Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa
File: 3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa (raw, json)
Hash identifier: hTxBNdPsHdR1pRLMbwfTzlRUFGvMXwjPrS7ZVuQLTBI=
Subject key identifier: 06:A8:86:85:C1:91:59:F2:C4:97:54:A0:C0:5A:68:A9:6A:16:79:F3
Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial: 7FDDB412A3911B752DCB8FE9059E7B65EFFE4761
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa
Signing time: Thu 20 Feb 2025 11:43:53 +0000
ROA not before: Thu 20 Feb 2025 11:38:53 +0000
ROA not after: Thu 19 Feb 2026 11:43:53 +0000
asID: 263891
IP address blocks: 170.78.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:dd:b4:12:a3:91:1b:75:2d:cb:8f:e9:05:9e:7b:65:ef:fe:47:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Validity
Not Before: Feb 20 11:38:53 2025 GMT
Not After : Feb 19 11:43:53 2026 GMT
Subject: CN=06A88685C19159F2C49754A0C05A68A96A1679F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:f6:f0:92:1a:11:35:0b:72:70:42:27:32:
2f:d4:4a:db:0d:cf:6b:b5:fc:f5:c5:a4:e3:79:ea:
2b:e3:ad:0e:b8:54:00:1f:35:7d:b6:ec:ba:ee:51:
5c:00:7d:38:c3:ce:e2:dd:96:e4:03:27:13:93:8e:
68:28:4c:c5:e1:bf:cb:6d:91:eb:c3:30:d2:1a:0a:
0d:63:fa:ac:e3:66:30:aa:c9:82:05:ad:27:63:bd:
f3:9f:b4:dd:0f:a8:25:7c:4d:76:a2:c0:f9:2f:97:
ce:ee:d1:4f:36:c5:5f:d5:92:a9:8e:ff:bd:c4:31:
45:06:28:b2:93:f1:bc:f7:e3:8d:a4:f2:f7:8d:ff:
9e:c8:af:cb:eb:1f:59:f6:9e:af:94:55:80:a4:e3:
d4:9c:a3:29:85:b8:cd:2a:26:27:63:22:bc:39:8c:
91:df:b4:4f:e3:1d:23:7d:4f:87:c8:fb:02:d8:bc:
43:1e:44:4b:63:c8:22:8c:34:38:92:a9:2e:cb:06:
48:28:48:91:b3:70:5c:a1:6f:b0:b1:22:5c:ff:44:
9d:2a:41:7f:a2:c6:fe:0d:45:23:9d:f0:87:a6:7c:
08:6c:1f:88:84:ef:8d:b1:74:e5:9f:3c:86:2b:bb:
bd:71:30:f4:ca:3f:c0:34:48:0c:14:78:6a:e7:ef:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A8:86:85:C1:91:59:F2:C4:97:54:A0:C0:5A:68:A9:6A:16:79:F3
X509v3 Authority Key Identifier:
keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.161.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f0:e5:3b:dc:2b:14:91:3e:b5:07:20:eb:8a:f9:66:3d:8c:
f4:3a:f8:e1:0f:d1:cf:2f:0f:9d:7a:44:05:48:aa:f1:94:43:
05:34:39:52:40:92:30:45:d6:2a:fa:bb:b5:71:4a:52:4f:17:
3e:6b:d4:b0:f7:01:5e:75:41:10:e5:eb:1d:30:16:64:3c:3f:
27:ae:fd:ec:ec:84:8e:22:b3:75:d5:61:12:05:8d:f9:65:17:
aa:c4:31:43:e6:14:30:b0:29:c3:91:78:22:c1:e9:7d:37:94:
87:07:cb:8e:d1:1d:ab:a9:9c:5c:b8:74:ee:19:78:45:c4:d9:
9c:a1:58:3c:95:52:33:fb:98:39:f2:09:4a:60:ac:b0:a9:24:
c5:09:1a:a3:aa:cd:7c:b1:10:5a:16:3b:9b:d3:50:40:15:3f:
fe:09:10:2c:e4:cc:31:e9:f9:73:78:47:94:e3:40:f5:e7:8f:
d6:a7:8d:10:11:a5:70:f2:36:b4:1b:39:85:d3:d3:16:75:b4:
65:84:e2:b6:74:3e:49:bc:03:19:5f:3b:dd:61:32:16:d3:95:
eb:ca:24:3e:39:d7:e7:6b:9d:56:45:5b:d9:6a:5a:a6:30:0e:
bf:4f:c9:7b:e6:59:d0:51:c2:a6:89:49:b9:32:0e:7d:db:c7:
c9:f5:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:24 2025 by rpki-client