Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231392e302f32342d3234203d3e20323633393133.roa
File: 3137302e3233312e3231392e302f32342d3234203d3e20323633393133.roa (raw, json)
Hash identifier: hsq8VD9OqxNDEOvw/n91Lbq8SPHqXa5MMvNYXOY4bXk=
Subject key identifier: EF:DD:4A:DE:B7:89:BC:8F:59:F4:EA:74:50:DD:2D:C0:F1:10:22:E7
Certificate issuer: /CN=A1C473D437CEBD170F723D345D2967666A7D2C89
Certificate serial: 436CF25D9F2687C270D41F0C9A4813762E2E29D7
Authority key identifier: A1:C4:73:D4:37:CE:BD:17:0F:72:3D:34:5D:29:67:66:6A:7D:2C:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C473D437CEBD170F723D345D2967666A7D2C89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231392e302f32342d3234203d3e20323633393133.roa
Signing time: Thu 02 Jan 2025 12:27:10 +0000
ROA not before: Thu 02 Jan 2025 12:22:10 +0000
ROA not after: Thu 01 Jan 2026 12:27:10 +0000
asID: 263913
IP address blocks: 170.231.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:6c:f2:5d:9f:26:87:c2:70:d4:1f:0c:9a:48:13:76:2e:2e:29:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1C473D437CEBD170F723D345D2967666A7D2C89
Validity
Not Before: Jan 2 12:22:10 2025 GMT
Not After : Jan 1 12:27:10 2026 GMT
Subject: CN=EFDD4ADEB789BC8F59F4EA7450DD2DC0F11022E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:49:a1:2d:63:7c:f1:e9:b8:3c:0b:55:82:
ee:cc:fa:ad:59:94:ae:eb:44:98:c1:78:36:99:15:
da:d5:10:ec:9b:ea:ee:f0:ea:6c:35:07:1a:1a:70:
cd:31:54:cd:57:a2:5d:9e:0e:b4:10:89:81:f9:84:
df:87:8f:2d:39:97:26:82:af:a1:70:16:37:4c:79:
d5:1b:35:84:f9:db:c0:34:cd:77:b2:ff:67:d7:aa:
72:78:d4:06:44:e1:da:17:36:84:8c:a3:cd:1f:0a:
13:5c:f0:92:08:8b:87:77:a2:d2:e5:48:ac:ca:c4:
de:84:0a:cc:bb:7c:5a:10:46:b0:49:47:0e:ec:60:
7d:3b:f2:92:f8:e1:ef:d9:3b:de:fa:f1:58:a0:41:
68:ca:1a:a3:54:ee:80:33:8d:62:69:55:d2:9c:25:
79:84:e8:fa:8f:da:74:da:ee:82:39:c0:d0:9a:fe:
96:93:d4:96:20:88:bc:7f:63:44:23:96:b6:e2:5c:
60:05:0c:2c:1f:3b:3a:48:34:3d:67:97:80:c8:88:
07:68:dd:6c:d1:0e:af:10:9f:1f:c0:36:4e:64:c1:
91:fb:45:17:56:a7:94:8f:38:79:f0:0e:82:f1:e6:
6e:77:31:6e:63:f4:e4:95:66:6b:81:c9:bd:34:4a:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DD:4A:DE:B7:89:BC:8F:59:F4:EA:74:50:DD:2D:C0:F1:10:22:E7
X509v3 Authority Key Identifier:
keyid:A1:C4:73:D4:37:CE:BD:17:0F:72:3D:34:5D:29:67:66:6A:7D:2C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/A1C473D437CEBD170F723D345D2967666A7D2C89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C473D437CEBD170F723D345D2967666A7D2C89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231392e302f32342d3234203d3e20323633393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.219.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9e:6c:76:d7:b4:b6:09:31:0b:2c:c0:f5:83:03:81:56:7c:
b8:02:d2:50:f4:5d:51:d8:a7:78:a6:e8:29:d8:99:6e:42:af:
c7:e0:1a:f2:89:4e:bc:ee:10:99:98:96:57:1e:1f:b2:f0:19:
88:c1:5e:44:4f:6e:90:c0:83:ac:77:c9:f2:88:1d:97:e4:f9:
48:20:2f:39:16:ef:b6:34:ab:05:29:10:50:1a:a0:5c:b5:13:
8f:2a:be:18:f3:f0:e7:b6:fb:5d:16:a6:2a:4a:b9:d2:72:63:
a4:8b:4f:4a:fb:c9:44:c2:07:3e:20:f7:75:f5:2b:b7:c5:c1:
bd:48:61:60:cc:13:2c:90:46:bb:f6:e0:d5:4b:54:c4:a3:63:
20:08:c1:07:b7:22:29:0d:66:ec:0b:0e:bc:85:cf:12:96:b7:
56:69:52:bd:5b:97:9c:58:84:07:6d:0c:8b:e8:e2:ec:6f:b9:
d8:9b:07:db:45:6e:a3:00:b3:39:60:fd:42:b4:a5:df:97:e6:
13:8a:29:6b:8c:fa:bd:c6:ad:bf:b5:0f:c5:56:24:3f:5b:94:
40:51:5f:f9:ec:57:78:4f:6e:d0:3b:51:da:f2:02:aa:0e:86:
8b:55:a4:f6:98:91:9b:2b:9c:fc:84:ff:09:01:1a:2d:d4:78:
c2:52:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:17:14 2025 by rpki-client