Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/3137302e3233392e342e302f32322d3234203d3e20323636333433.roa
File: 3137302e3233392e342e302f32322d3234203d3e20323636333433.roa (raw, json)
Hash identifier: jLhmR65Qb91FkxRKkS2DNkZ9zgC0UieATnKlJXaiICg=
Subject key identifier: C0:BE:BF:39:21:2E:A6:FA:C0:A9:E7:09:C9:7B:1B:FA:E1:CB:A4:AE
Certificate issuer: /CN=68230C14403321CC6C2237C576CF7E50D2BAC9B4
Certificate serial: 01C7E839FEEBF5237032E4F5EB563FCF8C4227ED
Authority key identifier: 68:23:0C:14:40:33:21:CC:6C:22:37:C5:76:CF:7E:50:D2:BA:C9:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68230C14403321CC6C2237C576CF7E50D2BAC9B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/3137302e3233392e342e302f32322d3234203d3e20323636333433.roa
Signing time: Thu 23 Jan 2025 12:48:48 +0000
ROA not before: Thu 23 Jan 2025 12:43:48 +0000
ROA not after: Thu 22 Jan 2026 12:48:48 +0000
asID: 266343
IP address blocks: 170.239.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c7:e8:39:fe:eb:f5:23:70:32:e4:f5:eb:56:3f:cf:8c:42:27:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68230C14403321CC6C2237C576CF7E50D2BAC9B4
Validity
Not Before: Jan 23 12:43:48 2025 GMT
Not After : Jan 22 12:48:48 2026 GMT
Subject: CN=C0BEBF39212EA6FAC0A9E709C97B1BFAE1CBA4AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:2a:27:0c:0c:03:66:91:cc:a4:9f:a5:45:
36:a9:51:88:d3:23:ab:ef:1c:2e:2b:84:06:96:83:
58:be:90:f6:9d:01:90:52:d0:c6:15:11:50:34:84:
13:1b:e0:34:f0:21:57:18:e7:fc:88:85:7f:4f:38:
43:2a:22:f7:61:6b:78:49:57:b0:09:06:06:b3:13:
ab:c2:b2:15:69:93:60:de:4e:99:2a:c0:18:66:b8:
b2:11:92:0a:3c:1b:90:5c:ba:c3:05:bb:f1:e4:27:
10:82:66:a1:33:b4:7e:6f:0b:94:4c:c0:bb:6f:20:
94:90:a0:a0:31:1e:83:d9:f1:7b:6d:d9:d9:d6:dc:
02:d9:42:d3:a0:77:da:1d:37:a8:27:ce:bf:0b:91:
77:06:f7:5f:83:41:6a:fc:f0:a6:a3:b6:7a:da:1b:
25:51:63:e5:bc:bf:fe:ca:51:7f:77:48:31:50:db:
6b:b2:b4:a1:28:02:ea:08:24:c0:f1:a9:c6:6c:5c:
56:81:38:43:8c:f0:86:e0:36:a7:eb:2c:b1:e9:65:
e2:b5:2b:98:4f:a3:e4:f6:f9:95:0c:ee:06:a1:e0:
b6:76:7d:83:49:6e:67:8c:b3:47:1b:66:01:73:0f:
f8:30:53:4c:45:95:20:d0:a1:fd:b1:5f:82:09:b2:
7b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BE:BF:39:21:2E:A6:FA:C0:A9:E7:09:C9:7B:1B:FA:E1:CB:A4:AE
X509v3 Authority Key Identifier:
keyid:68:23:0C:14:40:33:21:CC:6C:22:37:C5:76:CF:7E:50:D2:BA:C9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/68230C14403321CC6C2237C576CF7E50D2BAC9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68230C14403321CC6C2237C576CF7E50D2BAC9B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/3137302e3233392e342e302f32322d3234203d3e20323636333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:04:20:c1:ec:38:76:e0:fc:0c:90:52:37:d8:e5:cc:97:54:
82:35:39:9c:3c:7c:ef:e8:4f:35:fd:17:da:c2:9b:10:46:ad:
b6:0f:8d:5b:7e:d7:0b:ae:3e:bc:91:e5:1e:19:1b:1e:95:2e:
4e:61:70:10:1b:da:b7:3a:bb:27:d8:e8:1c:4e:cd:25:a4:06:
69:ac:b3:e1:43:9f:dc:12:40:a3:4e:63:83:3e:0c:55:46:7a:
05:45:87:79:64:41:7e:a3:45:2a:b9:b7:0b:8f:f8:c9:ea:6a:
5c:8e:e4:be:c5:6a:fb:aa:39:3d:6a:b5:a7:3a:67:63:a9:92:
ee:87:23:c2:f0:d0:c3:b8:dd:f2:d6:5e:54:89:7c:87:8a:7d:
f0:b2:b5:20:26:86:c8:f9:1c:48:5e:9c:85:db:cc:9d:5b:13:
d7:f1:97:b2:b4:f6:46:85:01:17:82:f7:6e:bf:19:b0:8b:0c:
28:62:6d:4a:db:f1:8f:3e:ba:b2:2c:4e:e4:05:31:65:5f:ca:
e8:cc:64:e3:37:52:f5:db:ae:e9:99:ed:33:1b:2e:41:ac:f2:
7c:27:48:72:2d:2e:11:fb:c4:62:2a:d9:49:24:a2:e0:32:fc:
8e:0f:ad:96:71:30:dc:96:51:62:d5:cd:37:e4:5b:ed:ed:c1:
b4:cb:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:08:54 2025 by rpki-client