Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137322e302f32322d3234203d3e20323632353930.roa
File: 3137302e3233312e3137322e302f32322d3234203d3e20323632353930.roa (raw, json)
Hash identifier: IkH2rbO1mTSJaS3T2GGBp+A8E9RoCg76bqM2E9w2jGg=
Subject key identifier: 92:03:36:B4:DF:3F:CD:39:01:F9:BC:8D:17:56:C2:D2:4E:C1:06:A1
Certificate issuer: /CN=231C01A4C21B4CA32569E7A61F40CB611354C269
Certificate serial: 60C5519DE819359D393A1E9DD3347F749ACCDCD1
Authority key identifier: 23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137322e302f32322d3234203d3e20323632353930.roa
Signing time: Tue 11 Mar 2025 21:02:46 +0000
ROA not before: Tue 11 Mar 2025 20:57:46 +0000
ROA not after: Tue 10 Mar 2026 21:02:46 +0000
asID: 262590
IP address blocks: 170.231.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c5:51:9d:e8:19:35:9d:39:3a:1e:9d:d3:34:7f:74:9a:cc:dc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231C01A4C21B4CA32569E7A61F40CB611354C269
Validity
Not Before: Mar 11 20:57:46 2025 GMT
Not After : Mar 10 21:02:46 2026 GMT
Subject: CN=920336B4DF3FCD3901F9BC8D1756C2D24EC106A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:c7:dd:ec:81:5e:f0:07:76:d9:d8:81:51:
54:49:13:f7:15:69:77:a3:31:8b:ff:c8:e5:dd:3f:
d2:b3:a6:30:4e:17:d5:72:08:ff:61:f2:94:df:70:
50:35:04:02:c4:0d:9b:6c:78:bb:84:9d:71:64:a8:
15:55:3a:db:92:0c:ef:84:fb:38:2f:82:2b:af:20:
25:83:e0:e1:57:76:ab:8b:9f:48:2a:70:16:63:73:
93:d5:36:84:6e:03:ed:41:88:f7:19:c1:b5:2e:07:
01:c7:91:8e:09:b4:3f:3d:d7:96:d1:b7:14:1a:b7:
c0:73:0f:b7:66:f6:80:23:dd:a4:ba:75:9a:a8:81:
55:be:76:a5:27:aa:86:f6:0b:93:43:ce:b4:c7:08:
2f:39:34:db:72:8b:ed:47:07:8b:fd:f8:b0:26:11:
05:d1:81:ff:1e:ff:11:e0:a3:66:fe:a9:56:06:ac:
da:af:eb:57:36:39:94:81:62:cb:a9:58:85:7a:1e:
6c:05:5d:d7:5a:87:b3:09:3c:d8:9f:62:d5:d3:2b:
5e:1e:a6:b8:60:5b:e9:e3:73:88:c5:5b:c6:7b:be:
ea:ec:63:ce:02:a2:74:21:b9:e7:b0:b7:0d:59:72:
3b:51:48:ba:c8:d2:b9:f8:b3:8a:f3:88:25:1b:2e:
2c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:03:36:B4:DF:3F:CD:39:01:F9:BC:8D:17:56:C2:D2:4E:C1:06:A1
X509v3 Authority Key Identifier:
keyid:23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137322e302f32322d3234203d3e20323632353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.172.0/22
Signature Algorithm: sha256WithRSAEncryption
22:85:66:0c:49:6d:5c:45:81:2e:82:96:eb:15:29:18:a7:3e:
74:9c:a6:4a:4e:ab:ce:be:b6:f1:b5:29:5f:5a:9d:46:bf:b3:
62:32:2c:95:7f:ce:48:25:50:82:e1:7e:b4:de:de:92:4e:42:
64:32:2d:2e:e4:8b:76:98:cd:94:38:b6:48:67:7a:5c:de:fa:
bf:64:fc:bb:b6:5a:4f:62:85:ee:e0:08:2a:fd:b2:1d:89:98:
4c:56:1b:81:c4:e5:2f:39:99:b7:e5:38:1d:a1:cd:b5:6a:25:
eb:8f:51:82:b0:b0:9a:80:f3:26:f5:02:fd:97:c3:89:5d:2c:
ac:b6:2c:d1:ab:62:b8:2d:8e:ed:5a:ad:59:79:6f:ea:0d:1e:
c4:ee:e2:57:1a:4c:00:3d:57:6a:31:71:5e:60:6d:21:0f:98:
c2:9e:85:56:1d:36:f0:72:3d:eb:83:0d:43:34:53:3e:3b:04:
51:0d:4f:dc:5b:91:25:11:8a:41:fd:6b:e0:1f:08:b7:74:6f:
61:0e:21:0e:fc:77:e3:72:6d:9a:87:20:6e:5e:cc:5f:ba:7c:
37:06:7c:5a:a6:3f:48:61:f2:0d:ff:49:a2:43:c4:c3:b0:fe:
93:75:a6:d6:73:0f:9e:be:7a:2f:01:ca:b2:f1:da:0c:29:f4:
06:59:bb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:10:02 2025 by rpki-client