Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233382e3139382e302f32342d3234203d3e203238323130.roa
File: 3137302e3233382e3139382e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: 2/o8+cVJ6vxmp9sQpw/Q50bRqmeJRyJvgUTLJH+puZo=
Subject key identifier: F8:CB:75:D1:03:6F:F8:3C:C5:31:A7:6F:A9:23:5B:16:73:98:FE:D7
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 3A00D73DFFFD8EAD4FBE549DE7C9E187F58BC14B
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233382e3139382e302f32342d3234203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:12 +0000
ROA not before: Thu 06 Mar 2025 04:37:12 +0000
ROA not after: Thu 05 Mar 2026 04:42:12 +0000
asID: 28210
IP address blocks: 170.238.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:00:d7:3d:ff:fd:8e:ad:4f:be:54:9d:e7:c9:e1:87:f5:8b:c1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:12 2025 GMT
Not After : Mar 5 04:42:12 2026 GMT
Subject: CN=F8CB75D1036FF83CC531A76FA9235B167398FED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:66:1e:78:47:ef:ab:21:4e:bf:c2:f0:0c:
65:77:bc:09:df:db:e8:d9:9a:c1:eb:10:26:4f:83:
12:93:c5:47:b2:c7:9b:4d:5e:e2:f9:3c:75:36:64:
fd:46:29:2e:a2:44:fd:ee:49:28:4e:64:0b:99:16:
e3:b9:da:99:49:eb:76:54:e6:9b:4a:8b:f9:33:d1:
b5:9a:bb:de:79:b8:02:a9:50:37:43:ae:6a:55:68:
71:d8:02:ed:24:78:96:d1:7f:a4:56:c1:d7:4b:7c:
28:0e:d4:b5:e5:4d:24:b2:9d:a7:8e:dd:e4:03:f6:
90:07:e9:3b:7a:41:1b:42:df:2c:57:67:9c:f3:ad:
ac:24:57:e7:da:b7:5d:a1:dc:e2:ee:89:dd:6a:ee:
bb:c9:a0:18:6b:16:cc:02:9e:dd:de:b7:f1:61:9b:
17:39:e5:07:10:72:b8:e2:22:2b:63:a9:e8:72:ff:
40:c0:40:c2:43:08:1b:fe:dc:0b:c1:b5:a6:f1:5e:
18:6b:18:0b:6b:ed:11:67:b7:d4:5b:cb:dd:87:14:
0e:4e:c3:41:ad:db:5d:b2:dd:f0:4a:23:22:2c:0b:
88:dd:b6:c8:03:93:50:31:0f:ef:5a:74:a9:66:e9:
ac:23:5a:72:d8:89:ff:60:93:36:22:d0:c9:7e:89:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CB:75:D1:03:6F:F8:3C:C5:31:A7:6F:A9:23:5B:16:73:98:FE:D7
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233382e3139382e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a6:ad:7e:af:47:4b:a3:e9:0e:e2:f7:06:45:37:08:22:c1:
63:41:09:9b:a2:47:56:99:2b:bd:a8:a4:e9:dc:7a:01:4a:43:
75:28:d4:57:92:28:32:a1:45:35:da:5b:5f:82:90:7d:f8:98:
52:6e:35:db:b9:38:55:51:5a:7f:b6:93:57:8e:4d:30:73:b9:
d8:48:14:55:af:94:bc:4b:e8:ed:27:65:95:33:99:8a:0f:e4:
64:3d:0e:ae:01:5b:4e:16:42:b4:29:25:fe:bb:a0:6d:39:a3:
75:d7:18:be:fe:bc:01:72:65:ee:9d:00:0a:ed:08:fe:ab:18:
7b:40:68:21:0c:a7:44:64:73:79:03:a1:ec:10:7e:64:5c:c0:
c9:51:38:03:d8:20:a6:ad:20:12:09:d6:39:f4:96:6a:51:25:
1a:b8:63:56:c0:5d:ba:db:8e:cb:78:41:82:1c:ac:bf:d4:ca:
86:38:bf:dc:d0:c6:41:c2:f4:0c:fa:e4:78:c7:bb:c0:69:a8:
32:03:ef:ee:1d:3c:ce:ce:39:d7:99:b9:dd:b8:4d:9f:31:b8:
a9:06:f9:33:0b:2f:00:e8:bb:b8:d9:ac:93:a3:e2:f1:f3:db:
29:f0:2d:e0:d9:c3:fe:20:ec:d1:64:31:27:30:42:87:39:6e:
f3:06:b5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:49:45 2025 by rpki-client