Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa
File: 3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa (raw, json)
Hash identifier: eHkd38QbUF4P46f9J5WiW9T2fXm6UmKqzOKA+afn+oQ=
Subject key identifier: A3:1A:56:17:63:8F:F2:58:B8:D4:1A:D1:B5:2B:CE:07:B7:85:8E:B8
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 6849EDB1691A8C4824970B7EAB7B57CABB22DC83
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa
Signing time: Mon 25 Nov 2024 17:03:49 +0000
ROA not before: Mon 25 Nov 2024 16:58:49 +0000
ROA not after: Mon 24 Nov 2025 17:03:49 +0000
asID: 264299
IP address blocks: 170.254.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:49:ed:b1:69:1a:8c:48:24:97:0b:7e:ab:7b:57:ca:bb:22:dc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:58:49 2024 GMT
Not After : Nov 24 17:03:49 2025 GMT
Subject: CN=A31A5617638FF258B8D41AD1B52BCE07B7858EB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:2f:00:ac:29:b9:09:f2:e3:a4:59:4c:50:
26:2f:9e:f3:e5:8c:c0:c9:bf:3b:a8:fd:fe:c5:9f:
70:ce:29:fc:17:24:81:72:42:0c:f9:57:ef:84:f3:
23:bf:b6:4a:a4:5f:46:5d:ea:b7:ae:ee:24:2b:11:
87:f7:a5:e4:49:a5:76:6f:ac:ff:cd:f2:41:30:63:
b3:d4:60:00:86:19:0a:84:05:4e:da:6e:f1:53:56:
5e:33:a4:97:b8:0a:92:ea:cb:c0:16:e3:f1:e9:fc:
e0:2d:27:76:54:11:0d:7c:56:3f:50:b3:a2:e4:69:
8d:18:3c:ba:f4:1d:09:88:23:da:69:d7:ec:b9:46:
3d:3b:6a:a7:ff:a0:4e:c9:0d:57:a5:6b:b2:2b:8e:
c1:51:90:e4:33:72:de:61:35:8e:d3:5c:53:a8:c2:
65:d0:ad:99:ad:88:e9:ec:4f:ec:74:46:c2:4d:c9:
20:ed:88:4d:0f:da:b2:22:7d:fa:ab:1a:d0:e2:f7:
d6:e7:7c:d8:59:d5:93:cb:88:03:18:b5:eb:78:95:
4d:83:59:37:ad:10:29:3c:74:99:f2:59:31:8b:7f:
5a:e3:26:78:6a:48:51:a7:07:08:ee:52:f1:5d:c6:
4d:cc:a5:8b:c1:e6:d9:f3:0f:50:67:04:89:96:f0:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1A:56:17:63:8F:F2:58:B8:D4:1A:D1:B5:2B:CE:07:B7:85:8E:B8
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:7d:da:85:24:47:41:d9:28:14:1a:ad:81:db:d1:c2:e9:de:
69:57:76:23:51:69:99:c2:61:2a:f3:71:8c:9a:d7:dc:12:b3:
11:11:5a:8f:51:1c:3d:fc:78:94:49:52:cd:51:df:b2:e3:03:
fd:2e:56:62:fb:11:e1:03:29:45:74:11:ec:ca:28:c7:12:83:
1f:16:9f:89:03:2e:52:4f:3e:21:3a:27:23:ef:da:b7:ef:35:
3a:eb:16:59:c3:98:73:f2:8f:40:a1:f1:af:f7:05:f9:1a:a2:
57:97:e5:94:96:e9:65:e0:a3:3c:f2:04:b5:c4:c3:36:1f:05:
7b:d3:3e:09:77:aa:5b:05:fd:f6:d2:94:42:4a:80:3c:66:b5:
5f:a8:dc:3d:a2:14:43:10:d0:86:03:fe:ae:a2:8e:f3:31:7e:
f5:1b:db:93:ce:df:13:72:f4:0e:02:62:ae:ab:2e:be:32:74:
de:7f:aa:d4:3f:0f:f8:53:c4:f1:64:e9:8d:06:63:23:cd:3d:
11:8b:67:4f:a0:0f:ff:0d:d2:96:2e:c1:ba:83:3c:cc:52:95:
c5:38:48:16:0d:18:8f:8e:4c:9e:47:b1:d0:fa:bf:65:3d:62:
4b:13:0e:cb:d4:f6:aa:02:7b:8d:ee:9d:ea:61:ad:13:c0:ae:
1e:be:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:18:47 2025 by rpki-client