Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137302e38302e31342e302f32332d3233203d3e20323633363033.roa
File: 3137302e38302e31342e302f32332d3233203d3e20323633363033.roa (raw, json)
Hash identifier: gaY3/HIF6+7Wkm1j7gQcQ/VE3U1+CY1QTzVYvPexf3o=
Subject key identifier: 2F:1A:3C:C7:EF:DF:41:8E:61:0A:10:02:77:D3:F1:7C:BB:99:70:EA
Certificate issuer: /CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Certificate serial: 3C8AA23816FCB443042D206E7B47CF0BEDA87C82
Authority key identifier: 39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137302e38302e31342e302f32332d3233203d3e20323633363033.roa
Signing time: Thu 20 Feb 2025 17:53:34 +0000
ROA not before: Thu 20 Feb 2025 17:48:34 +0000
ROA not after: Thu 19 Feb 2026 17:53:34 +0000
asID: 263603
IP address blocks: 170.80.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8a:a2:38:16:fc:b4:43:04:2d:20:6e:7b:47:cf:0b:ed:a8:7c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Validity
Not Before: Feb 20 17:48:34 2025 GMT
Not After : Feb 19 17:53:34 2026 GMT
Subject: CN=2F1A3CC7EFDF418E610A100277D3F17CBB9970EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:62:3d:82:e3:55:33:b1:03:82:37:4a:85:
85:e4:bb:28:90:c5:c9:48:a5:37:b2:f3:23:4d:d2:
5b:43:87:33:3d:ea:3c:b0:00:c3:bc:c3:60:b2:93:
42:d3:3e:f1:8d:67:c3:89:73:3a:2e:c1:9c:18:7a:
23:6a:fd:b5:85:58:23:1c:c6:43:a4:cf:8b:98:45:
e5:96:32:30:f2:1b:26:89:2a:13:17:24:df:80:49:
4e:68:1a:90:56:7d:49:04:09:ba:7e:7a:88:d6:53:
e5:68:1e:25:92:c8:c8:17:ac:eb:ea:e3:c3:cd:d0:
a7:fd:bb:39:e6:44:a0:d6:89:e9:36:27:eb:b7:02:
0d:1e:fd:75:9b:93:6f:6b:9b:bf:8a:77:90:ac:de:
de:e4:3c:2d:a7:15:81:52:de:7f:38:bf:d8:dc:d0:
97:c2:25:e0:d7:46:fe:7d:8b:a7:70:dc:42:28:3d:
a3:d8:c9:c2:01:69:a9:58:07:97:86:e6:0f:ae:8b:
7d:ad:0a:4f:97:cb:28:1b:ed:02:65:12:69:cc:78:
fb:3b:08:dc:a9:21:9a:eb:d7:c5:66:58:8b:db:23:
66:90:96:92:0e:38:0a:73:f0:47:11:e0:04:cd:da:
60:4e:9a:fa:9c:01:59:e4:47:41:d9:73:8c:3b:f6:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:3C:C7:EF:DF:41:8E:61:0A:10:02:77:D3:F1:7C:BB:99:70:EA
X509v3 Authority Key Identifier:
keyid:39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3925EED4443902E12DF7A9A139E25CB34974D01A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137302e38302e31342e302f32332d3233203d3e20323633363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.14.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:24:96:72:89:66:40:e0:88:04:57:db:ff:ef:15:af:91:a3:
af:63:3e:f4:ee:6b:fa:16:93:f4:ae:c9:04:f1:a0:52:ab:97:
b1:e1:c6:3e:2a:a2:c3:90:59:21:88:98:d1:ff:cc:4e:7b:0e:
26:e6:38:92:c0:26:80:3e:13:4b:d6:17:00:59:58:31:47:56:
46:15:3f:a4:9c:36:cf:56:cc:7b:3f:b7:e4:e8:98:5c:07:0b:
d9:95:ac:9f:01:e4:56:bf:b2:b2:67:53:ff:24:36:3f:a6:cc:
db:0d:6f:06:85:6b:c2:61:45:66:da:ea:e6:69:1d:22:0e:d8:
fc:14:0b:79:d4:f3:9a:b1:dd:62:b2:85:a4:fa:f7:9c:25:f5:
20:25:50:22:e9:2b:98:19:74:5e:4a:7b:f9:d1:45:86:fe:47:
2e:43:ce:22:6a:a9:4c:cc:67:d4:23:e1:d8:2e:57:dc:fd:83:
c2:b6:b6:06:b5:d7:e1:5d:fb:95:a6:32:8a:f0:4e:a4:23:df:
96:81:e5:c7:3a:e0:fb:2f:3e:d1:63:2b:ef:48:ec:2b:c0:df:
17:50:56:54:ed:76:df:96:5b:af:1a:db:6c:0e:fd:fd:ea:1c:
eb:7e:1b:77:ca:7b:68:31:32:26:d2:f5:66:ce:25:bb:bc:aa:
4d:39:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:57:51 2025 by rpki-client