Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3235302e302f32332d3234203d3e20323632333031.roa
File: 3137302e302e3235302e302f32332d3234203d3e20323632333031.roa (raw, json)
Hash identifier: m8NGOXRvYoURgCoizzUosMjsWNM16ElGnS/wwvXIWsE=
Subject key identifier: 8F:EF:AD:4F:2F:BA:FA:2A:C6:3F:8D:21:E1:94:EB:91:84:3B:E6:F5
Certificate issuer: /CN=E30CAFF45780AC90434C232E196752E3283B9BD2
Certificate serial: 353BA00AA55F220317BF7ABF3F9019772FF8D570
Authority key identifier: E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3235302e302f32332d3234203d3e20323632333031.roa
Signing time: Thu 06 Mar 2025 07:33:13 +0000
ROA not before: Thu 06 Mar 2025 07:28:13 +0000
ROA not after: Thu 05 Mar 2026 07:33:13 +0000
asID: 262301
IP address blocks: 170.0.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:3b:a0:0a:a5:5f:22:03:17:bf:7a:bf:3f:90:19:77:2f:f8:d5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E30CAFF45780AC90434C232E196752E3283B9BD2
Validity
Not Before: Mar 6 07:28:13 2025 GMT
Not After : Mar 5 07:33:13 2026 GMT
Subject: CN=8FEFAD4F2FBAFA2AC63F8D21E194EB91843BE6F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:32:7e:02:39:0b:2b:40:f0:e7:d9:14:c4:
3e:62:43:d5:b3:29:23:41:d5:18:90:ec:1c:1c:2a:
06:32:ae:0e:1b:57:c2:8f:ea:29:34:85:02:ab:be:
52:f9:7c:ce:71:a3:85:ff:80:bc:07:26:4e:2b:6a:
28:61:aa:af:d7:1c:c8:d4:07:64:7c:54:cd:71:2d:
dd:08:07:ef:3c:91:26:84:d2:f2:4a:fa:28:5a:1f:
9d:6d:9d:e5:26:1f:d2:30:9b:05:24:51:0c:e5:a5:
9c:ca:6b:b9:59:20:12:a9:6a:95:a9:48:ee:5d:15:
0e:6e:8f:93:13:6e:1b:f1:63:b2:5b:70:38:82:4e:
65:a6:df:b6:04:d5:09:db:c1:a0:73:f1:20:9a:a0:
bf:fe:2c:12:49:24:27:f6:ff:61:bf:60:c1:4d:aa:
fb:4a:db:89:48:fd:0e:62:7c:09:ab:33:99:ef:60:
32:4c:53:28:07:b9:49:31:47:be:60:c4:a5:9d:c9:
d6:67:b1:ef:a2:45:94:8b:65:85:55:7d:93:30:1c:
ee:a4:10:9e:c7:f4:05:46:92:d8:be:43:85:28:52:
19:8f:ce:d8:a9:8a:56:2f:b8:a4:c7:14:5f:fa:59:
dd:2b:83:d8:d0:1f:44:b0:49:5d:59:d2:03:8f:1a:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EF:AD:4F:2F:BA:FA:2A:C6:3F:8D:21:E1:94:EB:91:84:3B:E6:F5
X509v3 Authority Key Identifier:
keyid:E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3235302e302f32332d3234203d3e20323632333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.250.0/23
Signature Algorithm: sha256WithRSAEncryption
82:30:c6:da:3f:03:5e:d1:e7:b2:03:a6:d7:4b:14:98:23:18:
41:cb:de:a4:24:ec:a3:a9:74:26:a9:db:4b:29:ae:a3:33:67:
6b:c3:75:5f:ea:e4:f2:3d:3d:05:0b:db:bd:f4:a6:9b:2d:12:
fb:db:95:01:7d:ff:cd:67:ff:b9:33:4b:e1:de:73:1f:26:42:
8f:8b:f6:a4:d9:7b:9b:c3:7b:66:3d:df:43:17:31:31:ce:da:
43:36:f1:88:85:12:d6:b1:9e:19:45:d7:0c:60:c7:30:7b:88:
c7:9d:1c:9d:8e:91:8d:f1:27:c4:e3:5c:4f:67:59:d2:2e:05:
51:22:f0:9e:67:69:f2:2f:a5:7c:35:35:f8:04:8a:70:0a:a8:
01:69:d4:6e:7a:36:75:d1:68:bd:e4:a2:c2:6e:0f:4f:83:21:
75:15:25:94:81:0d:74:d7:c3:af:52:d4:09:87:e1:4e:8f:55:
0d:4d:be:17:54:d5:d0:ed:ce:f6:9a:2d:26:c9:ee:fe:c0:d7:
81:6e:1c:9c:0d:bc:d0:8b:9a:47:8c:4c:0f:a9:4e:2b:14:a3:
53:4d:30:37:51:f2:c0:ed:39:93:ee:d3:55:a5:e1:23:2d:c6:
42:2a:d6:e7:7b:3a:be:84:bf:b9:2b:60:b6:15:f6:89:33:dd:
86:4a:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:55:04 2025 by rpki-client