Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34302e302f32342d3234203d3e20323633363239.roa
File: 3137302e302e34302e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier: ywcAKtbI4SyKDDzDDyc5XquPW24/JlSI3CfOUVnRwhE=
Subject key identifier: FB:E9:1A:9E:94:40:53:3B:A1:9A:8E:87:D2:BD:23:C5:F9:0C:92:73
Certificate issuer: /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial: 0DED30D025D148026EFBBCE6E775542853F992F5
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34302e302f32342d3234203d3e20323633363239.roa
Signing time: Mon 17 Mar 2025 17:57:36 +0000
ROA not before: Mon 17 Mar 2025 17:52:36 +0000
ROA not after: Mon 16 Mar 2026 17:57:36 +0000
asID: 263629
IP address blocks: 170.0.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ed:30:d0:25:d1:48:02:6e:fb:bc:e6:e7:75:54:28:53:f9:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Validity
Not Before: Mar 17 17:52:36 2025 GMT
Not After : Mar 16 17:57:36 2026 GMT
Subject: CN=FBE91A9E9440533BA19A8E87D2BD23C5F90C9273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:39:8c:ee:e2:29:e5:88:a0:62:e2:cc:55:
97:6c:ce:f7:6a:42:83:63:0f:ea:75:c0:6a:ca:9a:
cf:51:52:09:de:f4:00:24:81:5c:0b:1e:95:21:b6:
fc:e9:91:e9:56:51:1b:41:27:0a:68:c8:11:d0:4d:
17:77:5f:07:9f:b3:f1:ec:5c:7f:28:cd:f5:77:65:
31:f3:86:c7:6d:4b:83:8d:92:f6:08:88:fc:4c:c1:
89:37:e7:c0:f7:e2:72:e3:e7:8a:7f:71:8a:31:f2:
97:6f:6b:d6:c5:36:19:24:4b:eb:94:f4:0b:71:fb:
45:14:20:54:5f:30:60:41:25:8b:52:9c:84:c3:86:
ca:3f:4c:75:07:81:38:4d:01:57:75:4d:f1:46:87:
e9:49:e8:56:2e:a1:b5:20:a4:46:a4:80:fb:65:e7:
c5:61:c7:aa:05:75:1a:42:a0:07:d5:a3:9c:20:b1:
fb:aa:51:bb:95:24:23:2c:7b:30:c9:28:31:ed:45:
34:0d:66:45:1b:ed:2a:7d:3b:ec:7c:f0:6b:9e:6b:
08:58:38:4c:2d:58:38:2c:f6:ba:4e:e6:a0:40:f4:
59:27:b5:4b:c8:5f:1e:62:9e:0b:ea:00:46:d1:62:
c2:8e:72:e5:52:1b:a0:78:17:bd:a1:b0:6f:e1:03:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E9:1A:9E:94:40:53:3B:A1:9A:8E:87:D2:BD:23:C5:F9:0C:92:73
X509v3 Authority Key Identifier:
keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34302e302f32342d3234203d3e20323633363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8e:ea:b1:e1:88:ac:fb:fa:43:ee:76:18:42:d3:d7:7a:d8:
60:be:60:bc:26:bc:1c:c4:23:9f:a2:01:9b:cf:32:ee:6e:d3:
14:86:7b:81:17:ae:b0:9a:4e:41:31:af:0e:6a:34:77:a7:60:
ce:22:61:59:78:92:71:9d:f2:6b:52:aa:f7:0f:ac:f7:78:9e:
b8:57:4a:32:6c:45:2e:0d:55:39:2f:b6:e8:ef:46:7a:6f:ed:
88:03:d7:35:9a:66:75:94:aa:ac:63:a7:bc:d9:bc:db:77:5c:
31:9c:07:b7:5f:23:ed:a9:00:42:76:94:46:c8:7b:18:d6:0c:
e5:e5:cc:cc:8f:0c:9c:36:26:ce:96:5d:ce:da:f5:03:8b:54:
3c:43:c1:af:52:db:a2:a2:5d:9f:4e:67:df:40:18:96:6c:ae:
8e:e4:59:e0:f4:11:93:b1:a7:18:5c:98:d7:9e:73:43:6b:d6:
a5:7e:b9:86:a3:59:7e:d2:de:c5:d9:9e:d9:e9:4c:6c:c9:98:
2f:f4:56:b4:67:cb:2b:e7:f7:13:21:90:e6:57:01:b7:e1:eb:
f4:49:2e:00:50:63:12:ba:1d:fd:66:6c:97:79:18:04:53:87:
fc:46:83:2a:59:60:50:0b:af:1a:95:ca:7a:83:ff:d2:3e:f0:
cc:ce:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:38:21 2025 by rpki-client