Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/3137302e38312e34302e302f32322d3234203d3e20323636343030.roa
File: 3137302e38312e34302e302f32322d3234203d3e20323636343030.roa (raw, json)
Hash identifier: fnk6G+39Qn8k6OBmu2nwg3cM52nnrkQXQ11Kyh5Qn1o=
Subject key identifier: 6E:59:A3:9D:C4:7C:5E:B8:52:43:DC:FB:41:25:45:A4:F7:A0:49:FB
Certificate issuer: /CN=A653D5055FC338B089E2C732382682788F082F11
Certificate serial: 1BE56DFF8BA3B6A063BE571C9E5199988A7B0C53
Authority key identifier: A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/3137302e38312e34302e302f32322d3234203d3e20323636343030.roa
Signing time: Thu 06 Mar 2025 10:00:32 +0000
ROA not before: Thu 06 Mar 2025 09:55:32 +0000
ROA not after: Thu 05 Mar 2026 10:00:32 +0000
asID: 266400
IP address blocks: 170.81.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e5:6d:ff:8b:a3:b6:a0:63:be:57:1c:9e:51:99:98:8a:7b:0c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A653D5055FC338B089E2C732382682788F082F11
Validity
Not Before: Mar 6 09:55:32 2025 GMT
Not After : Mar 5 10:00:32 2026 GMT
Subject: CN=6E59A39DC47C5EB85243DCFB412545A4F7A049FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:26:88:6b:c3:b7:fa:08:b8:c9:01:76:8c:
b1:e0:5e:0f:68:ac:41:a9:a7:30:15:17:98:c4:98:
27:64:f1:3b:bf:8a:19:34:8f:4d:29:3b:ef:eb:6c:
f4:d3:aa:ee:b4:79:47:d0:53:9a:13:83:8a:f6:16:
df:dd:d7:17:4d:dc:b1:40:2f:37:91:20:4c:1e:c5:
c4:38:6c:0d:1b:9f:c9:34:2f:c4:3a:23:fe:b0:15:
ff:a2:86:af:80:50:26:42:b6:95:7f:27:cc:ae:34:
cb:fd:c2:bb:76:51:11:de:79:f7:5d:51:d0:bc:35:
76:96:a9:8f:fa:81:06:ab:8f:91:d5:4e:81:ed:10:
81:dc:a1:4f:b6:c7:ed:3d:2c:0f:a1:3f:5d:47:1e:
6b:e6:d5:62:13:98:b1:3d:43:4a:b3:6a:66:69:b2:
05:c0:07:f3:30:a6:cb:3a:38:5e:85:58:6e:d2:cf:
50:0e:10:16:00:12:b8:1e:ab:20:fc:07:de:09:6e:
6d:0b:5e:f4:4d:90:81:02:42:12:01:58:a7:03:ab:
75:ba:31:da:62:f5:90:12:36:ac:3d:56:b6:8a:e8:
e6:3c:28:fd:f9:6d:ad:3a:c1:b5:f8:a5:0c:c8:39:
06:a3:d2:e2:ea:0a:3d:1b:1f:6f:60:53:0a:12:02:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:59:A3:9D:C4:7C:5E:B8:52:43:DC:FB:41:25:45:A4:F7:A0:49:FB
X509v3 Authority Key Identifier:
keyid:A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/3137302e38312e34302e302f32322d3234203d3e20323636343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.40.0/22
Signature Algorithm: sha256WithRSAEncryption
68:47:72:24:3f:47:1b:81:be:65:82:8c:58:5b:35:60:c1:9d:
f3:e9:ea:c1:aa:23:30:a9:0b:56:3d:41:22:35:c6:7f:90:9f:
cd:e8:2a:0b:10:db:19:b8:18:d7:5f:f1:f3:00:cb:22:a0:ab:
66:0b:ae:69:94:e4:39:e8:40:3b:38:08:f7:6d:9f:6f:df:20:
a9:41:53:3d:b8:9b:49:e7:1f:a7:92:93:df:8b:c9:9e:11:dc:
8d:ab:a3:b4:85:8f:e1:7d:32:a3:cf:fa:96:da:de:9c:f1:aa:
d9:dc:b7:88:e8:67:f3:0a:f7:58:10:98:15:ec:f4:60:52:b4:
2f:5c:7d:93:73:b0:63:7f:05:bb:5a:b2:61:54:07:47:f3:aa:
dd:ff:ce:62:02:3d:a8:bd:92:ea:c8:c8:e0:2e:c5:f8:a7:ac:
6b:4f:68:0c:7e:fa:63:d7:2b:62:e2:c9:69:41:cb:f9:df:fc:
c3:b4:30:a7:b6:ca:a6:ca:39:9c:0b:83:36:d4:b6:ea:1e:1d:
27:92:0b:d4:2a:91:7f:3d:ee:fd:89:d9:b3:74:84:ad:3a:dd:
01:99:6a:79:3f:4d:31:0f:5c:e9:ba:58:bf:45:9b:32:d4:16:
90:26:36:b8:be:d3:74:e6:14:d0:3b:2a:7d:62:81:8b:0e:5b:
42:58:97:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:41:52 2025 by rpki-client