Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230332e302f32342d3234203d3e20323633323536.roa
File: 3137302e3234372e3230332e302f32342d3234203d3e20323633323536.roa (raw, json)
Hash identifier: Jj2/JAQy0Dkah2L8VDgSHtctaG7tvgWadv6IsI3XH8Q=
Subject key identifier: 61:5D:61:0E:8C:C8:19:BD:22:F1:ED:0C:0E:01:35:17:5D:6C:14:8E
Certificate issuer: /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial: 3794032835473F5EFF2D80BB15AFC847B1F35E6A
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230332e302f32342d3234203d3e20323633323536.roa
Signing time: Fri 10 Jan 2025 16:41:54 +0000
ROA not before: Fri 10 Jan 2025 16:36:54 +0000
ROA not after: Fri 09 Jan 2026 16:41:54 +0000
asID: 263256
IP address blocks: 170.247.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:94:03:28:35:47:3f:5e:ff:2d:80:bb:15:af:c8:47:b1:f3:5e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Validity
Not Before: Jan 10 16:36:54 2025 GMT
Not After : Jan 9 16:41:54 2026 GMT
Subject: CN=615D610E8CC819BD22F1ED0C0E0135175D6C148E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:81:2e:25:06:c7:e9:20:82:21:5a:cc:e6:
b8:5c:c5:73:0e:39:72:d0:15:33:ac:f9:d4:4e:ff:
b0:d0:52:bc:7c:c7:70:ed:af:f4:2a:16:5a:2d:4d:
9a:c1:28:9f:9e:4d:42:44:53:18:6d:e3:25:36:3d:
74:44:65:ec:90:bd:6d:23:42:a3:12:b2:41:28:a5:
3e:14:1e:6a:84:12:f8:5a:60:6d:b1:5f:08:4a:5d:
48:7b:61:de:1a:d6:e8:58:92:97:21:ec:91:44:95:
ba:fe:3f:5a:28:6e:91:9c:f2:4b:ba:d8:b9:6f:b0:
55:32:66:07:79:6e:90:fb:6c:ad:31:92:49:8a:33:
1d:55:64:c4:54:d2:b5:79:f4:0f:29:fe:20:10:59:
d9:8e:64:08:89:c7:7a:4a:f2:76:21:c0:45:74:0e:
12:43:e5:34:a8:af:97:8f:8b:f3:14:55:81:fc:83:
52:4b:b2:b6:81:95:5b:ff:ee:0b:ea:56:55:23:ee:
90:22:3f:bc:30:e0:86:94:e1:90:91:e4:bc:3c:0d:
59:83:c8:37:0b:5e:e2:e0:04:8a:8e:06:77:6e:3b:
37:0d:95:9b:57:2e:2d:e5:d1:6a:de:c0:b9:73:39:
43:00:c9:e5:b1:cc:92:76:bd:b0:f7:7e:62:6f:0e:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:61:0E:8C:C8:19:BD:22:F1:ED:0C:0E:01:35:17:5D:6C:14:8E
X509v3 Authority Key Identifier:
keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230332e302f32342d3234203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.203.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b8:90:7f:c0:c3:3e:c1:f6:b3:00:1b:99:1b:4f:63:3b:21:
88:4f:70:dc:56:7c:58:e2:5b:f5:b4:c7:68:c1:8f:50:a8:e8:
2d:64:34:c7:eb:8c:a6:9b:14:c7:49:6a:fe:31:77:fc:0e:cd:
2b:72:14:7e:94:78:5b:1b:89:19:28:8a:18:d2:9c:00:2b:67:
3b:92:20:40:6d:69:c8:b8:8f:7f:3a:a4:08:a5:e0:54:64:5f:
fc:92:02:26:bb:9a:dd:1c:89:73:cd:a4:f2:70:b3:06:73:66:
18:2c:29:0e:39:53:51:46:2d:9d:f8:75:ab:dc:cf:80:ca:f7:
8e:7a:70:3d:6a:68:b0:86:4d:02:42:e3:fb:b3:8a:b1:06:8b:
92:06:4e:e4:04:82:2a:c8:83:c9:75:27:44:3f:c3:74:6b:88:
4c:f7:cc:94:b1:74:79:f0:44:1a:68:7f:35:9f:33:26:8f:10:
8f:e9:e0:09:ac:87:11:96:75:7d:cf:8f:32:a0:62:4e:1f:c4:
25:6e:a6:3f:20:eb:fc:58:e1:25:e2:14:e3:75:0a:64:63:85:
db:bb:4f:5d:5b:f2:6f:2e:c0:05:1c:33:48:3f:9a:8d:50:4b:
c0:c3:df:00:ce:04:5b:89:16:ac:22:55:23:0f:22:44:bf:c0:
61:01:43:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:47:17 2025 by rpki-client