Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230322e302f32332d3233203d3e20323633323536.roa
File: 3137302e3234372e3230322e302f32332d3233203d3e20323633323536.roa (raw, json)
Hash identifier: f3rkVcaabAFUgv99SlpGe5ARvVkdE6/kVvR4cm5gcIs=
Subject key identifier: 13:D2:37:7F:BB:FD:AB:48:D9:4E:DE:D9:DD:0A:D4:B5:29:2E:D0:CA
Certificate issuer: /CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Certificate serial: 2B0AB0A963AF219BC0019EFFFC7BC3278E16508E
Authority key identifier: 01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230322e302f32332d3233203d3e20323633323536.roa
Signing time: Fri 23 May 2025 16:53:06 +0000
ROA not before: Fri 23 May 2025 16:48:06 +0000
ROA not after: Fri 22 May 2026 16:53:06 +0000
asID: 263256
IP address blocks: 170.247.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:0a:b0:a9:63:af:21:9b:c0:01:9e:ff:fc:7b:c3:27:8e:16:50:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Validity
Not Before: May 23 16:48:06 2025 GMT
Not After : May 22 16:53:06 2026 GMT
Subject: CN=13D2377FBBFDAB48D94EDED9DD0AD4B5292ED0CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:cf:6b:fa:ad:8b:d9:58:3b:52:4a:bf:c5:
04:dd:2b:3e:2b:07:83:a5:ec:77:03:18:bb:19:ff:
3a:11:1e:31:56:24:bb:c7:3e:41:d4:86:af:ef:76:
a2:5d:12:99:f4:1a:e9:41:44:55:fb:1e:d6:6a:13:
0d:37:2c:95:3b:5f:90:58:39:56:e7:34:f6:3e:00:
2f:cb:3f:a3:aa:11:8a:33:7d:93:93:7b:7c:e2:69:
55:5b:f7:50:a4:8d:04:f8:ff:6b:c8:a5:3e:e9:93:
71:b6:fc:9d:62:fe:05:2e:5c:3d:5c:76:cc:8e:79:
8b:b5:aa:a7:53:af:72:92:e5:a0:fc:15:88:0c:cc:
66:52:01:b8:12:62:cd:be:ba:03:48:a0:38:d4:54:
f1:57:0c:8e:7a:bc:2d:cc:08:48:e5:56:65:e2:09:
03:fb:93:04:9f:21:3a:24:c9:52:93:29:0b:7d:42:
68:ae:44:c9:1e:9f:54:4d:d2:b4:ee:59:5a:22:80:
b5:cb:4b:28:ab:f5:81:f4:59:98:9e:bd:7f:1c:97:
76:e6:74:78:19:d4:80:6b:e3:91:58:93:15:fa:ab:
3e:e7:0f:a9:a4:96:3a:28:c8:43:6b:77:05:38:90:
ed:12:0a:3e:3d:8d:8c:48:00:4d:a3:52:48:3a:3e:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D2:37:7F:BB:FD:AB:48:D9:4E:DE:D9:DD:0A:D4:B5:29:2E:D0:CA
X509v3 Authority Key Identifier:
keyid:01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/0156B956215AE4C7F951D9FABA7689B0C1830680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230322e302f32332d3233203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.202.0/23
Signature Algorithm: sha256WithRSAEncryption
af:3a:36:86:e5:d8:b3:2c:3e:66:b5:4c:ec:66:33:00:d4:4c:
86:11:36:0d:0d:81:a1:83:57:bd:7c:f1:fc:6e:bd:ee:b0:6b:
e2:08:43:5a:d7:5d:c6:f2:34:cc:0c:ba:b0:b4:16:7b:68:18:
da:57:9a:1b:b0:1a:43:3e:f8:36:5b:f4:62:87:1d:c9:97:85:
3f:0d:bb:18:fa:b9:85:f3:9c:c6:fe:1d:08:0e:6c:cb:65:a7:
24:46:e6:3f:f4:05:03:2b:8e:eb:82:72:2c:d8:ce:fb:88:bb:
42:b1:9c:97:7e:62:5a:50:73:33:38:18:61:66:65:01:cc:6c:
91:0f:b4:92:e6:76:a8:22:d4:62:20:fa:e3:91:83:c4:23:24:
8d:46:f4:7f:af:aa:f1:62:8d:98:4d:a3:9e:e0:a8:e7:e0:1f:
5c:8c:ec:bb:ca:36:83:2b:a3:a4:15:36:fd:0e:50:2c:33:80:
0e:cd:08:b1:14:4b:a7:61:f5:44:d8:25:8b:03:69:d0:74:40:
32:fd:d7:08:f2:ac:ae:40:50:de:67:88:5d:ef:ca:7a:f8:df:
ec:09:a7:d3:72:df:87:d8:76:00:75:56:95:6b:c4:81:d6:65:
2a:2e:aa:ec:34:c4:8d:a6:2b:ed:4e:81:4a:4c:70:6d:51:7e:
14:b2:c1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:30:25 2025 by rpki-client