Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
File: 3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier: GdJ+ffSyKs/7cXfh1AABKLm3xNsdFwP7tFzblMepJO8=
Subject key identifier: 33:62:78:21:F7:84:57:BA:94:04:46:40:9F:5C:E4:B0:A5:E6:81:27
Certificate issuer: /CN=AE633FA2122EBFA2E7103FD806B66EA4E4C9831B
Certificate serial: 50242451FE1ACFF83DFF368D7E85125817B35EC7
Authority key identifier: AE:63:3F:A2:12:2E:BF:A2:E7:10:3F:D8:06:B6:6E:A4:E4:C9:83:1B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE633FA2122EBFA2E7103FD806B66EA4E4C9831B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
Signing time: Mon 28 Apr 2025 18:16:43 +0000
ROA not before: Mon 28 Apr 2025 18:11:43 +0000
ROA not after: Mon 27 Apr 2026 18:16:43 +0000
asID: 263256
IP address blocks: 170.247.200.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:24:24:51:fe:1a:cf:f8:3d:ff:36:8d:7e:85:12:58:17:b3:5e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE633FA2122EBFA2E7103FD806B66EA4E4C9831B
Validity
Not Before: Apr 28 18:11:43 2025 GMT
Not After : Apr 27 18:16:43 2026 GMT
Subject: CN=33627821F78457BA940446409F5CE4B0A5E68127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7d:29:32:2f:8c:e5:27:5d:a5:59:35:be:04:
d8:8a:a3:3b:af:b7:45:b6:e0:26:a6:c4:90:5f:5e:
95:52:c3:2d:e7:bb:ea:c0:ad:cf:14:4f:6a:dd:be:
fe:22:8b:db:d0:43:a9:1c:88:4f:fc:68:0a:09:ed:
37:67:38:ff:a8:f1:57:a8:98:5a:0d:7e:8e:3c:fc:
fe:04:cb:a0:a1:f2:01:f9:91:64:ee:b9:95:5f:01:
4a:71:88:ff:ca:7d:34:1c:ef:cd:8f:b3:91:58:27:
cb:1f:a0:5a:a5:9c:96:66:7c:e3:ad:f5:89:4e:14:
84:11:30:4c:af:9e:df:0e:cc:33:a6:fa:9b:7d:5a:
4e:8f:75:e2:7f:78:11:eb:b3:39:74:2a:16:4c:c4:
af:82:db:09:02:be:68:48:43:d9:0a:c9:19:38:7f:
f0:61:df:40:88:3b:89:e7:c3:44:4a:d3:06:cc:27:
37:ff:0e:64:d7:bc:c2:42:e8:67:b6:51:0b:3d:d7:
84:04:2c:cd:ad:e8:31:83:04:38:bc:d5:7d:58:ba:
f6:80:92:a1:80:f0:ad:3f:41:89:67:25:a0:aa:69:
2a:27:9b:1a:d3:1c:47:8e:db:85:4d:1b:5b:33:e4:
5e:c1:aa:a7:a0:13:a1:38:78:e7:0c:1a:95:fe:fd:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:62:78:21:F7:84:57:BA:94:04:46:40:9F:5C:E4:B0:A5:E6:81:27
X509v3 Authority Key Identifier:
keyid:AE:63:3F:A2:12:2E:BF:A2:E7:10:3F:D8:06:B6:6E:A4:E4:C9:83:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/AE633FA2122EBFA2E7103FD806B66EA4E4C9831B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE633FA2122EBFA2E7103FD806B66EA4E4C9831B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:5e:2f:75:bd:59:ad:36:5b:af:db:9b:fd:eb:32:43:db:bd:
ec:89:3b:e9:d4:5a:0a:1d:d7:09:ce:7e:c9:11:07:94:e8:41:
94:05:8d:3b:09:32:98:4e:ff:da:d7:80:a8:c4:c3:87:28:ac:
9f:8f:da:7d:92:4c:56:b1:a0:c7:0d:0f:c6:e1:e3:bd:d3:a6:
ca:1e:7c:81:d7:eb:76:17:4e:c9:cb:38:3f:ee:4a:52:a9:23:
af:00:ce:d9:d1:a2:5b:0e:9f:de:6b:96:5e:b3:2e:0c:c4:13:
6f:40:46:07:d9:7c:8f:ff:76:98:07:c1:63:f5:14:2c:7d:f0:
96:2d:98:8d:62:d4:4b:05:5c:32:c3:c6:64:61:9c:4e:4b:38:
54:bd:1e:75:6a:f0:e3:51:f4:53:71:0e:ff:cd:3e:c2:c5:3e:
84:86:2f:bd:93:50:4d:97:ce:58:f4:46:0a:fb:5d:fd:c8:b9:
b4:55:04:b0:7b:84:40:f9:15:11:08:bf:a1:3f:f7:8a:9c:9b:
9e:aa:d4:5d:83:5d:ed:2e:b6:a3:8f:c4:53:b6:3e:b4:6f:51:
0a:32:c3:02:88:2e:ed:18:d7:84:19:a6:e9:1c:bc:72:c6:01:
b9:0c:c2:44:d1:b8:e9:ce:b7:7a:b1:dd:e5:ca:86:f2:07:aa:
24:1a:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:19:42 2025 by rpki-client