Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/3137302e38312e34342e302f32322d3234203d3e203631383732.roa
File: 3137302e38312e34342e302f32322d3234203d3e203631383732.roa (raw, json)
Hash identifier: 3uUj0R6DlPY399C9yzaH3KMwAJiuFg6IDEJm6Flo7/I=
Subject key identifier: 8D:92:7A:52:27:FC:2C:11:36:D7:2A:81:62:78:52:B0:A0:44:7A:9C
Certificate issuer: /CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15
Certificate serial: 5F943D3ECC1E9BD0FA35F8EF81FF30373438BBC3
Authority key identifier: 0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/3137302e38312e34342e302f32322d3234203d3e203631383732.roa
Signing time: Wed 12 Mar 2025 11:24:10 +0000
ROA not before: Wed 12 Mar 2025 11:19:10 +0000
ROA not after: Wed 11 Mar 2026 11:24:10 +0000
asID: 61872
IP address blocks: 170.81.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:94:3d:3e:cc:1e:9b:d0:fa:35:f8:ef:81:ff:30:37:34:38:bb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15
Validity
Not Before: Mar 12 11:19:10 2025 GMT
Not After : Mar 11 11:24:10 2026 GMT
Subject: CN=8D927A5227FC2C1136D72A81627852B0A0447A9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:61:12:94:56:73:4c:74:11:dc:2f:1e:c4:
c9:65:60:53:86:84:17:8d:34:fa:a9:16:ac:15:64:
99:a7:20:af:4e:13:b0:ef:74:df:3e:2d:7f:ae:f2:
db:2e:a5:53:7f:82:09:0f:1f:bd:48:ed:7b:3b:93:
83:7c:1c:c3:54:2b:59:64:15:77:93:41:02:ad:f9:
a4:02:97:30:ea:52:48:31:07:35:1e:54:cb:80:aa:
7a:45:f3:7f:15:4c:36:9d:6c:40:f2:60:fd:98:7d:
db:f2:e0:99:ef:09:26:bf:25:54:ab:a4:15:42:2d:
65:28:76:0d:d8:a3:1c:5b:71:24:89:f5:11:b0:2e:
8e:cd:d9:7a:98:92:1c:ce:4e:ab:2f:ae:90:e7:c5:
d9:50:24:71:f0:ff:8a:97:6d:b8:77:15:53:b9:b6:
5e:87:8f:36:32:ff:cf:b7:6f:55:eb:8c:ef:ce:d2:
5c:36:41:f9:56:1f:01:c0:72:9f:60:e6:e4:83:05:
89:3e:ad:78:3a:49:64:23:51:d1:ce:ba:a4:1c:12:
11:54:37:cc:92:ba:d6:ae:8e:1a:3b:58:80:eb:7a:
be:5a:0f:87:d2:d4:7a:d9:eb:f6:b7:81:f1:73:03:
99:dd:da:f7:7a:05:96:60:63:e3:68:b9:81:33:08:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:92:7A:52:27:FC:2C:11:36:D7:2A:81:62:78:52:B0:A0:44:7A:9C
X509v3 Authority Key Identifier:
keyid:0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/3137302e38312e34342e302f32322d3234203d3e203631383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.44.0/22
Signature Algorithm: sha256WithRSAEncryption
92:5d:82:fe:2f:57:e0:60:9b:7f:c1:48:82:23:81:bd:a3:39:
94:eb:57:49:8a:66:98:e7:81:31:f6:9c:12:1d:3c:10:bc:4a:
49:eb:f1:b1:2e:94:50:d0:cb:b8:6e:c8:42:8d:c7:e3:01:dc:
d7:22:e1:3a:3f:e3:13:fe:04:ee:8a:c7:5e:37:b9:b8:ce:c5:
6d:eb:24:85:ea:42:d3:fe:bd:91:58:32:0e:16:92:eb:31:09:
aa:33:05:05:6c:e0:26:b0:a4:3f:9d:65:d4:e9:05:60:78:96:
3d:11:ac:06:06:25:d3:93:60:34:ae:e9:73:dc:01:2a:24:82:
18:9d:3e:61:1e:0e:82:1b:1d:25:be:00:40:03:ff:58:ab:40:
7a:2f:02:59:56:03:13:9b:a2:9e:3e:36:81:2d:70:05:ec:16:
93:95:51:dc:e4:5b:41:4e:4d:29:d5:73:f1:46:c3:cc:c1:6a:
bc:73:03:75:c8:65:ff:96:11:31:60:86:9c:7b:b6:8b:e7:1c:
39:f8:f8:1a:c5:26:aa:50:90:27:c2:d8:7c:f1:60:da:b5:f2:
83:96:b7:69:16:bf:20:2d:c3:c1:65:b5:62:b4:5d:f7:10:aa:
ec:8f:b9:a4:77:03:59:4e:14:a5:4b:85:43:1e:9c:bf:f0:3f:
cb:56:7c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:06 2025 by rpki-client