Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137302e3233392e33362e302f32322d3234203d3e20323633313531.roa
File: 3137302e3233392e33362e302f32322d3234203d3e20323633313531.roa (raw, json)
Hash identifier: AlsOpILNDut9Uq7S2qsDodegEwgp5fJF/7EF6g5SYhg=
Subject key identifier: 49:A1:56:35:F7:72:9C:4F:52:CD:79:CB:23:C6:EC:5D:07:F3:9D:20
Certificate issuer: /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial: 7115A2D857E91258299C3DCBE47617360BA217F9
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137302e3233392e33362e302f32322d3234203d3e20323633313531.roa
Signing time: Mon 10 Mar 2025 15:25:36 +0000
ROA not before: Mon 10 Mar 2025 15:20:36 +0000
ROA not after: Mon 09 Mar 2026 15:25:36 +0000
asID: 263151
IP address blocks: 170.239.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:15:a2:d8:57:e9:12:58:29:9c:3d:cb:e4:76:17:36:0b:a2:17:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Validity
Not Before: Mar 10 15:20:36 2025 GMT
Not After : Mar 9 15:25:36 2026 GMT
Subject: CN=49A15635F7729C4F52CD79CB23C6EC5D07F39D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:96:e9:14:d7:dc:dd:69:63:ed:13:58:e9:
64:74:d7:da:09:6e:f2:e2:12:cc:92:df:00:ef:fb:
07:ac:31:35:07:40:d8:ee:9c:4e:95:cd:d6:cd:1f:
8b:db:e8:1b:88:52:32:8c:f2:7a:ca:a8:94:64:e9:
ce:c0:41:ba:a7:fa:1b:13:db:74:07:f2:6c:f1:a0:
0c:8c:63:d0:6a:af:0a:89:e3:1d:aa:a6:82:fc:2f:
7e:5f:45:6b:25:82:87:a0:ef:0d:6c:9d:7a:52:e2:
61:c2:d9:9e:38:88:e2:ce:c7:6e:e1:3a:24:fb:4a:
4b:37:63:df:cb:89:17:87:31:75:4b:51:d8:eb:a3:
15:87:ac:1d:3f:9b:58:26:83:26:90:f2:97:58:e6:
1b:9d:df:0a:4a:a1:5a:75:c9:0e:96:2a:8b:71:08:
23:c9:b7:f5:d9:89:5e:d6:c5:de:fb:0b:36:1d:2b:
e6:55:22:7a:40:cf:8c:c9:72:98:2b:80:14:bb:48:
dd:04:d4:c5:5b:de:66:00:26:1a:db:23:aa:1e:a5:
26:20:78:03:e2:6f:eb:0c:a0:04:bf:89:12:97:bf:
14:2d:0a:54:84:a0:c7:9e:d5:21:69:44:68:e0:b3:
5e:5b:24:3b:63:2e:5d:ae:99:65:ac:e8:20:5b:7a:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A1:56:35:F7:72:9C:4F:52:CD:79:CB:23:C6:EC:5D:07:F3:9D:20
X509v3 Authority Key Identifier:
keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137302e3233392e33362e302f32322d3234203d3e20323633313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.36.0/22
Signature Algorithm: sha256WithRSAEncryption
26:37:57:e6:17:fa:f0:14:4e:b9:97:c0:29:70:76:3a:7e:65:
d5:11:7a:8d:89:e7:f3:37:ee:04:60:b2:5e:5c:40:12:8b:16:
b1:cb:6b:1b:af:52:34:dd:d1:f4:10:50:9d:a3:5a:45:06:83:
e8:9d:0e:97:3d:49:a3:bf:11:f8:b6:e0:73:4d:7e:c8:d6:a6:
f9:db:70:7c:ac:e9:65:d1:29:75:b6:3a:fd:67:5a:d1:05:96:
78:3f:be:b6:7f:58:3e:1d:fe:1f:34:b1:5b:ad:d1:51:2e:62:
43:8f:46:9a:ca:79:31:44:17:4d:e0:d2:7a:21:0f:f4:4e:22:
20:74:ce:50:80:99:c9:76:ef:23:3e:d7:1a:a5:74:1b:bd:b9:
6a:93:6c:64:90:7e:50:02:b1:cb:63:68:45:d9:88:ad:d7:91:
33:ac:61:4f:94:71:45:2b:88:86:77:f7:fe:07:92:26:40:48:
29:e2:f6:8c:4d:2e:5b:c1:de:98:28:8d:84:f3:42:90:3a:d2:
95:c5:8e:bc:f2:0f:36:6b:c5:ad:9d:17:37:c6:6e:75:ef:2f:
b1:63:e4:0a:fb:f5:06:af:68:fd:0b:c3:1c:50:24:75:b9:13:
c7:a6:c1:1b:0f:02:0c:10:ba:30:ed:67:59:17:a1:9e:7c:54:
c7:a4:54:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:45 2025 by rpki-client