Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3137302e3234352e3235322e302f32322d3234203d3e203631383536.roa
File: 3137302e3234352e3235322e302f32322d3234203d3e203631383536.roa (raw, json)
Hash identifier: +rzgWAM0J39lfPXIn1e0sEx5MVNXgdEmv//i0bEsix4=
Subject key identifier: 04:AE:F8:5C:2B:45:6F:E2:D1:72:70:C8:BB:55:D8:85:32:37:83:B7
Certificate issuer: /CN=9954871A58BD1D563C66245B157E43881A74A8D7
Certificate serial: 6FA16BFDD3876A5AFC6C2CB49BF50BA5E428BA0D
Authority key identifier: 99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3137302e3234352e3235322e302f32322d3234203d3e203631383536.roa
Signing time: Thu 06 Mar 2025 06:51:54 +0000
ROA not before: Thu 06 Mar 2025 06:46:54 +0000
ROA not after: Thu 05 Mar 2026 06:51:54 +0000
asID: 61856
IP address blocks: 170.245.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a1:6b:fd:d3:87:6a:5a:fc:6c:2c:b4:9b:f5:0b:a5:e4:28:ba:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9954871A58BD1D563C66245B157E43881A74A8D7
Validity
Not Before: Mar 6 06:46:54 2025 GMT
Not After : Mar 5 06:51:54 2026 GMT
Subject: CN=04AEF85C2B456FE2D17270C8BB55D885323783B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:71:5b:25:f3:8a:00:36:1d:d1:76:c5:68:
cf:38:12:d1:62:66:4d:78:c1:b0:68:6a:3f:9b:a2:
b7:83:f9:9b:57:12:2a:50:ad:65:24:54:28:27:7f:
5b:11:21:98:b1:42:cb:89:a2:4c:fa:66:a5:05:e0:
5a:f7:a2:6e:db:2a:72:76:29:4b:87:e1:e7:d3:22:
2f:16:67:21:83:ad:b0:99:0d:ac:7c:bc:39:83:2e:
92:00:2a:c2:9d:4f:d3:70:9e:42:49:54:aa:ad:f7:
50:e1:85:85:7b:d5:a0:dc:0a:54:1a:5f:f0:80:a3:
0d:63:f7:2e:1a:a2:67:cb:bc:1c:99:4a:53:26:27:
de:18:62:19:0b:f3:47:a7:e5:5c:80:50:b2:f5:bf:
54:d4:d1:4f:b1:c9:f2:87:ad:24:a8:ae:e9:03:7d:
c9:ac:3d:19:f0:91:2f:de:bd:c2:4b:da:0d:91:b0:
51:f9:97:66:28:ee:b0:dd:f4:31:5f:93:0a:a1:36:
58:d5:17:3a:69:1b:c2:f9:4d:23:46:13:b9:a2:84:
48:c9:f8:53:6d:43:c0:32:92:cf:a9:ff:f7:cf:f5:
fb:00:5c:ba:09:9e:bf:60:93:c7:a1:a9:5a:de:95:
39:35:f6:6f:1a:10:53:4c:25:82:0a:c4:de:b7:89:
47:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AE:F8:5C:2B:45:6F:E2:D1:72:70:C8:BB:55:D8:85:32:37:83:B7
X509v3 Authority Key Identifier:
keyid:99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3137302e3234352e3235322e302f32322d3234203d3e203631383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:7f:e5:e7:7b:e3:dc:17:a6:9e:d2:15:be:a6:7b:19:ae:fb:
0c:15:54:99:bf:2e:a5:ba:75:40:3e:61:ea:79:78:ac:31:be:
8a:8a:1d:a4:f0:de:73:3e:e4:bc:95:3d:b1:03:1d:52:a5:7c:
8e:56:e4:58:48:2e:27:cc:18:d5:6d:cb:c0:b2:7e:90:e1:14:
c1:b8:75:4f:b6:91:4d:ce:04:61:e2:29:9e:bf:92:51:3a:a8:
00:55:8d:2e:88:de:64:99:51:46:de:89:d2:98:19:4b:7b:30:
7a:cf:ae:32:39:4c:6d:bf:56:9c:90:46:45:c9:0c:fa:39:3b:
10:88:e5:44:89:58:ca:84:48:39:93:29:a8:45:46:dd:ad:6f:
cf:fa:0c:4d:e6:28:2a:b4:30:28:57:e0:ef:59:16:65:ad:28:
3f:d0:0b:69:21:b3:09:5e:e9:8a:df:b3:df:e3:a5:b8:33:d2:
ef:49:bc:13:e1:97:84:ee:60:b1:5b:c3:f0:32:f2:58:36:fd:
cf:21:d2:03:e8:d2:dd:6e:81:92:4a:b8:5e:47:ad:79:f5:69:
ba:96:2e:6f:76:8d:a7:89:f2:ad:09:4b:d0:fd:c1:45:35:67:
0d:80:1f:f9:d1:5f:ab:cf:ad:c7:cf:de:88:83:10:6d:42:92:
81:85:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:13:09 2025 by rpki-client