Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3134332e3235352e3230372e302f32342d3234203d3e20323634343936.roa
File: 3134332e3235352e3230372e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier: D8Ggnee+WxgdPvkjxebzFG45OKsqCdSRClxdBCLcass=
Subject key identifier: B2:2B:17:21:B2:87:92:28:9C:9E:CC:D7:87:29:0A:33:94:70:9F:1A
Certificate issuer: /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial: 16D69BF28A4D0B963E8DCF1506164B2960322026
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3134332e3235352e3230372e302f32342d3234203d3e20323634343936.roa
Signing time: Tue 25 Feb 2025 10:18:31 +0000
ROA not before: Tue 25 Feb 2025 10:13:31 +0000
ROA not after: Tue 24 Feb 2026 10:18:31 +0000
asID: 264496
IP address blocks: 143.255.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d6:9b:f2:8a:4d:0b:96:3e:8d:cf:15:06:16:4b:29:60:32:20:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Validity
Not Before: Feb 25 10:13:31 2025 GMT
Not After : Feb 24 10:18:31 2026 GMT
Subject: CN=B22B1721B28792289C9ECCD787290A3394709F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:c2:27:2a:a4:1a:57:bf:4f:c4:d3:27:ec:
10:28:7c:1a:f2:6e:b9:71:7e:44:9c:e0:99:70:81:
1a:fb:aa:ea:e0:ee:e0:bf:cd:67:f1:a3:27:b4:ec:
1d:d0:58:e2:3e:60:0d:23:70:f3:ea:b4:91:82:e2:
28:ac:ad:5f:2b:ac:8e:4c:ad:fe:24:a2:ce:a3:5e:
ee:7e:ec:bd:e3:c4:1d:cc:b3:a6:61:49:e7:82:91:
9f:bd:6b:1e:a7:7f:6e:6f:3b:a0:92:68:b7:fc:bc:
fa:39:06:e9:03:df:3c:2e:85:36:83:8f:93:db:3f:
63:e8:10:72:70:d8:2d:cd:c8:c6:80:99:36:e9:15:
28:83:98:75:4e:3b:c7:f1:8e:85:5f:9a:21:e3:f0:
15:39:4b:db:39:e7:f2:16:07:77:06:6f:bb:02:0b:
92:a6:1b:50:9f:10:bd:d4:63:50:86:72:a0:87:8c:
52:31:74:6f:0d:1c:6f:29:2e:2f:d7:d0:70:3b:98:
b1:ed:c2:88:88:b5:8a:f9:98:8f:0a:17:32:5c:9d:
48:e5:a2:c2:d6:7c:af:d6:01:eb:f4:e6:2f:67:e0:
b3:32:5a:34:00:e2:c6:73:be:3a:76:87:87:1e:ac:
a4:3f:46:23:b3:64:d4:50:a0:52:97:44:99:fb:11:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2B:17:21:B2:87:92:28:9C:9E:CC:D7:87:29:0A:33:94:70:9F:1A
X509v3 Authority Key Identifier:
keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3134332e3235352e3230372e302f32342d3234203d3e20323634343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.207.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b8:11:44:09:36:ee:2f:87:7f:5f:5f:cd:a5:3b:55:3a:ed:
af:eb:1b:65:7b:80:2c:d1:62:6f:58:2d:1c:f3:ce:ef:7b:56:
11:67:fb:46:39:ed:15:97:02:15:6f:0c:59:74:49:b2:fa:22:
bf:b4:99:2e:93:b7:7e:54:ce:e3:22:f1:10:4c:4c:90:b3:06:
b2:d0:36:68:48:28:fd:24:16:40:ed:9c:47:5c:fb:b9:49:54:
fe:e1:91:1b:91:af:6b:b3:6b:5e:61:3f:15:7f:c2:41:8d:e1:
db:1c:43:4a:35:4c:7d:b1:53:7e:98:51:15:f1:53:af:4f:be:
71:87:af:3c:3a:b9:da:84:b5:8f:70:60:ee:60:f9:e4:7f:41:
bd:7b:6e:aa:ec:77:01:9f:a4:b5:84:43:97:48:f0:32:08:19:
b4:37:10:86:f9:a1:aa:3d:66:86:42:68:72:d6:15:dc:5c:58:
c4:fd:90:18:79:aa:fd:64:ce:b8:f9:ab:dd:2e:5e:c6:b6:15:
72:b1:a9:c8:55:e5:1b:27:d5:a2:04:f7:34:20:17:05:ee:71:
64:03:f4:65:5d:80:81:4d:8d:77:47:eb:a8:b9:81:2e:9a:80:
50:99:8c:62:70:54:2b:30:2d:62:c9:b6:b9:24:5a:70:47:2f:
07:01:aa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:45 2025 by rpki-client