Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa
File: 3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa (raw, json)
Hash identifier: k79So//zDTkWGYs9XQtRp0GENZ9hVW3gNYK2aNkhAKk=
Subject key identifier: 02:B6:E6:0D:1B:D5:81:03:6D:91:50:75:C4:60:9E:66:11:05:57:2A
Certificate issuer: /CN=F350A9A60C94593716E8BF7D10666C1777A7789E
Certificate serial: 560F7BBCA885DF358B034FC2ED54D2260FB53F27
Authority key identifier: F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa
Signing time: Wed 22 Jan 2025 01:25:11 +0000
ROA not before: Wed 22 Jan 2025 01:20:11 +0000
ROA not after: Wed 21 Jan 2026 01:25:11 +0000
asID: 61621
IP address blocks: 170.231.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:0f:7b:bc:a8:85:df:35:8b:03:4f:c2:ed:54:d2:26:0f:b5:3f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F350A9A60C94593716E8BF7D10666C1777A7789E
Validity
Not Before: Jan 22 01:20:11 2025 GMT
Not After : Jan 21 01:25:11 2026 GMT
Subject: CN=02B6E60D1BD581036D915075C4609E661105572A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:54:ad:ed:6c:9b:30:ae:60:ac:5b:dc:aa:
c6:b2:f2:93:62:c0:81:67:79:59:65:ee:b7:be:c8:
5e:c9:32:8c:1a:bd:e0:bf:51:0e:aa:a2:d5:c3:2e:
fc:55:98:2e:fc:4b:ba:01:d3:1e:87:a7:75:4d:96:
cb:fc:82:18:4f:e6:58:de:2a:ba:d2:0a:49:91:f6:
94:e2:97:a5:d5:8a:83:11:1f:69:da:ff:c3:df:86:
fc:38:b1:9a:1b:00:0d:2d:10:b1:a5:3b:c3:12:65:
df:39:61:c5:6d:d7:60:46:9b:31:8d:f6:3d:92:ba:
b6:6c:2d:e8:c7:4d:4e:c6:3b:39:3c:46:de:44:ea:
3d:52:10:98:b9:aa:cb:9c:35:53:23:08:a1:6d:34:
48:18:c3:db:7b:c8:6e:a6:40:e1:28:e3:f2:35:f6:
f7:ed:e6:74:1e:e8:84:d5:80:64:8f:f0:9d:60:8a:
cb:8e:ca:a1:e0:76:4f:a5:17:b3:f6:9a:79:fb:d3:
49:75:e3:da:bf:f8:87:be:de:ba:35:9f:c9:64:7a:
b9:e7:2a:6a:e9:d3:da:7e:63:67:99:6e:97:e2:62:
57:be:1a:5e:ca:d1:0a:64:24:43:66:be:34:06:c4:
10:bc:91:24:d6:1f:01:8c:0b:c9:15:ad:89:53:7c:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B6:E6:0D:1B:D5:81:03:6D:91:50:75:C4:60:9E:66:11:05:57:2A
X509v3 Authority Key Identifier:
keyid:F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.208.0/22
Signature Algorithm: sha256WithRSAEncryption
83:dd:47:28:ac:e4:df:bf:93:73:18:19:ef:8a:cd:97:11:d4:
e6:d7:82:33:1a:cb:88:14:1c:f5:12:45:e1:93:a8:2b:f1:fe:
3b:29:26:c2:fc:44:5c:07:33:e4:ba:6c:1b:a0:b5:cf:c7:c6:
bb:6b:aa:d4:d3:a7:e0:e0:a7:1f:17:f9:5e:4a:ba:c6:10:87:
7e:4d:ed:a8:bf:56:cc:bb:aa:78:fe:41:20:ab:7b:9b:e1:2c:
a3:df:36:f7:41:a3:ce:39:86:75:b7:22:d2:77:d7:25:bb:89:
9c:41:21:b8:f7:f9:83:c7:05:c8:0f:bd:54:7f:94:7e:0f:a4:
dd:94:78:d7:00:67:f4:54:15:c6:c5:ed:99:1b:38:d8:53:33:
b4:6a:32:b5:6a:e5:c6:c5:74:08:36:31:3b:b0:e9:95:07:ff:
5c:40:e5:2f:13:98:55:04:6e:20:08:00:ac:d5:46:e6:e4:22:
35:77:2a:b2:e7:9e:91:a5:2d:8e:63:e2:53:03:a1:2e:d5:82:
d4:6c:0b:e5:76:5d:e5:f6:42:31:66:c4:56:9c:61:c3:20:29:
21:6d:0b:e7:0b:66:b4:90:0b:8d:18:cf:ed:79:19:aa:b5:17:
b2:70:13:c2:75:af:b2:8e:79:55:a7:50:68:13:f8:48:7d:c8:
38:64:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:43:33 2025 by rpki-client