Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3235342e3136302e302f32322d3234203d3e203238323031.roa
File: 3137302e3235342e3136302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: ddFJU9+IA3otvFo0uR5kW0ZzOW9l2VbjqtYOvm2/1y8=
Subject key identifier: 75:47:22:4C:F4:1A:91:27:E1:BE:7E:43:CD:23:A2:EB:95:37:6E:38
Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial: 1ECAA397510B243EDD2BD6EB3402BFCB1AAFDFED
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3235342e3136302e302f32322d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:34:03 +0000
ROA not before: Wed 10 Apr 2024 12:29:03 +0000
ROA not after: Wed 09 Apr 2025 12:34:03 +0000
asID: 28201
IP address blocks: 170.254.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ca:a3:97:51:0b:24:3e:dd:2b:d6:eb:34:02:bf:cb:1a:af:df:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Validity
Not Before: Apr 10 12:29:03 2024 GMT
Not After : Apr 9 12:34:03 2025 GMT
Subject: CN=7547224CF41A9127E1BE7E43CD23A2EB95376E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:a0:a0:2a:94:44:6e:49:93:e2:12:ad:75:
5a:a1:b1:fe:34:b6:9d:2e:a0:78:e6:66:ce:b9:3a:
6f:73:64:83:da:0f:98:9e:0a:4a:ad:58:9b:6e:9c:
3d:2e:fb:6e:bc:e7:76:b8:c1:7f:f5:be:ee:d9:5a:
5e:8a:98:9f:22:4f:99:4b:4a:7f:64:4e:a0:43:9c:
0f:02:da:62:59:2a:07:98:54:80:04:b6:d0:6b:b8:
a1:24:4c:a8:a1:5b:26:0d:25:4c:4d:df:a8:b9:67:
9a:6d:5b:ca:e6:3d:83:13:73:00:b3:8f:e2:b3:99:
3a:7c:4e:70:81:81:13:25:3a:0d:4e:3e:c3:18:76:
88:3d:46:33:19:e3:fe:c2:14:69:4e:a5:37:62:06:
ab:2e:ef:50:1c:04:77:44:eb:ff:e9:35:60:e5:18:
2b:a4:b9:34:4c:42:97:3c:15:f7:3a:24:86:7f:67:
b0:07:65:85:4a:3c:ad:12:74:19:0a:ca:1d:ce:4e:
0d:b1:6e:28:cf:04:c5:b8:3d:96:1c:52:ab:34:ac:
bd:46:ad:50:82:69:0e:5b:70:81:c3:58:1a:a5:4e:
2e:24:f7:78:b4:a8:7c:89:11:47:51:26:a6:32:5e:
ba:b4:45:e3:5c:8a:ab:fd:eb:0b:a5:a6:d1:d4:92:
a3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:47:22:4C:F4:1A:91:27:E1:BE:7E:43:CD:23:A2:EB:95:37:6E:38
X509v3 Authority Key Identifier:
keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3235342e3136302e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.160.0/22
Signature Algorithm: sha256WithRSAEncryption
57:54:6e:57:0e:34:d2:df:79:a6:f3:1b:c5:62:0b:cb:e6:12:
54:f2:e6:1f:68:f8:b5:0c:6b:12:2f:b8:c4:07:f6:6e:c6:ec:
b0:77:97:5e:31:3e:e7:e2:42:0a:b9:3d:1a:e7:4a:84:35:81:
cf:0a:7e:63:3f:72:a2:84:1d:86:b4:a9:e9:5b:50:68:31:43:
fd:9f:ae:9a:ee:f9:10:7b:23:8d:47:0b:73:8d:16:27:e7:70:
f1:38:4b:a8:d0:b8:93:74:70:7f:8a:fa:1d:a6:4b:59:3b:9a:
9d:ec:07:5d:9d:63:f0:e2:01:42:6e:e4:c8:98:85:17:dd:39:
71:9f:bd:9b:da:b3:e1:ce:25:9d:94:15:f4:90:d9:da:a5:5a:
b5:0c:af:bd:b3:40:ad:9b:20:d5:68:a1:b9:ff:cb:27:60:b5:
82:6e:35:28:07:1f:a7:69:07:55:43:4c:44:17:92:f7:dc:dc:
21:f5:63:42:53:92:e8:5b:76:90:07:e8:95:0d:03:1b:f1:ad:
a8:2e:1c:cc:60:e0:f7:a7:3a:85:b8:ca:41:3b:b2:4f:1b:f0:
11:ec:47:ac:9a:02:2f:4c:eb:71:26:b6:25:11:d5:68:42:4b:
d3:20:61:0c:92:10:bf:14:fb:c5:27:ae:96:57:bf:e9:62:e5:
b3:3d:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:19:17 2025 by rpki-client