Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3232203d3e20323633393133.roa
File: 3137302e3233312e3231362e302f32322d3232203d3e20323633393133.roa (raw, json)
Hash identifier: 5YL6ZqWVWz8m6UXwZRhM5/FZvqcBYc445O0MKvRfXfQ=
Subject key identifier: D1:A2:21:E2:EF:C9:33:2B:72:6F:E3:9E:0B:9D:98:F2:43:D7:9E:B0
Certificate issuer: /CN=A1C473D437CEBD170F723D345D2967666A7D2C89
Certificate serial: 7356F9B279AD96504183BD90F430B08804429BAE
Authority key identifier: A1:C4:73:D4:37:CE:BD:17:0F:72:3D:34:5D:29:67:66:6A:7D:2C:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C473D437CEBD170F723D345D2967666A7D2C89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3232203d3e20323633393133.roa
Signing time: Thu 02 Jan 2025 12:27:11 +0000
ROA not before: Thu 02 Jan 2025 12:22:11 +0000
ROA not after: Thu 01 Jan 2026 12:27:11 +0000
asID: 263913
IP address blocks: 170.231.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:56:f9:b2:79:ad:96:50:41:83:bd:90:f4:30:b0:88:04:42:9b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1C473D437CEBD170F723D345D2967666A7D2C89
Validity
Not Before: Jan 2 12:22:11 2025 GMT
Not After : Jan 1 12:27:11 2026 GMT
Subject: CN=D1A221E2EFC9332B726FE39E0B9D98F243D79EB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:f8:b9:11:48:02:3f:cf:99:e6:22:40:13:
2d:8c:df:8f:3d:3d:3f:c0:53:9a:07:fc:6d:65:74:
b9:1a:d1:79:fb:8f:33:e8:d4:ba:79:2e:bc:de:2b:
1d:9b:4f:bf:8d:7e:90:a5:26:6c:11:80:0e:9a:11:
47:55:e0:d6:29:81:04:15:98:36:5c:55:4b:e3:40:
2b:6c:12:c6:72:01:dd:08:49:a7:9a:c2:d7:88:13:
ab:3c:01:37:b2:71:eb:d6:e1:f9:35:de:10:f0:50:
7a:b9:46:82:3a:c3:3c:d3:8d:fb:fc:6d:cf:6d:b5:
de:cc:13:82:00:b4:9d:52:b2:5c:03:a8:1b:93:c1:
e1:fe:13:d5:fb:c2:ce:aa:7f:7f:51:c8:aa:9c:d1:
b8:dc:66:b0:44:95:a2:af:21:55:e2:c8:c9:c3:9a:
59:49:74:8e:7c:9c:fc:0a:f5:6e:9d:0a:01:f1:7a:
66:a6:91:d3:84:3d:a0:9d:2d:de:e9:9f:2f:3d:de:
f1:ed:29:71:a1:f3:8c:00:b9:8c:6a:95:4f:b2:5d:
26:52:16:81:e4:3c:14:ef:8e:81:86:e9:cc:c6:4f:
32:84:3e:8c:21:c2:7b:ab:38:c1:9d:78:6b:79:93:
af:4e:e8:03:bb:d1:47:a3:64:32:50:a3:07:4d:fe:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:21:E2:EF:C9:33:2B:72:6F:E3:9E:0B:9D:98:F2:43:D7:9E:B0
X509v3 Authority Key Identifier:
keyid:A1:C4:73:D4:37:CE:BD:17:0F:72:3D:34:5D:29:67:66:6A:7D:2C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/A1C473D437CEBD170F723D345D2967666A7D2C89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C473D437CEBD170F723D345D2967666A7D2C89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3232203d3e20323633393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.216.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:33:47:93:48:3e:e3:a6:37:40:68:5b:37:99:75:13:45:1c:
60:c1:02:a2:fb:8f:7d:76:7e:23:75:ac:61:4e:58:3a:d5:ac:
4f:97:9b:2c:8f:06:8e:bc:03:a1:a3:a9:8d:64:2b:dc:dd:5d:
77:8c:01:27:96:fc:a4:54:fa:cf:a3:6f:2c:af:18:c5:d2:8d:
9e:5c:ea:c0:a9:e1:38:de:6f:60:12:bc:54:a7:53:d1:73:db:
41:ae:b3:3d:65:ae:74:67:5b:54:f9:57:a0:7f:1c:89:58:39:
bf:67:8a:73:ef:9b:7a:bd:7b:85:6d:aa:5b:2b:6d:0a:a0:f2:
84:b0:09:eb:28:ff:f4:1f:1e:5d:25:64:35:4f:b7:dd:e4:fa:
35:1c:85:43:12:4e:67:13:bb:ea:7b:cc:96:d9:b3:47:76:1a:
cd:22:a7:e9:17:ae:d4:6d:85:47:60:1c:6d:fd:73:97:39:6c:
e5:b9:d2:3a:7f:8b:bd:d5:ab:65:7f:34:75:55:43:7f:e9:e8:
1c:3d:3f:19:c0:e1:f0:7d:e4:30:4b:b7:eb:0e:fa:88:0f:72:
d6:4c:b7:b3:e9:16:66:d1:88:17:75:5c:ef:05:f5:eb:d7:b1:
e7:5e:b0:c7:5d:fb:fa:cb:50:02:2a:53:d6:03:1a:00:c0:d3:
4f:10:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:31 2025 by rpki-client