Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35322e302f32332d3234203d3e203631393031.roa
File: 3137302e3235342e35322e302f32332d3234203d3e203631393031.roa (raw, json)
Hash identifier: YNP3UJRv+6RNC+km8GcrTZjGKqyYQMkV/jJyH2iw7o4=
Subject key identifier: 62:41:D3:24:A3:E9:4F:A8:84:E9:21:34:52:7A:5A:25:64:58:02:9F
Certificate issuer: /CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Certificate serial: 45432A20073BA7C01F7676FB5EDA6E0E77B4A76C
Authority key identifier: 67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35322e302f32332d3234203d3e203631393031.roa
Signing time: Tue 12 Mar 2024 18:13:47 +0000
ROA not before: Tue 12 Mar 2024 18:08:47 +0000
ROA not after: Tue 11 Mar 2025 18:13:47 +0000
asID: 61901
IP address blocks: 170.254.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:43:2a:20:07:3b:a7:c0:1f:76:76:fb:5e:da:6e:0e:77:b4:a7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Validity
Not Before: Mar 12 18:08:47 2024 GMT
Not After : Mar 11 18:13:47 2025 GMT
Subject: CN=6241D324A3E94FA884E92134527A5A256458029F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:b6:3c:09:d6:98:39:b7:bc:7e:1c:c8:06:
84:4b:7d:48:56:f9:58:49:6e:33:5b:ca:f7:bd:0a:
70:71:29:a3:e7:2d:51:31:42:02:35:a3:36:50:44:
32:e1:b9:ed:6c:68:cd:24:ff:fc:fc:84:51:4c:d1:
92:fe:de:b3:94:ff:f3:3b:9c:2b:6b:03:77:ce:33:
29:6b:67:8c:c2:f7:6d:4b:38:63:10:b7:77:94:8b:
f5:31:3c:a7:c8:fa:87:45:fc:9b:b3:d7:b5:3c:bc:
6b:e1:c3:cc:bb:98:0b:7b:c7:e4:71:75:7c:69:e7:
ec:7f:83:1b:c6:d3:20:d8:db:29:cf:d0:87:b5:aa:
85:37:76:ff:35:8a:f2:b1:39:c5:8c:9b:a3:3f:85:
ba:fa:60:39:fa:49:8d:53:64:7e:61:0a:dd:27:ce:
bf:15:6c:7f:69:74:a5:46:47:8d:9a:c0:a8:c5:0f:
dc:fb:c9:60:6e:50:7e:cc:0b:6c:e4:45:44:e0:d8:
14:1b:ed:7f:ef:e0:b1:49:6e:89:75:8c:04:81:c5:
89:3d:06:b5:65:e1:bf:16:92:53:b0:eb:49:37:a5:
82:6f:7b:2d:94:13:e9:02:d9:22:4a:65:8c:9e:6c:
c4:38:24:cf:84:8b:ed:20:a7:f0:e4:1e:c5:c6:b0:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:41:D3:24:A3:E9:4F:A8:84:E9:21:34:52:7A:5A:25:64:58:02:9F
X509v3 Authority Key Identifier:
keyid:67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35322e302f32332d3234203d3e203631393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.52.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:cb:80:07:d7:a8:63:a8:44:50:aa:a1:f2:8e:35:31:4d:f9:
c6:d1:90:f7:9d:ad:c7:86:06:8c:35:d1:78:3f:ca:a0:6e:e0:
73:52:ce:b2:58:72:09:b6:5e:d1:e4:93:af:15:25:ea:53:df:
09:cf:f8:3d:08:1b:ea:10:45:4a:5d:f0:74:36:8b:ab:07:ec:
e1:ad:53:2e:42:d5:35:67:27:5e:b4:cb:9b:c7:10:d3:e3:5c:
3f:c6:09:14:13:de:ec:a0:e7:9e:b0:fa:a4:7c:8a:f9:18:6d:
7e:42:56:0d:18:ee:76:fd:08:85:30:aa:57:9f:b3:fe:c3:8c:
58:c5:62:3c:79:de:94:3a:42:16:d4:1d:6d:da:b4:70:ad:d2:
d2:69:5b:6f:2b:b3:40:3c:e8:0a:a9:82:3d:52:28:29:c6:86:
91:d4:44:7c:64:d4:57:f3:5c:5f:51:57:1b:22:57:25:0f:c4:
8b:01:70:2f:70:3c:3e:95:0e:37:03:8f:3a:28:b7:98:06:3c:
bf:55:b9:58:46:72:58:3a:e3:57:66:f0:06:e6:8a:ad:46:fc:
8f:fe:52:d5:64:8b:81:ba:f4:95:dd:0a:77:3b:e4:54:81:3c:
3a:a2:7e:99:7a:d0:8c:69:6a:25:06:5c:2f:fe:1d:ef:55:10:
0d:8e:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:11 2025 by rpki-client