Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa
File: 3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa (raw, json)
Hash identifier: j7yRviWUtBR47diRRZQSwOhBel2iKKRcdCzb2LcKh5U=
Subject key identifier: 1E:59:10:FB:BB:E8:B5:44:3C:1B:21:93:D8:36:92:BC:DB:4B:0C:CD
Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial: 4E0F5F6F01B8AE67B4938C55238A218F0357BAB8
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa
Signing time: Thu 20 Feb 2025 11:43:50 +0000
ROA not before: Thu 20 Feb 2025 11:38:50 +0000
ROA not after: Thu 19 Feb 2026 11:43:50 +0000
asID: 263891
IP address blocks: 170.78.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:0f:5f:6f:01:b8:ae:67:b4:93:8c:55:23:8a:21:8f:03:57:ba:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Validity
Not Before: Feb 20 11:38:50 2025 GMT
Not After : Feb 19 11:43:50 2026 GMT
Subject: CN=1E5910FBBBE8B5443C1B2193D83692BCDB4B0CCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:76:d8:ad:b9:62:bb:f1:e7:7a:1a:41:f6:
10:2b:0e:8f:8d:4a:3a:6c:bc:c1:93:6e:df:89:14:
9c:f1:c2:77:ec:d0:6a:bb:97:22:59:ac:a9:34:7d:
ae:f6:dd:7f:0a:b3:23:c0:ff:97:55:1e:3c:33:62:
5d:c3:e6:c8:53:ca:ce:c2:02:53:97:65:68:72:55:
04:78:a5:f5:38:3b:a8:cb:27:f0:28:ee:2f:a2:e3:
e3:bb:a0:88:90:04:9c:87:e0:24:3d:1b:a1:83:49:
e7:b2:55:72:6d:bf:e8:a7:f8:ce:eb:c6:44:63:4b:
31:a1:e0:f2:5b:d8:31:c0:e0:8f:6b:ea:43:97:27:
b2:cf:af:a2:24:67:44:e2:6c:06:b4:d2:7d:47:25:
07:c9:39:75:e0:b9:31:82:18:83:0e:8d:9b:ea:54:
85:73:e2:80:7f:a5:72:94:35:34:3e:88:e1:97:4d:
aa:a3:48:79:3c:13:77:f9:83:f4:03:e3:09:ac:f7:
11:a7:c7:6d:4a:df:84:f0:ae:b4:88:39:f6:62:73:
4b:c3:18:c3:37:e3:75:31:6a:71:bc:da:0f:b2:3a:
07:15:0c:0f:19:f5:b1:2b:79:b5:eb:ef:69:78:f6:
3c:75:69:3a:f5:d9:2b:b5:c4:02:82:2f:05:d9:3c:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:59:10:FB:BB:E8:B5:44:3C:1B:21:93:D8:36:92:BC:DB:4B:0C:CD
X509v3 Authority Key Identifier:
keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.162.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:ba:b6:c6:87:42:a4:a4:f9:d4:c6:5e:b7:36:9f:45:5a:36:
50:48:b7:6f:08:e1:6a:3e:aa:ee:29:59:a2:3c:3a:70:08:a4:
ea:b9:d7:05:0f:1a:45:1e:6c:1d:cd:5d:82:20:16:25:69:16:
1e:a2:ac:9a:12:c9:e7:92:d5:8c:d1:48:9a:fe:da:9f:8a:ac:
79:f9:ba:05:1d:e6:fb:3d:6e:5b:53:67:95:8c:41:00:fc:fc:
d3:95:d2:e3:d2:69:33:f5:62:a0:3d:77:bd:15:b4:6f:03:37:
15:2b:16:65:5d:97:a2:f5:fd:30:56:1d:d3:e1:89:d1:22:09:
af:0f:18:24:a1:6c:2d:3f:e7:c9:68:e5:be:15:c4:da:b1:83:
d9:37:33:f6:51:65:45:e7:a2:0a:bf:8b:26:98:b8:c0:22:b1:
ae:a2:a1:ec:05:c1:d5:c4:71:56:cc:6a:02:1e:b7:3a:bc:76:
d3:39:77:dd:59:0f:04:cc:1e:cc:6c:89:be:80:fb:8a:b5:2a:
eb:a2:bd:31:cd:ef:f0:ff:a8:6d:d4:ad:94:8a:c5:33:4f:1b:
03:dd:c7:47:2b:e0:78:ac:8a:63:44:0d:14:fd:9b:56:e5:77:
65:cc:df:a6:4a:df:03:a8:96:42:37:b2:53:8f:75:ba:35:25:
8b:91:d6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:59:34 2025 by rpki-client