Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa
File: 3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa (raw, json)
Hash identifier: 2zslkVGhELzRCKPMOYVfKhCU7Ml3/1nsZpxhG02X8iA=
Subject key identifier: D8:FC:E9:A5:5A:B5:1B:FF:B9:86:C2:34:40:65:A3:02:83:85:2F:9A
Certificate issuer: /CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
Certificate serial: 5792917CC21D8DB70724C96CB56C43173D0D9291
Authority key identifier: 10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa
Signing time: Thu 06 Mar 2025 04:42:07 +0000
ROA not before: Thu 06 Mar 2025 04:37:07 +0000
ROA not after: Thu 05 Mar 2026 04:42:07 +0000
asID: 266448
IP address blocks: 170.82.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:92:91:7c:c2:1d:8d:b7:07:24:c9:6c:b5:6c:43:17:3d:0d:92:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
Validity
Not Before: Mar 6 04:37:07 2025 GMT
Not After : Mar 5 04:42:07 2026 GMT
Subject: CN=D8FCE9A55AB51BFFB986C2344065A30283852F9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:40:dc:59:88:c5:02:67:8d:08:02:61:01:
fb:77:70:76:73:7d:e4:42:43:d7:d4:16:18:0f:7a:
da:64:6b:ee:f7:51:5c:0a:0e:e7:ea:36:56:a3:83:
b7:ce:28:69:ed:52:f0:af:9f:e0:0c:a5:34:f6:7e:
b4:c7:f5:49:19:b2:60:7b:07:cf:91:d3:8b:d5:ca:
88:e6:5d:c7:89:8a:6c:e4:f1:aa:08:1a:45:dc:ee:
b1:c3:bf:25:c1:7b:0f:48:1d:05:cc:1d:74:01:b6:
a5:05:a4:2b:82:84:67:0b:32:3b:25:4f:f2:6a:66:
e0:88:37:7f:b0:59:37:1e:8b:59:d8:de:c1:1a:bf:
07:ed:a6:5b:28:cf:52:b3:92:f0:c0:6c:ca:0b:a6:
ee:4f:5c:77:41:71:2f:61:6c:e6:4b:f0:0b:af:b7:
82:93:65:c9:3b:3e:20:3a:26:fb:73:49:5a:83:a5:
c1:ab:ae:b0:66:99:36:d0:6c:02:c0:cc:7d:79:e0:
10:68:e8:e4:30:39:d6:4a:ac:51:d4:36:d4:a8:1c:
e2:5c:d4:9b:e1:4f:2a:8a:ed:ee:6b:f0:d5:b8:92:
f0:1f:e1:6e:c9:13:ae:e5:df:6c:6f:36:fa:3a:f4:
91:21:af:d1:e7:b1:9f:00:e8:b1:72:cb:dc:1c:60:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FC:E9:A5:5A:B5:1B:FF:B9:86:C2:34:40:65:A3:02:83:85:2F:9A
X509v3 Authority Key Identifier:
keyid:10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.220.0/22
Signature Algorithm: sha256WithRSAEncryption
34:20:ec:d5:78:8d:4f:8f:63:71:57:8e:94:64:6e:ab:e8:27:
52:e9:14:87:c2:2e:7d:1d:a3:26:5e:79:9a:7a:15:16:8f:c2:
bf:cc:42:48:54:45:01:f7:90:dc:1c:fa:f8:5e:de:6d:fd:c9:
2d:8c:b5:5c:83:ec:1c:33:0a:ee:18:9d:22:70:89:c9:33:0b:
f4:43:3b:1e:5d:19:d7:34:01:c5:7a:87:8a:02:9b:9f:20:3d:
d7:e1:77:ef:50:60:08:ea:40:6c:96:ef:53:6b:b1:9c:4e:ff:
de:c7:37:65:a8:1e:cd:6d:1b:0a:11:e1:83:a2:46:59:1d:da:
6f:47:24:10:16:5f:9e:94:f9:1f:0b:88:3b:aa:80:ec:4b:4a:
d0:21:94:06:d8:75:2c:e3:38:c2:b3:bf:b6:d1:3b:17:23:b4:
34:c3:2a:ac:50:51:f7:d6:c9:0e:1e:0b:b4:b1:b5:75:bf:4f:
d4:f1:30:d6:cc:22:dd:79:c0:1f:e1:19:81:2b:13:34:95:8c:
88:80:cd:5c:cf:7a:21:44:fa:2f:44:02:f0:0e:0a:e8:14:c6:
7d:8e:b5:ee:13:ae:c4:b4:7d:b2:16:f2:ff:84:93:d6:74:b4:
5e:d0:fb:27:e4:64:eb:14:50:02:4d:57:64:7a:f1:9f:1e:42:
fc:95:8f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 15:00:20 2025 by rpki-client