Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137302e37382e32302e302f32322d3232203d3e20323633323932.roa
File: 3137302e37382e32302e302f32322d3232203d3e20323633323932.roa (raw, json)
Hash identifier: sqDNpapPATutYDdpXmAxIX8Qxh5v9Y+b6mEID2iZEPE=
Subject key identifier: 78:CB:29:43:72:9E:6D:C1:54:05:A1:38:ED:0E:8E:86:57:FA:4D:C6
Certificate issuer: /CN=F69AA99C56F931362559734CF519AD71790C2490
Certificate serial: 0DAC088E2758B19F3E6657398647BEAB1CDE2840
Authority key identifier: F6:9A:A9:9C:56:F9:31:36:25:59:73:4C:F5:19:AD:71:79:0C:24:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69AA99C56F931362559734CF519AD71790C2490.cer
Subject info access: rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137302e37382e32302e302f32322d3232203d3e20323633323932.roa
Signing time: Tue 03 Sep 2024 23:17:37 +0000
ROA not before: Tue 03 Sep 2024 23:12:37 +0000
ROA not after: Tue 02 Sep 2025 23:17:37 +0000
asID: 263292
IP address blocks: 170.78.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ac:08:8e:27:58:b1:9f:3e:66:57:39:86:47:be:ab:1c:de:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69AA99C56F931362559734CF519AD71790C2490
Validity
Not Before: Sep 3 23:12:37 2024 GMT
Not After : Sep 2 23:17:37 2025 GMT
Subject: CN=78CB2943729E6DC15405A138ED0E8E8657FA4DC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:31:b4:79:d6:18:bc:22:e1:ff:a5:7e:31:
3d:0f:20:97:f9:27:97:dc:c2:26:ba:0b:e3:d4:0a:
ce:a3:22:ee:c3:a7:ae:36:2a:15:d0:54:44:50:2c:
7a:74:bc:a5:ec:5f:02:f5:08:4b:de:75:fc:74:40:
82:7b:a5:00:98:08:4b:d6:45:b0:24:c1:1f:24:00:
67:f7:cf:0b:96:d2:a5:9f:21:19:c2:81:f9:ef:02:
df:7d:8e:54:f2:41:16:6e:af:d0:f6:7b:8a:49:80:
b6:2b:4d:36:a6:2b:1f:58:97:36:1c:61:7f:75:ac:
23:6a:37:84:88:a2:69:f5:4a:33:ba:e1:ce:a7:c7:
33:dd:34:03:95:ec:d8:da:34:34:c8:fc:74:3d:30:
5e:f3:87:c4:73:5c:ff:d2:97:4e:89:1b:2e:99:3b:
8f:19:bd:92:c0:59:07:52:01:db:a1:1d:c2:bf:70:
45:fb:d5:03:2e:6d:d7:4c:3b:46:d3:e4:9c:db:d5:
17:d8:bd:c9:1a:71:9d:aa:d3:41:d2:c4:86:3a:71:
81:3f:44:0d:8f:c3:1b:d3:6c:e5:ae:0f:d6:61:f8:
cb:a3:45:2f:30:22:81:c0:e3:70:c3:ef:6d:ec:5f:
6a:10:fc:9f:03:5c:31:89:56:a8:aa:e7:97:ff:94:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CB:29:43:72:9E:6D:C1:54:05:A1:38:ED:0E:8E:86:57:FA:4D:C6
X509v3 Authority Key Identifier:
keyid:F6:9A:A9:9C:56:F9:31:36:25:59:73:4C:F5:19:AD:71:79:0C:24:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/F69AA99C56F931362559734CF519AD71790C2490.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69AA99C56F931362559734CF519AD71790C2490.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137302e37382e32302e302f32322d3232203d3e20323633323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.20.0/22
Signature Algorithm: sha256WithRSAEncryption
44:fa:03:a3:39:3a:68:1c:0f:8c:77:3d:f8:64:19:ba:47:b8:
1a:54:87:2f:b2:35:cd:21:68:cb:55:e1:5b:41:c2:ab:71:18:
fe:9d:cc:eb:8a:e9:05:92:a8:6a:55:04:60:01:bd:4a:b9:60:
e6:a6:a8:91:ee:00:a0:18:ad:d6:67:66:95:e9:ab:af:61:40:
d0:cd:d0:19:fa:1c:d9:c1:4d:78:6e:0e:f1:04:f5:64:24:52:
40:86:69:ff:dc:20:aa:48:b3:83:8a:14:c0:9a:2e:1f:ba:1f:
cc:7f:1d:11:50:28:50:5e:63:e9:7a:79:8a:6f:d2:de:e7:fa:
1d:5b:16:e2:3d:8d:08:ab:05:c1:82:89:72:3c:fb:6a:a2:14:
9b:be:25:92:d0:b1:ff:19:2c:6c:f6:c2:5f:d3:26:59:b4:7a:
e9:80:e8:9e:7a:c0:35:72:05:06:b5:e7:95:49:ab:a8:8d:6e:
88:e6:ce:90:b4:fb:69:fe:1d:f4:f9:15:94:65:3c:fc:e4:13:
b8:c6:56:c7:fd:35:7a:59:1c:a7:17:10:7d:c0:90:c7:78:e2:
c8:86:1c:2f:d8:45:6f:2d:2c:cd:48:4e:d9:12:81:8c:79:32:
55:b9:5d:aa:c8:ea:17:64:ed:4f:63:2e:19:9e:18:b6:5a:19:
14:4d:9c:3a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUDawIjidYsZ8+Zlc5hke+qxzeKEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY5QUE5OUM1NkY5MzEzNjI1NTk3MzRDRjUxOUFENzE3
OTBDMjQ5MDAeFw0yNDA5MDMyMzEyMzdaFw0yNTA5MDIyMzE3MzdaMDMxMTAvBgNV
BAMTKDc4Q0IyOTQzNzI5RTZEQzE1NDA1QTEzOEVEMEU4RTg2NTdGQTREQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+jG0edYYvCLh/6V+MT0PIJf5
J5fcwia6C+PUCs6jIu7Dp642KhXQVERQLHp0vKXsXwL1CEvedfx0QIJ7pQCYCEvW
RbAkwR8kAGf3zwuW0qWfIRnCgfnvAt99jlTyQRZur9D2e4pJgLYrTTamKx9YlzYc
YX91rCNqN4SIomn1SjO64c6nxzPdNAOV7NjaNDTI/HQ9MF7zh8RzXP/Sl06JGy6Z
O48ZvZLAWQdSAduhHcK/cEX71QMubddMO0bT5Jzb1RfYvckacZ2q00HSxIY6cYE/
RA2PwxvTbOWuD9Zh+MujRS8wIoHA43DD723sX2oQ/J8DXDGJVqiq55f/lBwBAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUeMspQ3KebcFUBaE47Q6Ohlf6TcYwHwYDVR0j
BBgwFoAU9pqpnFb5MTYlWXNM9RmtcXkMJJAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9icWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendG
LzAvRjY5QUE5OUM1NkY5MzEzNjI1NTk3MzRDRjUxOUFENzE3OTBDMjQ5MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GNjlBQTk5QzU2RjkzMTM2MjU1
OTczNENGNTE5QUQ3MTc5MEMyNDkwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9i
cWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendGLzAvMzEz
NzMwMmUzNzM4MmUzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMzMzIz
OTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCqk4UMA0GCSqGSIb3DQEBCwUAA4IBAQBE+gOjOTpoHA+M
dz34ZBm6R7gaVIcvsjXNIWjLVeFbQcKrcRj+nczriukFkqhqVQRgAb1KuWDmpqiR
7gCgGK3WZ2aV6auvYUDQzdAZ+hzZwU14bg7xBPVkJFJAhmn/3CCqSLODihTAmi4f
uh/Mfx0RUChQXmPpenmKb9Le5/odWxbiPY0IqwXBgolyPPtqohSbviWS0LH/GSxs
9sJf0yZZtHrpgOieesA1cgUGteeVSauojW6I5s6QtPtp/h30+RWUZTz85BO4xlbH
/TV6WRynFxB9wJDHeOLIhhwv2EVvLSzNSE7ZEoGMeTJVuV2qyOoXZO1PYy4Znhi2
WhkUTZw6
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:20 2025 by rpki-client