Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e372e302f32342d3234203d3e203532393737.roa
File: 3137302e3233312e372e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier: x882VRVC7f5t6BuxlDSIoy+bRSWaCtAnoEYrIqpVxYY=
Subject key identifier: 3A:DD:72:68:52:9D:E9:9F:E0:5B:11:2C:BB:7D:55:F3:C5:31:46:B2
Certificate issuer: /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial: 09D6D586ABD912B0DF0DDE13A523969258BB5A75
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e372e302f32342d3234203d3e203532393737.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 52977
IP address blocks: 170.231.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d6:d5:86:ab:d9:12:b0:df:0d:de:13:a5:23:96:92:58:bb:5a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=3ADD7268529DE99FE05B112CBB7D55F3C53146B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:27:d6:30:dc:c0:b9:66:3c:b3:ae:b9:55:
21:d9:b0:1d:7b:42:bc:5b:de:04:2d:11:fb:85:09:
0f:44:b9:71:ef:6d:b7:16:e8:7d:3b:c5:72:5a:a4:
39:4a:68:72:d5:38:2d:33:7d:58:25:37:db:37:61:
1d:f9:4e:5f:b1:b6:93:5d:15:76:ff:41:45:00:ba:
2f:02:09:17:d4:ff:40:83:62:65:f6:0f:ef:e7:68:
ac:ca:29:74:db:90:02:09:f6:4c:76:ec:0c:eb:23:
ab:4c:4d:21:0e:56:a3:89:8a:4a:1c:dd:40:00:4d:
da:f1:71:c2:fc:3a:0a:37:2f:04:91:4d:66:4b:2e:
77:8b:ff:d4:46:89:9b:68:a9:72:8e:ea:7b:d7:a9:
fe:4b:90:83:ec:a8:76:b6:e2:c2:7a:4d:d7:8e:cf:
c6:56:48:eb:f8:bb:dd:92:7c:20:ed:42:9a:3d:53:
5d:3e:0b:b9:df:4c:e3:6c:9f:3e:0b:d5:b7:7a:72:
02:ea:b0:ec:4b:9a:d3:39:98:36:dd:21:a6:7e:00:
0c:06:e0:32:22:a2:36:97:14:d1:d9:58:81:7e:9f:
0d:89:15:ec:66:ef:27:a8:31:b7:41:2b:3e:7d:5b:
7a:43:a8:ec:c0:fb:c7:66:7d:96:9c:e6:aa:95:e2:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DD:72:68:52:9D:E9:9F:E0:5B:11:2C:BB:7D:55:F3:C5:31:46:B2
X509v3 Authority Key Identifier:
keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e372e302f32342d3234203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.7.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0a:b7:9d:cb:5c:43:a8:f7:d3:58:57:84:25:1b:f9:b6:ab:
81:88:e6:88:5a:98:a4:16:27:85:42:32:fe:7f:88:5c:0e:1d:
74:6e:4b:94:bb:de:cf:55:67:f3:5f:a2:5a:ca:d3:37:98:a2:
ab:4d:0a:66:77:a9:a4:f7:4f:31:7f:5d:71:a1:de:64:f1:71:
8d:d9:ab:87:fb:0c:69:26:4c:3b:0d:c5:ac:ac:2e:c9:06:de:
06:95:72:48:8e:b8:cb:d4:f1:46:b3:3f:9f:15:52:5a:0c:d2:
64:f8:47:a9:18:7b:42:4b:fc:84:a2:70:c0:ca:14:ff:48:ab:
c0:75:4a:17:63:e1:32:f8:09:94:28:91:fc:ea:12:38:dc:ea:
f7:89:0d:53:3f:1f:bd:72:6b:d8:7a:6e:aa:67:ad:49:aa:c6:
b0:3d:fd:c7:85:c4:91:eb:9b:c5:4e:0f:62:4d:d8:f3:5d:f3:
84:0b:c1:34:99:08:00:a1:dd:ba:d6:9c:c3:86:a4:5e:8b:34:
e4:cd:73:c3:48:83:91:85:08:b2:ef:81:80:6a:4a:75:c1:e6:
5f:b0:9b:84:cf:fd:32:27:1f:bb:fb:a3:59:ab:c0:f3:c0:26:
dc:83:f9:98:b1:ea:39:12:47:b8:ad:06:47:81:c0:1d:35:62:
db:28:0e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:35 2025 by rpki-client