Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3137302e3135302e3231302e302f32342d3234203d3e20323633323930.roa
File: 3137302e3135302e3231302e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier: /bX55rd9AOx3BlIkApLKn0YJUQOojqR6FuakJA5JV1c=
Subject key identifier: 8C:C9:28:D3:51:36:7D:00:68:63:53:45:0A:3C:74:C8:5D:70:A0:13
Certificate issuer: /CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Certificate serial: 690DFE546E4CD82224D746AE93E0CF8D188DEC16
Authority key identifier: A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3137302e3135302e3231302e302f32342d3234203d3e20323633323930.roa
Signing time: Mon 02 Jun 2025 20:53:02 +0000
ROA not before: Mon 02 Jun 2025 20:48:02 +0000
ROA not after: Mon 01 Jun 2026 20:53:02 +0000
asID: 263290
IP address blocks: 170.150.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:0d:fe:54:6e:4c:d8:22:24:d7:46:ae:93:e0:cf:8d:18:8d:ec:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Validity
Not Before: Jun 2 20:48:02 2025 GMT
Not After : Jun 1 20:53:02 2026 GMT
Subject: CN=8CC928D351367D00686353450A3C74C85D70A013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:4e:d5:a7:b0:9f:e0:8f:89:ed:61:d2:f4:
dd:ca:8b:28:ed:fe:99:9f:20:e6:f1:2e:4b:df:30:
d7:25:81:8d:6b:95:f8:53:4f:eb:68:24:a8:4a:a7:
03:ab:30:1d:27:79:e1:f4:c3:08:9a:fc:cb:ad:47:
73:e9:dc:36:89:c2:c2:31:89:45:df:50:ea:6f:d8:
3a:2f:ed:49:2c:4c:03:37:b7:be:a7:b3:b9:67:5c:
30:63:84:36:d2:32:19:36:22:be:da:69:81:d9:c3:
02:92:b2:36:a9:e0:98:c1:f5:87:2b:22:e1:83:ac:
21:f0:d6:b3:3f:34:82:dd:84:1e:78:ad:0e:f7:46:
e4:73:5d:0f:8b:c9:65:8f:41:f4:e3:1a:87:91:40:
a8:ed:ac:55:56:29:8d:e5:fd:d9:60:67:de:c3:2e:
61:2e:80:ed:ac:20:39:ac:5a:4d:59:e0:c0:95:6f:
ce:dc:1d:bb:f2:57:f8:17:09:a4:dd:f0:ef:20:29:
07:c0:3d:e3:b1:62:fa:c6:48:33:78:f7:66:4f:d9:
4d:70:ed:84:59:45:83:73:7d:54:b5:09:9f:a7:88:
ff:04:85:64:37:2e:dc:e8:95:50:b6:91:3a:bf:c5:
98:1f:c0:06:16:8c:00:af:24:b4:b2:dc:b6:3b:0a:
5b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C9:28:D3:51:36:7D:00:68:63:53:45:0A:3C:74:C8:5D:70:A0:13
X509v3 Authority Key Identifier:
keyid:A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3137302e3135302e3231302e302f32342d3234203d3e20323633323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
33:1e:33:f4:dc:ba:84:2a:fa:74:30:bb:c5:06:4d:cd:11:95:
37:05:8b:e7:56:2b:a9:c0:5c:70:05:4a:a2:ae:41:c9:50:38:
01:03:59:28:49:37:20:60:a5:c9:a0:45:8c:7d:bb:f1:31:4d:
41:e1:40:9b:4b:36:fa:69:d7:e7:ea:ca:7b:7a:95:e0:ab:8a:
42:ea:88:97:fe:af:e0:6d:4b:a5:3f:33:d4:53:60:c8:a2:3f:
04:8e:de:25:12:06:89:1c:b2:9c:58:14:0e:04:5c:6a:2b:54:
1b:68:38:fe:18:fd:f0:4c:dd:00:7e:7a:bc:b1:27:11:22:4e:
c0:f6:e3:b5:91:1c:b0:f3:88:b2:0a:83:7d:82:94:c9:c9:3e:
b6:a7:fb:b4:af:e6:09:67:d1:ec:e3:5b:68:25:30:ae:38:3b:
59:50:20:b0:f3:bf:c3:48:a5:47:b4:ee:39:91:41:48:00:30:
f0:4d:89:cf:2e:45:2c:81:2d:14:c6:e3:89:46:3f:05:60:55:
23:72:c6:48:42:2a:b8:2f:0c:0c:12:01:b7:be:a3:59:43:c1:
fe:d3:24:45:27:46:25:21:1e:2b:1e:19:15:51:cf:7b:ba:6e:
de:45:0b:38:26:04:f0:62:bd:2b:68:36:ef:6f:56:f2:9d:14:
05:53:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:29:22 2025 by rpki-client