Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34322e302f32342d3234203d3e20323633363239.roa
File: 3137302e302e34322e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier: ZYBoyTsxTXsJwqJjMzKcwy325LxBZ+AhSeKUJFecDBU=
Subject key identifier: 91:94:A6:31:BD:71:8B:33:93:CA:9A:2B:42:51:BA:03:09:59:46:DD
Certificate issuer: /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial: 0CE47AE5663E0EFD8404287C7CCE75A51358F4C9
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34322e302f32342d3234203d3e20323633363239.roa
Signing time: Mon 17 Mar 2025 17:57:34 +0000
ROA not before: Mon 17 Mar 2025 17:52:34 +0000
ROA not after: Mon 16 Mar 2026 17:57:34 +0000
asID: 263629
IP address blocks: 170.0.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e4:7a:e5:66:3e:0e:fd:84:04:28:7c:7c:ce:75:a5:13:58:f4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Validity
Not Before: Mar 17 17:52:34 2025 GMT
Not After : Mar 16 17:57:34 2026 GMT
Subject: CN=9194A631BD718B3393CA9A2B4251BA03095946DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:25:2c:3c:c2:62:52:72:0f:e9:df:8d:b0:
a3:72:aa:ea:18:6d:54:b7:9e:5d:d1:fd:ad:a9:43:
6f:7a:9d:39:92:a2:df:72:38:4d:92:81:3d:16:59:
29:09:51:d6:34:f2:5e:03:63:00:23:65:8d:bb:4a:
2c:d1:14:f8:63:de:2f:d0:db:20:13:b3:b3:90:0a:
dd:30:8c:c7:c1:28:22:85:80:70:bc:57:72:6c:11:
97:5f:46:50:ff:e4:8f:03:28:4b:13:6f:63:4a:80:
82:50:bc:f4:94:0c:f1:a7:45:78:11:ea:16:d3:26:
0f:56:f6:08:6f:0b:53:b7:45:bb:82:49:78:d1:59:
17:45:c8:f3:df:01:ba:04:29:22:a3:49:dd:52:66:
75:af:a2:a5:45:f7:90:db:1d:84:3e:22:be:df:13:
da:49:e1:a6:9c:c0:62:f3:d2:a7:bd:0e:b7:bc:52:
dc:c2:36:66:c7:50:80:1f:8b:0b:bc:67:a7:e4:7b:
0c:9d:8c:80:3f:93:aa:39:29:4f:b6:90:1a:06:31:
70:14:7a:47:d6:ac:19:bf:1f:5a:45:d2:30:29:3d:
00:bd:06:09:c3:7c:99:71:3a:fb:26:93:e5:b1:62:
65:f0:c1:2d:e7:2a:9c:9b:ce:fb:41:21:af:d8:93:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:94:A6:31:BD:71:8B:33:93:CA:9A:2B:42:51:BA:03:09:59:46:DD
X509v3 Authority Key Identifier:
keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34322e302f32342d3234203d3e20323633363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8a:cd:bc:a3:bb:e1:4e:1b:fc:eb:6c:f1:f3:05:90:45:a9:
70:b3:9b:c8:fe:bc:87:cb:92:53:11:3f:d5:23:77:61:5f:9f:
44:70:48:2e:4d:70:d3:fd:69:65:72:a9:46:3d:59:58:a1:39:
a3:a8:a6:68:92:b3:5f:5d:dc:2e:88:6f:d8:83:5a:00:34:f1:
8a:6a:66:d8:5a:40:6e:5f:c2:29:1e:67:ce:91:af:25:74:3a:
26:12:1f:9b:40:da:7b:bd:f6:85:ea:2f:18:2b:25:12:44:36:
bc:57:c5:b4:76:db:a0:dc:ec:7b:5e:fd:23:fd:50:89:43:ac:
b8:17:5d:b4:f9:53:ea:2e:1f:fe:56:5a:ba:7f:33:f6:0e:f4:
ad:65:43:60:c9:7a:63:23:8b:7f:7a:8f:66:d3:e9:7d:2f:ff:
d5:78:54:3f:41:6b:fa:5b:f6:8c:a8:95:40:b5:c8:03:18:08:
72:04:b3:24:45:22:44:4d:0c:48:cc:83:2d:20:e9:64:02:fa:
45:32:77:26:31:ad:f0:bc:e2:0f:1c:5a:7e:8f:0d:ed:c3:2e:
4a:f1:88:6d:01:17:63:ec:32:22:51:87:36:27:df:2e:2d:4a:
8d:bf:8d:1c:dd:fb:5b:a3:8b:b4:d4:4e:a2:ed:b3:9f:a8:93:
90:76:4f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:24 2025 by rpki-client