Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa
File: 3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa (raw, json)
Hash identifier: 2OZaK3XVHDYJW95YQoRuXz+veAnFcZdofQ9N3sdy+d4=
Subject key identifier: D5:16:C1:80:18:DB:37:99:88:D5:21:C4:DC:09:0D:C3:39:7B:E0:48
Certificate issuer: /CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F
Certificate serial: 1764E8F1F45FB0CC032374F2F1542C08F1015C63
Authority key identifier: C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa
Signing time: Wed 05 Feb 2025 12:05:29 +0000
ROA not before: Wed 05 Feb 2025 12:00:29 +0000
ROA not after: Wed 04 Feb 2026 12:05:29 +0000
asID: 266476
IP address blocks: 170.83.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:64:e8:f1:f4:5f:b0:cc:03:23:74:f2:f1:54:2c:08:f1:01:5c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F
Validity
Not Before: Feb 5 12:00:29 2025 GMT
Not After : Feb 4 12:05:29 2026 GMT
Subject: CN=D516C18018DB379988D521C4DC090DC3397BE048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:04:ae:72:db:aa:7c:ae:0d:c6:05:d3:2d:31:
69:ac:c5:24:f6:da:4b:1d:e8:2d:77:44:99:a0:24:
20:60:5d:fe:05:21:6d:94:42:76:0e:cf:f5:5b:86:
c4:91:4a:be:9e:c9:6e:1e:21:e9:3f:a7:a0:ff:24:
e8:f7:a5:9f:08:75:1f:58:e3:81:61:4a:1f:f1:6f:
36:ec:ba:b0:4f:6b:d4:49:dc:6a:7d:fa:c5:31:47:
ba:3c:39:1d:4e:ce:1d:c1:53:3b:6b:73:7f:71:ed:
46:f8:d6:1e:bc:ce:a3:69:07:05:a6:f7:39:28:46:
05:92:2b:b7:99:71:db:d7:83:2a:c0:05:9e:fd:43:
37:0e:03:8f:d3:97:0c:98:02:cd:c6:ed:30:db:ae:
ff:9d:b2:cd:a4:1d:86:cf:04:ea:24:d7:c5:7e:15:
b4:70:10:2a:ed:2c:98:b2:54:05:9a:f9:59:f7:c9:
9a:29:ca:cf:5e:69:64:93:4a:1d:2d:42:92:bc:03:
ec:50:cd:cc:35:0e:81:5a:69:5d:80:31:c7:75:27:
c8:ef:61:19:37:cc:bb:41:a6:d6:11:85:31:81:5d:
b4:9e:5d:97:dc:f5:6a:ad:da:78:31:72:c0:a8:bb:
45:02:82:4f:6d:ab:9e:71:00:e5:ef:03:01:ab:1f:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:16:C1:80:18:DB:37:99:88:D5:21:C4:DC:09:0D:C3:39:7B:E0:48
X509v3 Authority Key Identifier:
keyid:C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.196.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:e4:de:0e:42:e8:29:07:9c:f9:d2:62:32:24:4d:b8:fa:99:
5d:4b:73:33:b9:63:77:fb:3c:f6:0d:45:37:ea:60:c4:fc:85:
f8:99:ad:de:30:67:1a:b1:31:73:ab:e8:c8:38:da:92:8e:d0:
a1:d7:c1:eb:04:68:07:e4:4d:06:3e:c2:7b:31:88:e1:28:da:
d8:bf:d9:6d:89:4a:be:f1:eb:61:03:c7:2e:a4:1a:9d:9b:40:
94:36:7c:80:1b:1d:59:0c:6e:3e:17:09:6b:a6:5c:13:37:c6:
47:78:3e:4d:ce:4e:e8:bf:23:37:ee:a0:61:14:eb:b2:db:da:
9a:61:06:4c:ee:65:5b:33:9f:66:23:1f:d6:a1:ba:f9:d0:e6:
e9:01:87:0b:2e:3d:f7:bc:fe:b9:0a:ba:d4:58:b0:46:5e:05:
24:31:5f:a2:ef:06:6d:2a:25:f4:7f:21:b3:63:37:20:5a:a1:
79:63:4f:c7:77:89:9e:6e:de:ef:74:45:40:6a:8f:00:9e:08:
d0:88:d4:39:d7:1b:71:d3:1d:43:80:fc:d8:c7:97:db:57:9a:
5c:86:a5:bb:ad:a5:fb:6b:74:e0:33:3a:8f:1c:39:b0:92:b8:
65:fc:15:d9:08:93:30:f1:3e:5e:45:80:e0:5b:10:3d:0b:c9:
90:3c:d5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:29:29 2025 by rpki-client