Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa
File: 3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa (raw, json)
Hash identifier: YSeBPg2lex9h3YRA+gBpl4SonB4GrQPdQMUbhsffoPg=
Subject key identifier: BF:F2:07:C5:54:2E:00:AA:A2:09:08:60:F2:4D:4D:B2:F4:BC:A9:92
Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial: 247F8D4D6D324AC2C0F9F6BA681A859A4944A7E9
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa
Signing time: Thu 20 Feb 2025 11:43:51 +0000
ROA not before: Thu 20 Feb 2025 11:38:51 +0000
ROA not after: Thu 19 Feb 2026 11:43:51 +0000
asID: 263891
IP address blocks: 170.78.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:7f:8d:4d:6d:32:4a:c2:c0:f9:f6:ba:68:1a:85:9a:49:44:a7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Validity
Not Before: Feb 20 11:38:51 2025 GMT
Not After : Feb 19 11:43:51 2026 GMT
Subject: CN=BFF207C5542E00AAA2090860F24D4DB2F4BCA992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:ac:13:e8:b4:38:f9:8c:4a:71:f2:19:a0:
50:43:91:57:9e:87:81:6d:d5:ef:05:a3:8b:f5:d5:
6d:0c:2a:43:a0:16:14:95:cd:de:1c:0c:30:96:62:
0c:ab:13:88:70:04:5a:26:55:40:a9:ba:08:cc:80:
d8:cc:60:43:ff:bf:e1:bf:03:a7:5d:87:c0:ed:f0:
33:56:02:f1:36:2e:2c:4c:9e:81:86:52:b9:1a:04:
46:b3:75:b7:70:84:7c:d4:32:8c:e0:04:15:f3:75:
6a:b1:22:42:a9:97:a3:d0:2f:93:e3:74:c7:17:86:
59:08:af:a4:7c:cb:a9:3a:44:50:fb:bd:e7:7e:0f:
aa:02:32:dc:d7:d3:cb:3d:89:e9:14:99:20:c9:97:
68:93:5a:8f:7f:31:a8:1b:01:44:e0:34:c0:73:17:
ff:94:94:9e:e3:a0:cf:ae:7e:1e:4a:d4:c8:86:8b:
ef:7b:c5:f4:05:84:a8:48:d3:d4:c2:5a:55:cb:4b:
83:99:1e:0e:d1:7b:53:91:cc:07:b3:89:e9:f2:59:
c2:2d:df:6d:20:cb:ff:f4:4b:23:7a:19:14:44:a9:
82:f1:96:de:47:7b:1e:b6:fc:ac:13:90:d1:0e:64:
6a:5b:74:05:ca:da:a5:7a:dd:d7:57:15:0c:7f:94:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:07:C5:54:2E:00:AA:A2:09:08:60:F2:4D:4D:B2:F4:BC:A9:92
X509v3 Authority Key Identifier:
keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ee:71:b0:8f:58:2e:ec:09:b0:5d:1b:81:98:49:0e:80:62:
0c:ac:3d:81:70:76:25:20:6a:a8:ab:ed:ca:08:8f:22:54:b3:
d9:8f:e4:c3:92:f0:96:1b:84:fa:d6:f6:90:77:4d:a8:81:0e:
9c:5f:8f:29:7a:04:ed:6d:4e:60:22:2a:b4:33:32:c4:95:67:
5b:2a:62:7e:54:f0:c2:96:8d:bb:0f:54:8b:91:db:d6:59:2b:
01:2c:4e:b2:9a:94:d4:23:95:ec:0d:2d:69:ed:f6:6d:49:12:
6f:1d:17:97:86:61:30:da:69:04:87:ef:f3:96:30:a5:fb:ec:
c3:32:41:d1:bc:6b:ca:d7:61:45:fc:a3:2d:b5:da:f9:6c:cc:
21:73:fd:77:87:c2:69:fa:cd:c2:74:56:43:3e:ed:a0:ab:7c:
91:a2:9f:13:3d:76:66:e7:43:1b:c2:16:97:3b:41:9b:85:71:
f7:09:91:32:1e:88:e3:03:8c:5c:c2:6b:f9:87:85:b4:07:dc:
06:64:d3:5b:61:7b:74:fd:82:03:23:96:fa:77:be:ad:98:b8:
1d:16:e2:25:40:f0:85:43:08:40:69:92:fe:b5:59:a9:a4:6b:
75:d7:d1:e6:33:95:02:68:d1:ac:fc:e2:d4:3c:20:8b:4a:a3:
a3:a9:04:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:43:00 2025 by rpki-client