Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa
File: 3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier: Er78LkWWjKzMlVdV0YRctH1WCGYI1uG+cD0kdO19DvY=
Subject key identifier: 29:99:65:A9:6D:17:04:1C:A2:F2:C0:68:B3:BC:A6:4C:10:02:CD:95
Certificate issuer: /CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Certificate serial: 44DB970EF8E1131CA855BDDB996D5DD19A8CC4D5
Authority key identifier: A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa
Signing time: Mon 02 Jun 2025 20:52:50 +0000
ROA not before: Mon 02 Jun 2025 20:47:50 +0000
ROA not after: Mon 01 Jun 2026 20:52:50 +0000
asID: 263290
IP address blocks: 170.150.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:db:97:0e:f8:e1:13:1c:a8:55:bd:db:99:6d:5d:d1:9a:8c:c4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Validity
Not Before: Jun 2 20:47:50 2025 GMT
Not After : Jun 1 20:52:50 2026 GMT
Subject: CN=299965A96D17041CA2F2C068B3BCA64C1002CD95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e6:a6:59:9d:a2:40:28:2b:eb:4d:a0:b2:74:
34:af:75:4d:ba:c8:04:fd:5b:a4:26:6f:22:c8:08:
5e:2b:88:47:b8:8e:70:13:d5:37:ab:c5:ba:ff:35:
e0:47:ab:19:f2:b5:a3:36:9e:13:20:8c:b3:2d:b2:
a9:16:ce:9f:5a:0b:7a:77:96:52:63:35:2c:58:5f:
ce:f7:57:23:da:61:45:38:4a:e5:01:41:1f:e0:71:
76:20:c7:25:dd:20:04:1d:ef:f2:56:d4:90:a7:2f:
30:e9:c4:17:07:c0:04:65:12:6b:45:66:86:5e:74:
74:f0:71:2b:0e:b2:fa:53:71:84:cb:42:96:74:d8:
de:d5:b2:99:75:76:90:ce:72:98:e5:b8:97:60:b7:
9c:af:f9:cc:25:23:31:71:96:fd:50:50:d9:a5:93:
d8:0c:11:1f:46:ec:a2:79:c3:f4:cd:22:bd:de:6d:
3c:f2:6d:0a:5a:b5:36:46:b2:52:ae:fe:f0:75:54:
51:23:70:2a:bb:db:1b:6b:c1:d3:b7:b2:4c:5c:26:
34:dc:42:ba:95:82:8b:f0:d9:cd:88:ba:71:69:48:
ce:6c:d3:c6:a8:8c:09:5b:ee:79:69:cc:2d:9c:af:
e3:ba:e6:64:40:c0:5e:a8:a1:36:73:39:2a:32:36:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:99:65:A9:6D:17:04:1C:A2:F2:C0:68:B3:BC:A6:4C:10:02:CD:95
X509v3 Authority Key Identifier:
keyid:A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3137302e3135302e3230382e302f32342d3234203d3e20323633323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.208.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:6a:83:c4:73:f5:a9:4f:98:f3:94:e6:9a:29:1c:e4:d9:6d:
4b:2f:dc:50:15:6a:9b:18:7d:bd:4c:f6:2b:22:67:25:c0:cd:
52:c6:0e:d6:82:32:db:ff:ba:23:b5:f4:da:0e:74:c8:6c:17:
f4:cf:6e:1a:aa:a3:ac:8b:a7:ca:55:59:16:88:ca:db:58:7c:
6f:c3:40:d4:bb:79:10:c1:5a:ec:8c:63:3f:20:5f:c2:54:e9:
93:ed:5d:20:e6:38:84:d6:eb:a3:ca:18:ef:3c:41:89:ad:ed:
84:82:67:94:a3:db:21:96:39:57:4d:76:43:d2:1b:47:34:53:
91:b5:07:67:db:3d:65:3b:c2:8d:c9:92:17:d5:0d:07:a5:77:
d2:fa:ee:6b:78:ee:5f:9b:3d:0d:00:0d:7c:31:18:a7:36:9f:
ce:31:aa:25:3c:eb:e1:e2:63:9b:18:a4:11:02:58:04:a7:9c:
ad:7f:9b:db:7e:2e:4d:b0:72:59:00:3f:af:b5:16:9f:cd:8b:
bd:54:fc:b7:2f:ce:6f:b9:9d:b3:1c:64:2d:b8:ff:39:ec:0e:
24:22:ff:b3:9d:c9:6c:f2:cb:c9:34:33:cf:f6:c6:de:a5:e0:
dd:47:3e:40:eb:fd:e0:7d:68:2d:3d:4b:b3:cf:2c:d3:ea:96:
83:b9:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:39:30 2025 by rpki-client