Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3332203d3e20323636323839.roa
File: 3137302e37392e302e302f32322d3332203d3e20323636323839.roa (raw, json)
Hash identifier: 3UcJp+sAAG3um4LkAt+wonBgw14MEtXK+Iy70mF7x7c=
Subject key identifier: 1B:A5:E5:2E:96:58:C4:24:FB:C3:85:A3:78:5A:32:7D:02:C1:89:70
Certificate issuer: /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial: 219E125F83EAE99D50EFB75EFE9D328FB6422E68
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3332203d3e20323636323839.roa
Signing time: Wed 19 Mar 2025 18:19:09 +0000
ROA not before: Wed 19 Mar 2025 18:14:09 +0000
ROA not after: Wed 18 Mar 2026 18:19:09 +0000
asID: 266289
IP address blocks: 170.79.0.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9e:12:5f:83:ea:e9:9d:50:ef:b7:5e:fe:9d:32:8f:b6:42:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Validity
Not Before: Mar 19 18:14:09 2025 GMT
Not After : Mar 18 18:19:09 2026 GMT
Subject: CN=1BA5E52E9658C424FBC385A3785A327D02C18970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:b0:0d:25:e4:f6:d3:7f:7d:2d:1e:d0:ff:
70:df:45:b3:1c:32:3a:f1:7c:6a:49:3d:20:5f:dd:
9d:9d:0e:34:39:69:a6:1a:38:62:cd:0e:56:8c:e5:
95:77:a8:ba:f6:b1:1e:b3:01:2e:43:36:2f:9e:25:
bc:c9:02:47:1d:0b:f8:ec:4e:dd:3f:69:32:bf:e5:
8a:1f:0c:49:de:00:05:f4:d3:c6:ac:ae:0e:cd:f1:
75:4c:e3:f9:8b:d0:03:67:b2:e2:80:df:5f:2c:47:
da:9e:1a:7b:ef:f2:69:9c:dd:41:d0:3b:32:0d:5a:
29:f0:70:ab:59:ad:0b:da:60:46:51:fa:28:f4:cc:
30:09:79:cf:86:35:7f:39:0b:5f:e1:c1:34:1f:80:
bd:96:63:a6:b6:81:3c:79:7c:be:11:c3:14:87:69:
70:56:a5:1d:44:ea:4b:59:3b:ac:69:60:bf:50:4d:
f2:2e:11:a0:98:34:a4:da:2f:fa:ce:63:ee:7e:47:
73:62:34:be:ca:4d:21:15:fd:1a:40:8c:3b:68:3d:
1f:9c:a2:9c:6c:d5:ee:0b:f6:ef:2d:80:b3:33:4d:
75:6b:67:a1:13:34:64:20:d6:56:56:22:37:22:60:
06:48:e7:ac:1b:31:9c:be:4d:04:8c:54:12:b8:70:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A5:E5:2E:96:58:C4:24:FB:C3:85:A3:78:5A:32:7D:02:C1:89:70
X509v3 Authority Key Identifier:
keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3332203d3e20323636323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.0.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:31:57:60:91:c7:f9:3c:ed:b7:25:b2:0d:a7:ca:88:9d:26:
87:99:c0:ac:59:b9:f0:8d:7c:2e:72:4e:9e:6b:c4:34:b6:a8:
ea:fe:d9:fd:e1:36:66:d6:f9:0f:7c:e7:b9:63:c1:e6:36:d7:
c4:63:cf:43:26:1f:40:36:92:d6:90:f7:48:5b:eb:6a:82:ca:
f9:5c:2a:8a:99:27:bc:06:23:35:48:23:46:c0:be:24:46:9d:
c4:41:85:9b:fe:6f:78:5f:84:17:2b:45:23:a3:6d:f5:a0:e6:
9d:16:d1:68:bd:d2:27:4a:b6:19:d4:d8:12:81:a0:09:c2:fc:
61:a5:9e:46:06:93:32:7e:75:05:01:bd:3c:33:54:2d:cd:56:
a6:8a:c7:6a:60:ea:70:5c:52:f1:3d:04:ad:04:9c:7a:0c:67:
59:fa:6d:4f:e8:06:d7:68:fa:5d:97:36:c9:d8:37:68:e8:2f:
f9:0e:4e:a2:61:55:ed:6f:96:e1:a1:54:9b:35:17:3b:8d:15:
6c:ac:7f:3c:07:01:06:3f:6a:31:fd:ad:01:39:1c:f5:c1:af:
5d:b6:f4:1a:61:16:45:cd:9a:61:55:75:e4:e3:87:b0:6a:3a:
b1:55:25:0e:d6:c5:3d:49:38:13:a6:83:7a:9d:fa:07:cb:86:
ec:c7:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:53 2025 by rpki-client