Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/3137302e3135302e32342e302f32322d3234203d3e203631383930.roa
File: 3137302e3135302e32342e302f32322d3234203d3e203631383930.roa (raw, json)
Hash identifier: fkNTn5BqMgCsiULgiO57iSa8xVZZx+ujpZ8MUG0aMpc=
Subject key identifier: DF:DC:B9:CF:96:21:C5:E2:43:C9:F9:80:FA:79:2E:51:46:B4:8E:25
Certificate issuer: /CN=5FA7CB850A2B0CBC348574695F2F5CF499586904
Certificate serial: 4A32B193BF225B96223AD2105CAED90007488CE0
Authority key identifier: 5F:A7:CB:85:0A:2B:0C:BC:34:85:74:69:5F:2F:5C:F4:99:58:69:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/3137302e3135302e32342e302f32322d3234203d3e203631383930.roa
Signing time: Thu 06 Mar 2025 19:08:22 +0000
ROA not before: Thu 06 Mar 2025 19:03:22 +0000
ROA not after: Thu 05 Mar 2026 19:08:22 +0000
asID: 61890
IP address blocks: 170.150.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:32:b1:93:bf:22:5b:96:22:3a:d2:10:5c:ae:d9:00:07:48:8c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA7CB850A2B0CBC348574695F2F5CF499586904
Validity
Not Before: Mar 6 19:03:22 2025 GMT
Not After : Mar 5 19:08:22 2026 GMT
Subject: CN=DFDCB9CF9621C5E243C9F980FA792E5146B48E25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:3c:de:8d:8c:fe:e9:4a:2d:a3:9c:9a:a7:
89:1c:8d:08:11:bd:fe:f1:ab:48:00:e7:6b:f1:c4:
30:a7:3b:12:28:1d:98:50:04:0d:34:2e:91:ea:bc:
a5:f2:46:ed:eb:ec:c7:3b:f3:a3:f1:16:82:b9:04:
dd:7f:53:00:f6:00:18:e8:20:60:a1:c9:1a:c1:95:
42:b7:97:6a:6d:2e:5b:dd:70:60:c4:89:77:dd:70:
95:de:a3:27:a8:b7:26:c2:fb:8d:e9:9a:bd:9f:e2:
c4:22:e7:85:58:61:7d:a3:79:84:81:bd:9d:ff:8a:
35:5f:ff:b6:51:d4:49:aa:d7:d2:07:1e:55:0a:84:
98:5f:5b:bb:48:2c:20:85:b4:ee:69:5a:02:0b:88:
56:50:56:25:56:e0:df:6e:b5:bb:f8:41:d8:aa:24:
6b:fe:ba:60:fa:ed:c6:23:24:9b:46:ec:2d:b8:1b:
29:e2:3b:b6:76:53:08:60:be:2b:de:e7:49:1e:1a:
7f:78:b0:b5:31:51:b5:73:f7:a6:f8:1f:93:3d:eb:
f7:04:9f:93:b4:21:a6:b9:f9:53:3e:7f:8b:4d:7a:
14:21:a0:ed:ef:18:bd:b9:d4:2a:35:19:4e:3d:0a:
68:7d:55:91:30:10:9b:0d:a6:e3:92:ef:56:67:3c:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DC:B9:CF:96:21:C5:E2:43:C9:F9:80:FA:79:2E:51:46:B4:8E:25
X509v3 Authority Key Identifier:
keyid:5F:A7:CB:85:0A:2B:0C:BC:34:85:74:69:5F:2F:5C:F4:99:58:69:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/3137302e3135302e32342e302f32322d3234203d3e203631383930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.24.0/22
Signature Algorithm: sha256WithRSAEncryption
28:2d:f1:c8:a5:f9:f6:79:d5:db:1b:05:b2:4a:a0:dd:3c:df:
2a:22:67:3e:be:37:42:c9:85:46:73:36:07:57:20:e2:cc:63:
70:e3:ee:b2:30:e6:2f:e8:6e:07:05:a0:22:20:0e:8c:16:c6:
6c:7f:4e:1c:12:a8:f9:52:b4:97:4b:1b:2e:1e:9f:e9:05:5c:
56:32:17:e9:35:9f:db:72:79:a2:9f:a0:36:9f:37:ec:a3:3e:
b6:ca:7b:ff:7c:4c:b7:33:37:c8:b5:0e:b9:2f:e4:c0:c7:0c:
f7:68:c7:d1:a8:2c:1d:a7:87:a5:a2:52:20:c1:ce:a7:10:a9:
95:ea:d4:90:e6:da:7d:0b:f8:71:b4:64:cf:85:c4:6b:30:9e:
49:3b:42:43:bc:54:2c:8d:4e:44:17:3b:86:62:a4:45:25:07:
38:2f:23:36:45:b1:61:75:8e:f5:ed:7f:1f:e7:47:99:27:58:
36:b8:ed:ce:70:fb:e5:57:e1:be:92:ee:1f:bf:09:31:f1:89:
89:c1:9a:29:86:6b:e2:35:2d:02:42:4e:7c:f4:4e:7b:69:a4:
61:7b:0c:9d:a9:5b:dd:a6:e2:2f:18:b6:78:3b:9c:04:6c:84:
b9:58:ae:51:94:ce:e3:9c:9d:4a:58:72:f2:de:1a:75:12:47:
4e:bf:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:17:59 2025 by rpki-client