Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa
File: 3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa (raw, json)
Hash identifier: nIftzw3+iZpcDi7LXAU8XgDFUdrkMrxxET01lz87b78=
Subject key identifier: C4:BE:EC:AB:AE:2C:EA:D8:A8:D7:A8:72:BF:AC:8A:AF:AA:BE:2D:58
Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial: 41D62AC6D185AAE7566A6EF99B7590C468FF9B24
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa
Signing time: Thu 20 Feb 2025 11:43:53 +0000
ROA not before: Thu 20 Feb 2025 11:38:53 +0000
ROA not after: Thu 19 Feb 2026 11:43:53 +0000
asID: 263891
IP address blocks: 170.78.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d6:2a:c6:d1:85:aa:e7:56:6a:6e:f9:9b:75:90:c4:68:ff:9b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Validity
Not Before: Feb 20 11:38:53 2025 GMT
Not After : Feb 19 11:43:53 2026 GMT
Subject: CN=C4BEECABAE2CEAD8A8D7A872BFAC8AAFAABE2D58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:b2:05:93:ae:6b:8a:bf:e8:b3:57:f0:a0:
ff:78:e6:52:98:ba:b4:21:fb:41:bb:47:4f:db:7c:
29:30:1d:7d:b2:14:ae:c4:28:22:c7:cb:1d:57:28:
6f:af:ba:25:5d:66:e0:53:1a:4b:22:32:a7:5f:c9:
3e:e4:5f:93:b9:0e:c3:59:cc:47:24:05:64:29:92:
e1:03:5c:e0:54:38:73:1e:a7:b3:33:f5:47:67:25:
30:8e:9c:e4:36:21:0c:4e:5f:f9:77:6d:3b:b0:00:
aa:3d:e0:70:16:3b:33:0d:f0:0b:5c:60:0c:42:c9:
91:1e:57:93:61:58:41:0c:26:01:1e:ff:c4:e4:51:
9e:e7:ff:3a:4e:5a:82:68:0c:0f:cc:15:78:2c:3c:
7c:48:54:b6:22:9c:e0:b9:11:f5:cd:f7:17:5e:46:
e9:bd:51:24:dc:b5:1f:f0:08:4b:e7:8a:25:de:de:
e7:23:b7:e1:f3:43:86:53:4d:2e:b8:31:a3:b1:fb:
f3:6d:f5:e6:7e:03:cf:b1:25:93:8c:05:20:b5:94:
c3:bf:dd:db:12:cf:c6:60:dc:4f:37:c3:47:66:4b:
78:af:df:d8:cf:4a:f8:17:8f:ec:d5:02:93:0e:79:
d6:52:65:c4:7e:66:46:e4:03:15:ec:cf:29:a6:7b:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:EC:AB:AE:2C:EA:D8:A8:D7:A8:72:BF:AC:8A:AF:AA:BE:2D:58
X509v3 Authority Key Identifier:
keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.160.0/23
Signature Algorithm: sha256WithRSAEncryption
51:67:85:54:1e:2c:65:df:e4:d5:62:04:75:6e:46:39:e5:37:
d7:32:cf:96:28:eb:60:61:31:25:aa:b9:b8:84:01:22:69:4a:
26:18:e3:73:52:b6:5f:6e:87:01:3b:6f:75:8f:c4:1f:5e:ca:
9c:44:ed:ed:75:16:9f:4f:61:84:44:4e:36:b0:1b:c8:0d:00:
13:43:97:f7:cd:24:91:c7:d7:f9:13:19:39:8a:48:bf:7b:ef:
68:3c:be:00:35:4e:0f:3b:fb:4c:39:b4:a4:86:94:d0:03:e0:
bf:f7:0b:75:a9:e9:50:e0:7b:d5:e5:2c:85:79:5d:54:16:6f:
18:a7:74:6d:6e:c4:b2:d5:ce:62:6e:9e:97:f3:81:91:05:80:
30:ce:dd:9e:24:b2:89:ae:c6:88:2b:0c:40:41:62:12:90:a0:
0b:d4:f2:fe:71:14:32:f7:c5:9c:d4:a7:63:b8:85:d8:1f:a5:
eb:87:d4:e1:eb:a0:55:de:2d:1d:8a:50:70:a2:f8:9f:4b:7e:
7f:83:7c:4c:66:cb:7e:1d:8c:26:a6:69:e2:48:41:56:2b:f2:
da:24:c6:af:f0:31:b1:05:6a:d4:2b:6e:c8:4a:c5:fc:59:27:
33:86:3e:85:a4:cf:ab:08:5b:28:64:fa:e1:d9:2d:51:1b:dd:
88:c0:6a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:38:49 2025 by rpki-client