Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa
File: 3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier: FeV5uZMbJMxlB33XBgdezk8k6de9Z1qIL0ynWKYSgwQ=
Subject key identifier: 34:FA:DB:14:19:56:9D:43:05:DB:C8:ED:41:C2:45:F2:F9:0A:E1:15
Certificate issuer: /CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Certificate serial: 4AE96E3BC1A6F3E7FF387C24E3FA5068774E77AA
Authority key identifier: D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa
Signing time: Mon 10 Feb 2025 17:25:09 +0000
ROA not before: Mon 10 Feb 2025 17:20:09 +0000
ROA not after: Mon 09 Feb 2026 17:25:09 +0000
asID: 265080
IP address blocks: 170.233.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e9:6e:3b:c1:a6:f3:e7:ff:38:7c:24:e3:fa:50:68:77:4e:77:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Validity
Not Before: Feb 10 17:20:09 2025 GMT
Not After : Feb 9 17:25:09 2026 GMT
Subject: CN=34FADB1419569D4305DBC8ED41C245F2F90AE115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:08:a7:f1:9a:79:d2:62:0a:dc:d4:19:f3:
b9:c3:65:2c:e8:85:7c:77:e4:6d:dc:a2:26:bd:48:
69:40:22:4c:b3:8c:df:db:2b:e5:0c:cf:f0:75:c2:
3b:d8:34:3b:31:6c:ad:ca:be:40:fc:fc:33:be:2f:
99:71:ad:13:6c:47:38:20:38:d3:ab:9d:20:4f:7e:
38:70:8c:6a:72:18:bb:29:9e:b3:a8:26:b0:be:96:
01:cf:70:f5:74:22:c2:27:e5:10:09:51:de:7c:42:
3b:2c:82:b4:62:a1:f2:7c:da:c5:b3:fa:e3:a7:5a:
91:61:f5:b7:e3:cd:b6:68:c1:bf:43:87:51:9b:e2:
15:c8:23:c5:87:81:14:d2:03:f6:06:6a:4f:0d:d0:
66:c7:9d:42:93:3c:df:21:9b:aa:94:61:91:e0:f5:
1f:2a:d2:d3:5d:b5:be:c8:93:55:f1:6c:a2:d0:0f:
af:ec:8d:f4:ee:f3:bd:59:84:4d:e3:a3:43:33:03:
5a:39:0e:e5:13:74:2e:10:50:8d:8e:6a:49:50:d1:
7b:45:f0:19:c9:ec:85:8e:af:18:34:6d:1c:c6:09:
73:b5:11:54:23:71:76:97:3b:11:dc:18:9b:40:d4:
56:bd:74:42:6d:65:29:96:13:d1:ea:5c:9a:fc:ea:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FA:DB:14:19:56:9D:43:05:DB:C8:ED:41:C2:45:F2:F9:0A:E1:15
X509v3 Authority Key Identifier:
keyid:D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.120.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1b:60:6c:b2:2a:86:cf:f1:89:fd:4b:da:d4:c3:a7:5d:7f:
88:22:a3:2b:4c:02:38:da:80:ea:c2:42:3f:23:9e:4a:64:9d:
c0:57:c7:29:79:4d:43:59:cd:94:3f:5d:1a:d5:4b:11:5e:e7:
98:3f:58:87:71:1e:d8:13:65:a5:3c:c5:aa:0c:3a:1b:77:3d:
a2:17:be:49:c9:66:b6:93:c2:22:6f:1d:b9:7a:da:12:83:83:
da:9c:b6:fc:08:33:3c:3e:34:3e:db:27:4b:cf:6f:e8:3d:53:
c5:51:2d:7e:c7:ac:65:ad:fb:ef:95:fe:45:bf:00:73:59:7c:
38:0d:60:35:bd:b8:1a:70:c0:a2:01:bc:02:80:b4:f2:51:2e:
1a:f8:f8:e1:04:44:46:fb:6f:5c:47:c2:a7:ab:aa:ce:17:9e:
83:cb:bc:91:f2:c1:75:79:2d:4b:65:be:ec:1c:64:5f:f9:ad:
39:84:b2:7a:65:4e:cd:08:a5:23:55:02:b5:10:dc:8e:28:9e:
43:05:b3:0f:37:8b:50:45:48:75:e2:38:93:c8:cd:8f:0b:49:
e2:56:46:d2:86:0e:d0:03:ca:29:33:a6:83:8a:25:60:75:b8:
7f:ec:d0:34:6a:89:bd:78:ed:4e:a2:d1:91:d9:e0:db:31:fe:
07:39:12:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:26 2025 by rpki-client