Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233382e3139362e302f32322d3232203d3e203238323130.roa
File: 3137302e3233382e3139362e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier: m6iWC2X/e/k9txeasa3ya7695EKu2+CaaL5O3sBnoDE=
Subject key identifier: 8B:6B:B1:85:88:14:3F:F3:1C:E8:EC:3E:8D:C3:22:A1:CD:1E:66:A9
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 537B8202144318D81815B5ED76747AAB3F1C9CA2
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233382e3139362e302f32322d3232203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:10 +0000
ROA not before: Thu 06 Mar 2025 04:37:10 +0000
ROA not after: Thu 05 Mar 2026 04:42:10 +0000
asID: 28210
IP address blocks: 170.238.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:7b:82:02:14:43:18:d8:18:15:b5:ed:76:74:7a:ab:3f:1c:9c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:10 2025 GMT
Not After : Mar 5 04:42:10 2026 GMT
Subject: CN=8B6BB18588143FF31CE8EC3E8DC322A1CD1E66A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:08:52:88:31:9b:e7:f3:b1:5d:45:30:28:
ae:d7:56:3c:b5:bd:42:55:30:31:3b:0f:1e:aa:0c:
bd:d0:15:31:de:be:09:b6:74:78:c7:34:ae:fc:07:
ea:e0:27:70:19:b4:88:c0:19:ea:da:51:84:6c:2a:
f9:ba:1d:87:90:d8:ac:e8:74:82:3c:19:88:11:d2:
2d:5f:57:b9:57:57:2f:0c:88:cf:07:67:1c:f6:1f:
df:5e:58:9b:25:02:dd:ea:3d:18:01:31:5c:15:98:
ed:3a:dd:ac:50:68:91:40:42:05:ce:ba:a3:9b:dd:
d2:5a:f8:44:88:b3:a0:16:79:bb:7c:61:77:08:8a:
58:8d:7a:3a:49:34:e0:84:be:74:b6:99:85:65:1b:
8d:4e:b5:cb:f7:fe:0c:ca:65:76:2f:64:0e:40:13:
15:85:9e:47:05:c4:3d:fb:30:e7:5b:86:d8:93:6e:
f9:10:5e:59:d5:14:70:3a:86:13:30:18:e6:8a:b3:
54:02:d8:0d:10:ba:b7:2f:ea:ea:53:82:5d:78:1f:
71:6e:71:60:67:64:20:66:52:b2:03:c3:1f:d5:90:
90:91:f0:82:76:3b:99:8a:94:b5:ef:bb:e6:3d:dd:
b9:52:f2:c7:88:c5:48:fc:b8:3b:1e:32:f6:73:59:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6B:B1:85:88:14:3F:F3:1C:E8:EC:3E:8D:C3:22:A1:CD:1E:66:A9
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233382e3139362e302f32322d3232203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.196.0/22
Signature Algorithm: sha256WithRSAEncryption
98:5d:db:b3:5f:d0:26:fa:91:e5:97:da:c5:c3:21:72:c0:b5:
93:18:5a:2b:29:e8:e3:5d:e4:e7:52:c4:63:a2:88:55:f2:4a:
92:25:35:bc:78:b6:09:39:31:7a:4d:8e:20:fd:c7:51:16:12:
8f:9a:36:68:40:a3:6f:54:d9:eb:4a:05:fb:ba:da:0f:41:fb:
89:f8:e8:b7:90:ad:bc:f6:29:5d:c3:80:2b:41:15:ee:5a:a6:
e2:9c:38:6c:c4:27:2e:4f:3a:b3:d0:99:47:de:07:77:54:7c:
e6:e2:85:ad:f6:52:d7:ec:ff:01:a1:38:13:91:d4:66:97:4b:
09:2f:c1:c8:6e:91:80:f9:c7:5e:8f:60:cc:cf:cf:21:22:35:
b1:72:d9:0d:af:7b:40:ac:8e:d0:f6:9b:3c:48:6f:7b:3f:20:
7c:0f:31:23:65:80:cc:f0:72:95:dd:67:13:e6:63:0d:27:4a:
4b:b3:96:5c:dc:a1:94:30:5a:fb:c8:59:b7:90:44:cc:9d:ce:
67:8e:e4:c3:11:b7:d7:5b:19:58:28:b5:15:0d:3a:ac:37:aa:
e8:1d:8e:36:ab:a3:05:bf:e3:12:d9:2e:b2:de:c0:7c:9f:bc:
b3:69:88:dc:39:94:d1:e0:6a:32:e8:c6:17:92:e1:ac:47:37:
3f:d2:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:47:29 2025 by rpki-client