Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231382e302f32332d3233203d3e20323633393133.roa
File: 3137302e3233312e3231382e302f32332d3233203d3e20323633393133.roa (raw, json)
Hash identifier: g7zRwvOR010hlEDewsjjQmkj0ltTeFhCH1yG7WltYnc=
Subject key identifier: 2A:99:20:F0:97:BA:BF:E5:4F:C1:2A:81:2B:6E:4F:18:80:06:B5:6B
Certificate issuer: /CN=A1C473D437CEBD170F723D345D2967666A7D2C89
Certificate serial: 5C29A8ED7DAEC85F1035BC896E2D8F342EA7CA57
Authority key identifier: A1:C4:73:D4:37:CE:BD:17:0F:72:3D:34:5D:29:67:66:6A:7D:2C:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C473D437CEBD170F723D345D2967666A7D2C89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231382e302f32332d3233203d3e20323633393133.roa
Signing time: Thu 02 Jan 2025 12:27:10 +0000
ROA not before: Thu 02 Jan 2025 12:22:10 +0000
ROA not after: Thu 01 Jan 2026 12:27:10 +0000
asID: 263913
IP address blocks: 170.231.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:29:a8:ed:7d:ae:c8:5f:10:35:bc:89:6e:2d:8f:34:2e:a7:ca:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1C473D437CEBD170F723D345D2967666A7D2C89
Validity
Not Before: Jan 2 12:22:10 2025 GMT
Not After : Jan 1 12:27:10 2026 GMT
Subject: CN=2A9920F097BABFE54FC12A812B6E4F188006B56B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:72:a4:bf:33:c1:0a:57:19:13:73:b4:7d:
16:41:28:cd:5e:fb:a5:c9:ed:26:f2:0d:32:1f:66:
41:9f:d9:2b:28:81:15:da:7b:f9:08:90:bb:bc:cb:
21:59:b6:b8:86:f7:83:ff:0d:bc:0a:09:3a:6f:a4:
0b:1e:43:6c:86:28:d8:43:a3:a1:e3:d7:73:08:27:
cd:6f:60:a1:2e:93:4c:ea:a6:57:0e:c0:f2:cf:a8:
33:7d:fb:35:48:39:2f:67:54:1b:c6:3b:58:89:96:
be:9c:90:b8:ea:e9:77:03:15:00:52:30:29:65:b4:
7f:76:d2:90:bb:e5:24:75:0a:92:be:e6:eb:59:0d:
2f:59:f0:10:c2:5f:f5:de:c8:99:6b:4b:18:f4:2e:
73:97:32:ce:c8:5e:66:7c:e7:81:c4:1e:3d:58:9a:
3a:8c:82:f4:ae:d6:48:2e:6d:08:e9:a7:36:a8:71:
83:db:b2:ff:57:da:c4:c1:b0:d3:bc:2d:bc:45:bf:
a6:44:78:41:e8:34:3a:43:c5:99:34:21:6c:a8:18:
6c:34:ac:81:29:8a:e4:b7:3d:a3:ae:ae:53:b8:82:
e7:86:e1:ca:31:cf:61:1d:f5:b0:a3:a3:e9:9d:d8:
68:a4:2b:3a:d8:58:0a:ab:82:69:6d:0a:cb:e6:38:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:99:20:F0:97:BA:BF:E5:4F:C1:2A:81:2B:6E:4F:18:80:06:B5:6B
X509v3 Authority Key Identifier:
keyid:A1:C4:73:D4:37:CE:BD:17:0F:72:3D:34:5D:29:67:66:6A:7D:2C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/A1C473D437CEBD170F723D345D2967666A7D2C89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C473D437CEBD170F723D345D2967666A7D2C89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231382e302f32332d3233203d3e20323633393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.218.0/23
Signature Algorithm: sha256WithRSAEncryption
08:71:94:80:de:45:ae:d0:04:f3:59:dc:c8:6c:7f:65:c7:48:
02:0d:43:21:8a:1d:b3:af:9d:5c:00:ca:a4:8e:e2:86:d1:15:
ce:b8:fd:ac:59:27:7b:58:a0:06:78:ac:b6:fc:85:d9:75:71:
83:ee:bd:7d:0c:25:e8:5b:d6:8e:e3:7e:17:52:9c:f9:8f:bf:
0c:2c:22:6f:2c:85:70:c0:fb:ce:e1:b6:61:f4:ff:a0:21:12:
95:93:59:e8:c2:9d:99:5b:63:f6:92:da:78:bd:5e:6a:ef:91:
0e:63:7b:ed:b5:57:d8:39:36:db:a5:34:60:f3:35:34:7f:8a:
7a:c3:51:94:cf:a0:c0:58:e7:53:c5:13:71:cf:16:93:9e:20:
12:f9:65:a0:62:07:2f:e1:00:64:c9:8a:7f:4b:cb:f8:f3:b9:
33:6b:82:10:6c:56:03:c6:b1:d0:a7:2f:cd:0a:15:fc:bf:17:
fd:fd:2a:c1:5b:a8:62:53:48:b5:9f:ab:86:ea:75:1e:65:2d:
f7:0a:08:fe:ea:8b:34:d8:31:8c:71:e3:e5:47:9d:53:b2:5b:
a5:03:fc:23:1c:ee:56:1c:6a:62:f4:36:5c:f3:78:4b:57:10:
d3:f5:5d:af:41:db:4c:68:60:1e:88:fe:db:4e:f2:01:29:d5:
52:8e:b2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:12:53 2025 by rpki-client