Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233332e34392e302f32342d3234203d3e203238323130.roa
File: 3137302e3233332e34392e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: 9lbQ8QI2U4NdXQkjQDZe8qesqPLBYs4Jt3zOPB6JxN4=
Subject key identifier: 8C:C3:13:8F:BF:4B:70:1E:9D:CE:94:6D:7B:F5:FB:7A:85:AE:A0:8A
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 73E522D319E716D7CF7CE66760324539F22C8C77
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233332e34392e302f32342d3234203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:09 +0000
ROA not before: Thu 06 Mar 2025 04:37:09 +0000
ROA not after: Thu 05 Mar 2026 04:42:09 +0000
asID: 28210
IP address blocks: 170.233.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e5:22:d3:19:e7:16:d7:cf:7c:e6:67:60:32:45:39:f2:2c:8c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:09 2025 GMT
Not After : Mar 5 04:42:09 2026 GMT
Subject: CN=8CC3138FBF4B701E9DCE946D7BF5FB7A85AEA08A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:9b:da:73:ee:e6:98:cd:ff:2f:df:35:f8:
54:25:1a:b1:77:a6:95:24:fc:39:d1:e5:38:96:6e:
99:49:62:ad:3a:1f:ce:d4:a7:f2:1d:fd:20:94:0d:
cf:f7:3c:29:02:94:ca:29:18:db:a8:98:3f:1f:c7:
88:22:e2:e7:cf:bf:73:05:33:e0:8f:ce:b7:13:ee:
eb:fa:f0:37:a6:32:81:98:50:71:85:35:c3:eb:aa:
00:b6:91:cd:b7:a9:51:a2:1b:cd:6d:0a:9c:61:29:
21:a5:a7:7d:7d:6c:13:3c:90:53:46:8d:71:ed:d2:
b0:17:86:67:cd:28:a4:2b:74:fb:62:1a:99:fc:27:
a6:22:3b:4d:76:d6:e4:bf:80:0a:d2:19:36:54:16:
06:f8:da:43:47:33:fa:1d:d6:4b:95:95:18:c9:2b:
57:77:04:ee:a9:17:13:02:d5:da:d7:ae:ad:ff:48:
d2:28:67:53:b4:6c:e3:9e:25:6b:3b:7e:2d:a5:5a:
71:aa:b0:ac:be:34:b1:d5:36:28:d8:3a:62:cd:41:
3d:71:68:d6:e4:10:86:57:94:e4:bd:20:7b:70:94:
be:33:e7:3a:a0:16:28:c5:3f:f8:60:fa:da:98:a1:
d8:f3:0b:81:d4:7a:a1:25:09:60:c8:b1:9c:90:63:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C3:13:8F:BF:4B:70:1E:9D:CE:94:6D:7B:F5:FB:7A:85:AE:A0:8A
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233332e34392e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0d:d2:91:c1:5a:77:52:fa:69:e3:8d:c0:89:a5:ed:71:ba:
7f:5d:4b:44:a0:fe:78:bf:93:84:b0:fb:6d:a1:1f:1f:5b:f7:
7a:ea:15:36:dc:55:a8:ba:7c:71:57:d3:93:cb:90:33:04:64:
9a:5d:71:5f:c5:e9:c3:2e:8b:a3:fc:da:fa:c0:6a:ae:2d:f4:
e6:19:64:03:d9:50:69:ce:fd:d2:7b:5f:af:1f:32:11:ff:2c:
bc:f5:61:b2:0d:46:aa:01:43:41:42:b6:a6:dc:2b:9c:d2:9a:
35:95:88:6b:c8:31:c7:d4:38:ed:32:7a:2e:82:5a:0f:98:8b:
10:96:b3:28:f0:d0:18:bc:e1:10:21:ec:da:9c:82:bc:ac:15:
b2:58:c5:63:ca:08:0f:75:9c:0a:ca:00:9c:69:c9:a4:a4:e6:
cc:49:9e:b3:76:d5:33:e7:ea:84:21:ac:44:a0:27:87:4e:06:
07:86:6f:26:1a:70:95:b0:b2:9a:72:72:cf:39:e8:12:29:a4:
9d:ba:9f:c7:e8:e1:62:a3:08:f7:26:d5:3d:72:ed:40:c3:08:
08:7a:92:7a:36:bf:1f:ad:d0:3d:6e:e5:c8:64:87:d4:53:00:
72:51:27:11:4c:f1:79:b9:cb:6c:45:51:23:c7:1a:d2:33:66:
89:b0:ae:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:47:26 2025 by rpki-client