Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa
File: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (raw, json)
Hash identifier: SeYU5404iSokv/Gz5rw5RNitLBwfn0VjE4GkNS2MnrE=
Subject key identifier: DA:D2:5A:BD:34:18:9D:6E:3F:5B:A3:B6:9E:4F:55:7A:BF:28:9C:D1
Certificate issuer: /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
Certificate serial: 4ED74AB3F8850FCC22732F28C3F5FB79BD97F589
Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa
Signing time: Fri 31 Jan 2025 18:48:33 +0000
ROA not before: Fri 31 Jan 2025 18:43:33 +0000
ROA not after: Fri 30 Jan 2026 18:48:33 +0000
asID: 265062
IP address blocks: 170.231.156.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d7:4a:b3:f8:85:0f:cc:22:73:2f:28:c3:f5:fb:79:bd:97:f5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
Validity
Not Before: Jan 31 18:43:33 2025 GMT
Not After : Jan 30 18:48:33 2026 GMT
Subject: CN=DAD25ABD34189D6E3F5BA3B69E4F557ABF289CD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7f:38:9a:fb:53:b9:02:95:1a:0c:64:41:2a:
5a:68:ec:1c:99:8c:de:da:54:74:72:70:12:d1:0e:
ae:72:f5:90:45:43:20:40:06:43:b5:98:34:ac:6b:
94:b3:62:0c:b5:77:65:06:8c:8e:03:ef:c9:be:fd:
5b:60:d9:d3:aa:f8:a2:51:48:bd:2f:ef:cb:54:79:
00:f8:97:1a:d0:4c:6a:e4:4c:bd:ad:50:8b:e1:94:
63:25:bd:1e:8d:f2:b3:23:29:11:23:27:db:3e:9e:
ce:52:27:9f:e4:a6:8e:60:a7:f7:8f:2c:b0:0c:4e:
24:f6:fb:aa:cc:55:bc:8b:94:6c:da:17:22:b5:8f:
61:a3:0e:c2:84:b4:9f:53:4c:7b:74:6d:45:e0:db:
6e:8e:fb:9b:d8:d4:1b:e1:85:c6:c1:9e:3a:16:f1:
98:ae:58:ff:20:2b:ba:4a:ec:86:65:8a:81:81:06:
55:4a:af:78:bf:67:d5:fb:3c:82:dd:5d:c8:16:11:
24:47:a9:9b:8a:01:5b:c6:78:6a:0d:70:bf:c4:f6:
5f:be:8e:22:65:a8:da:1d:3a:81:6f:d0:74:73:6d:
1d:e8:e9:42:4e:12:ea:fa:81:0c:89:e1:a1:d4:cd:
f5:65:88:d1:07:d1:72:31:34:a5:39:f6:1e:72:d6:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:5A:BD:34:18:9D:6E:3F:5B:A3:B6:9E:4F:55:7A:BF:28:9C:D1
X509v3 Authority Key Identifier:
keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.156.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:8a:16:a9:04:d4:09:35:73:d8:e4:91:7f:c1:ea:41:94:f7:
b6:21:84:d3:34:99:4c:fb:6b:72:fe:c3:37:02:24:56:be:7b:
52:28:6d:b6:c4:1d:7d:2c:0c:30:ea:85:ad:67:d6:ef:2e:c0:
e3:f6:f8:8d:6f:0b:1f:70:c4:58:63:07:04:03:e6:8f:e2:c4:
1a:2e:cc:f5:8d:c7:98:a9:04:d3:02:58:45:f9:2e:47:15:55:
60:cf:15:81:c1:f6:6a:de:1f:d5:1c:5d:a9:f6:54:44:24:95:
00:3c:cc:62:12:4a:53:63:bd:d6:11:86:81:82:44:e9:41:3e:
1e:27:99:34:d6:2f:53:c2:02:d7:a5:05:5f:06:ad:1c:8c:90:
b0:c5:ef:6c:b6:8b:df:61:0e:89:20:6e:f0:6d:3a:4f:57:c3:
ae:43:55:71:6c:3b:ea:f7:63:a9:b0:14:e2:81:fa:81:b7:bb:
ea:fa:2b:89:a2:8f:3c:20:ec:62:f1:2b:fc:28:82:d4:60:ff:
08:f1:f3:75:50:fa:67:2c:47:a2:08:8c:c2:fa:32:a8:66:ad:
87:1c:af:70:81:e1:b8:3e:69:bb:9f:c9:17:e8:97:f3:30:18:
be:da:4c:6c:ff:27:ce:5b:89:7a:d0:5b:6c:11:46:51:76:b2:
b0:5d:f7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:38 2025 by rpki-client