Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37322e302f32342d3234203d3e20323634343936.roa
File: 3137302e3233382e37322e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier: r+TTnMS3zRt/CRot52S2kTNKDMu5Dz/n+FBcZaZX1P0=
Subject key identifier: 07:0D:C0:B6:DE:D2:47:A2:AB:06:0A:E1:04:FA:D6:72:30:6B:52:AC
Certificate issuer: /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial: 0B54B2A1016B152DA887AAC4653D48590D3584A0
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37322e302f32342d3234203d3e20323634343936.roa
Signing time: Wed 26 Feb 2025 14:47:21 +0000
ROA not before: Wed 26 Feb 2025 14:42:21 +0000
ROA not after: Wed 25 Feb 2026 14:47:21 +0000
asID: 264496
IP address blocks: 170.238.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:54:b2:a1:01:6b:15:2d:a8:87:aa:c4:65:3d:48:59:0d:35:84:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Validity
Not Before: Feb 26 14:42:21 2025 GMT
Not After : Feb 25 14:47:21 2026 GMT
Subject: CN=070DC0B6DED247A2AB060AE104FAD672306B52AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:96:b6:0c:26:1e:66:21:e9:f0:7b:d2:98:
25:73:82:d5:fd:43:fe:00:27:c9:c2:28:f6:2a:05:
91:57:b4:d4:69:98:f9:49:43:af:e2:02:7c:41:1f:
13:34:e3:23:bd:b9:96:c2:57:93:0f:cb:6c:e1:92:
99:da:06:0c:44:d3:c2:59:ca:73:65:d8:f6:a4:a9:
32:42:78:22:4a:11:f5:fb:5a:d8:b7:44:6d:ae:79:
1d:f8:50:32:c9:48:65:62:a6:6c:20:73:67:23:9d:
62:7b:e3:f8:29:b0:25:a3:55:8e:6f:f0:3f:b2:a6:
45:af:41:0f:01:a2:12:ea:8c:59:82:3f:a4:3a:e2:
60:87:27:bf:b5:29:1e:1d:4d:6f:2f:03:2b:e8:2a:
73:39:80:81:3d:7b:70:8b:d9:09:62:f6:c2:57:99:
a2:7e:32:2a:bf:7d:4d:d1:5a:49:2e:ff:24:2c:1c:
aa:9d:64:8e:b5:fd:e6:01:e0:8b:36:6f:3b:2b:63:
55:86:a7:ee:17:c3:e1:d7:8d:0d:16:0f:6e:2e:0e:
25:75:56:9e:80:b0:18:0b:46:d5:c2:8a:40:29:0d:
14:0e:df:db:df:94:47:5d:2c:64:ed:27:3c:89:e1:
c4:5f:3a:ca:e0:e0:de:bd:55:e0:8a:e2:21:cd:39:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0D:C0:B6:DE:D2:47:A2:AB:06:0A:E1:04:FA:D6:72:30:6B:52:AC
X509v3 Authority Key Identifier:
keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37322e302f32342d3234203d3e20323634343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:87:5f:0c:ed:b7:5e:e9:62:58:cc:80:bb:74:56:e0:8f:d1:
ad:0f:54:26:92:cc:48:18:3b:37:6d:fe:ff:45:04:eb:4f:38:
b5:14:0c:35:6b:2a:e3:fe:87:a2:37:dc:5b:49:64:f5:cc:21:
67:20:59:f2:08:c1:de:4b:81:4e:35:fa:8d:22:10:fa:e7:9d:
06:1a:52:b5:9f:0a:2c:24:3f:06:1a:3f:41:8d:6e:83:e2:05:
a3:1e:b5:b6:c2:47:33:87:12:ef:f9:01:e6:f7:72:c0:bd:b0:
99:3e:bc:ed:31:c1:97:07:86:cd:95:01:72:7f:68:0c:86:15:
16:25:c1:e7:a7:3e:53:56:ef:0d:12:6c:99:7d:7a:18:97:99:
1b:9b:92:64:fe:84:83:9b:c0:20:58:04:c2:72:1c:88:19:ae:
83:26:b0:04:fb:37:33:6d:59:36:1c:22:63:05:fb:a9:ef:78:
81:93:fe:56:07:29:47:f0:d6:4a:a5:ec:dd:56:e6:b7:7c:25:
01:82:61:2e:6b:72:f3:6c:65:a8:2e:dd:72:2d:9b:5f:1c:a0:
7a:eb:bf:b0:47:4b:dc:63:1c:a7:8d:79:ce:0a:20:0e:00:54:
1f:a7:40:1f:ac:e9:1b:db:0d:41:4c:63:f8:51:6a:89:72:06:
67:0d:c7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:58 2025 by rpki-client