Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233332e35302e302f32342d3234203d3e203238323130.roa
File: 3137302e3233332e35302e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: xUS6mn4lkjk3r+dSua6RsCBRCX/MUKXzKKUmHZbEQH0=
Subject key identifier: 8E:18:86:E2:91:1E:6F:A5:2B:B4:01:2C:A2:C4:37:AC:59:41:0D:49
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 3A67E324B7D7B69CE75C0F33FDC2F8AED01025F6
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233332e35302e302f32342d3234203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:14 +0000
ROA not before: Thu 06 Mar 2025 04:37:14 +0000
ROA not after: Thu 05 Mar 2026 04:42:14 +0000
asID: 28210
IP address blocks: 170.233.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:67:e3:24:b7:d7:b6:9c:e7:5c:0f:33:fd:c2:f8:ae:d0:10:25:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:14 2025 GMT
Not After : Mar 5 04:42:14 2026 GMT
Subject: CN=8E1886E2911E6FA52BB4012CA2C437AC59410D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:64:76:43:24:7f:ce:28:94:f4:73:3c:8a:
9c:fc:d0:85:ab:32:6a:84:e1:49:10:1c:29:86:f5:
35:bd:64:51:1b:2a:55:5d:94:8e:93:5a:30:5c:f4:
48:94:00:87:3b:1e:22:00:f2:28:1a:1e:38:de:29:
50:48:dc:04:30:98:50:0a:ee:2f:7d:1a:0e:39:73:
ca:ff:14:34:eb:8d:01:8a:62:8b:5c:ab:53:6a:0d:
58:15:e6:c0:c9:17:3b:f6:9c:fd:73:35:ce:e2:ac:
04:e9:ba:38:12:fa:54:46:0c:33:6f:88:1b:98:e1:
1e:22:0f:42:aa:32:58:14:02:40:ef:23:a3:5f:65:
8d:15:56:b1:57:48:a7:a6:0d:ec:a1:07:5f:f5:d1:
12:5c:05:c2:88:4e:55:d5:f8:17:f2:f7:d1:70:96:
e3:91:a4:0c:9c:10:9f:2e:c3:28:d5:21:74:87:4b:
e0:a6:8c:c2:b7:f8:74:6e:18:67:df:a0:3a:1c:e7:
bc:58:f3:c3:dc:c2:98:7e:2a:1d:6f:06:ad:e6:87:
c7:b9:78:14:92:59:34:41:52:4e:e4:f4:48:fe:d3:
29:2e:c7:68:4a:3f:c1:0e:83:71:64:7a:02:b4:7f:
3c:a2:f3:c5:7b:ad:80:f4:7a:c9:ff:65:9c:9b:34:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:18:86:E2:91:1E:6F:A5:2B:B4:01:2C:A2:C4:37:AC:59:41:0D:49
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233332e35302e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.50.0/24
Signature Algorithm: sha256WithRSAEncryption
51:98:b1:22:6c:61:b3:7e:c0:ef:6b:7c:59:fd:ec:5e:2b:8b:
d0:89:f7:d9:db:8c:bb:df:a1:d8:57:6d:eb:59:a8:50:2e:23:
c1:d3:4a:a9:03:d7:a2:a2:de:71:66:56:7c:cf:81:73:04:20:
13:a4:20:6d:b7:0f:ce:41:45:b2:65:82:66:a7:e5:83:c5:da:
fd:fb:16:d2:cd:03:ed:bf:23:26:e6:86:9b:0f:ec:2e:9d:ad:
21:46:48:38:f1:c6:1e:55:32:97:27:1c:a9:db:11:79:c7:e7:
0f:55:80:08:2c:76:11:33:7c:ff:8d:c1:9d:4c:7f:d4:70:6a:
a3:f4:bc:1d:73:e5:85:94:2f:a1:25:c7:8a:a6:05:2a:90:db:
fe:19:70:b3:47:16:26:bb:b6:42:b8:e0:c7:de:56:b8:47:78:
e9:cc:ef:a5:c0:09:ca:eb:50:15:c7:62:f8:ef:87:6c:29:25:
cc:d7:bb:17:52:8c:65:09:24:f8:d6:0e:77:1c:e2:a2:f1:75:
73:1c:2d:be:a7:90:62:1d:16:92:17:64:da:d2:24:84:8c:46:
e2:4b:e4:f2:91:a7:10:be:c7:d3:e2:57:52:5a:79:1e:e9:56:
80:a1:aa:cf:bb:cc:44:b8:f7:23:1b:01:81:84:46:92:64:b7:
e2:2d:b4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:47:33 2025 by rpki-client