1f:00:f8:64:d4:e5:34:ba:9f:27:79:71:87:3c:
cd:03:44:70:f5:a3:bd:1d:2f:dc:e2:2e:42:78:8f:
9c:2e:0e:65:31:02:49:f3:ba:f0:2e:38:b5:75:10:
ec:e7:70:cc:6a:2a:cc:42:04:4f:fd:cc:da:26:24:
63:0e:77:f0:4f:96:fe:9e:5d:eb:51:92:01:1d:bd:
12:0d:02:fa:e6:e7:84:b3:d2:35:9d:b9:15:c6:59:
9b:84:ad:03:df:cf:e4:5b:47:e7:ef:45:25:05:e7:
0e:4e:70:89:6a:56:ef:b2:ae:1c:c3:92:21:97:b8:
17:e7:da:ae:1c:5f:58:bd:b7:af:3c:9d:45:3d:e8:
f2:0d:85:76:ec:4d:1c:e2:dc:a2:e4:cc:7c:2d:82:
89:7f:e8:15:60:35:eb:0c:2c:16:ae:f1:52:56:b3:
a5:b9:18:f3:0c:26:f2:52:f5:9a:74:f2:0a:cd:e0:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:89:02:FD:3C:D0:F2:15:38:D4:0E:4D:1B:FF:D2:15:1D:44:F1:B2
X509v3 Authority Key Identifier:
keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e332e302f32342d3234203d3e20323635343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.3.0/24
Signature Algorithm: sha256WithRSAEncryption
08:17:b0:1e:1d:49:47:e7:6d:3c:6b:66:f8:64:44:d4:91:19:
a8:28:02:3a:90:d5:df:5b:da:bb:3a:0a:5f:6b:c6:8e:f1:95:
45:3c:8a:68:8c:90:cb:f2:e3:13:2a:4d:b0:f0:1f:0f:17:c3:
29:d2:ae:4c:05:69:a1:a6:02:8f:37:a9:4c:a0:58:c1:11:2b:
fd:bc:00:ec:04:bd:06:70:42:9e:7a:d9:de:0c:da:90:5f:75:
75:a9:dd:70:f6:99:79:07:3a:e2:e6:15:96:ba:38:c2:92:31:
b2:29:31:49:62:07:a2:d6:63:e8:33:7a:57:82:13:21:d9:36:
d7:c1:d2:f5:27:99:3a:e7:5d:6d:cf:b6:2c:da:70:a5:13:02:
ae:40:79:7c:e5:88:c2:80:83:3b:40:94:5b:36:b4:05:12:69:
6b:79:69:6f:f7:28:d2:fb:db:0d:1d:10:0e:8b:58:ed:25:90:
7d:d0:0f:73:7f:ee:76:5c:a1:bd:36:3f:ad:ab:5e:e9:65:0c:
43:15:85:aa:d3:f3:c5:5c:97:31:68:44:56:5a:1b:7a:78:a0:
a3:44:0e:64:0b:36:cb:f4:52:9c:30:f8:54:52:8d:cd:27:f5:
69:91:53:f8:0c:42:06:76:8d:cb:37:36:0b:b2:8e:cd:d9:09:
cb:b4:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:42:05 2025 by rpki-client