Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39352e302f32342d3234203d3e20323635353030.roa
File: 3137302e37382e39352e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier: S530SEvTm1foeXHo/XTXvAPLe6zOFjjiWofWUYKM3WY=
Subject key identifier: A0:9D:D3:1E:A2:0E:79:7E:EB:1D:6D:CC:CB:89:DB:3E:3D:BA:ED:C2
Certificate issuer: /CN=A1E125638591A773701BFD72EE9FA738B6EAA454
Certificate serial: 450F374ACE157B391CEEECBB9A4D44D385BF4725
Authority key identifier: A1:E1:25:63:85:91:A7:73:70:1B:FD:72:EE:9F:A7:38:B6:EA:A4:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E125638591A773701BFD72EE9FA738B6EAA454.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39352e302f32342d3234203d3e20323635353030.roa
Signing time: Thu 26 Dec 2024 15:00:36 +0000
ROA not before: Thu 26 Dec 2024 14:55:36 +0000
ROA not after: Thu 25 Dec 2025 15:00:36 +0000
asID: 265500
IP address blocks: 170.78.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0f:37:4a:ce:15:7b:39:1c:ee:ec:bb:9a:4d:44:d3:85:bf:47:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1E125638591A773701BFD72EE9FA738B6EAA454
Validity
Not Before: Dec 26 14:55:36 2024 GMT
Not After : Dec 25 15:00:36 2025 GMT
Subject: CN=A09DD31EA20E797EEB1D6DCCCB89DB3E3DBAEDC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:a6:d3:a1:e7:36:61:38:a9:83:a7:b7:76:
f2:ce:45:82:00:2a:37:bf:27:f5:0a:6a:7c:11:9e:
7e:fc:ad:97:51:e8:22:3f:47:39:13:84:90:13:6d:
a2:db:4e:52:f9:b1:ca:20:2c:24:b8:c8:9c:39:83:
43:6f:b7:ba:e1:89:a6:91:f7:84:75:b1:c8:77:fe:
74:eb:8c:11:a9:08:19:10:10:e7:0d:08:e7:06:01:
88:09:74:5c:51:65:46:da:22:a2:72:fd:62:a3:48:
f2:f8:78:30:f2:20:3f:9b:c0:8a:ae:e3:c3:db:a5:
40:51:84:3c:88:fe:0c:7a:e5:2a:87:02:5e:f5:e2:
67:36:07:a6:55:0e:8d:08:94:f4:ad:61:3a:1d:a8:
51:57:88:00:0f:01:5a:40:c2:60:76:e7:47:13:5b:
3f:6e:10:12:a9:fd:34:f5:e8:4e:ff:06:fd:b6:a2:
01:55:6e:b7:06:b7:ff:1a:12:dc:20:05:2f:61:aa:
cd:0f:0c:1f:d7:68:d0:17:5c:82:11:65:cf:fc:2d:
6c:cf:da:82:ea:b7:d4:d2:11:be:cd:d2:44:87:5b:
72:6f:f7:7f:ff:80:bc:8d:ab:ba:db:e7:4d:c9:a4:
ea:74:d8:d9:b6:8a:c5:4d:f7:ed:a1:5a:d1:88:46:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9D:D3:1E:A2:0E:79:7E:EB:1D:6D:CC:CB:89:DB:3E:3D:BA:ED:C2
X509v3 Authority Key Identifier:
keyid:A1:E1:25:63:85:91:A7:73:70:1B:FD:72:EE:9F:A7:38:B6:EA:A4:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A1E125638591A773701BFD72EE9FA738B6EAA454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E125638591A773701BFD72EE9FA738B6EAA454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39352e302f32342d3234203d3e20323635353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:43:21:cd:21:52:61:23:9d:fc:8b:fe:fc:2b:b6:c1:bb:ac:
17:eb:57:0a:37:6b:ca:26:d8:5d:27:d0:93:b0:32:ca:7a:cc:
0f:86:54:16:05:33:cb:bf:1b:dc:05:72:fa:54:ea:04:76:a3:
df:c6:02:b8:e7:fd:fb:08:cd:ed:f8:81:02:96:65:db:c9:52:
9e:b0:db:44:24:8b:f4:2b:8d:d9:0b:b7:c4:48:a7:72:54:36:
a4:54:7b:75:c7:43:0c:e0:f8:c2:43:e0:03:f3:ba:d0:36:0c:
60:20:9e:ad:60:14:fb:ac:e7:ea:3c:b0:d9:6e:32:6c:2a:4f:
08:dc:f7:68:64:29:21:a9:c6:f8:8a:f3:81:42:d9:08:3d:5f:
6b:bd:50:a0:27:32:90:8c:c9:c8:07:2b:1c:df:2a:d8:8f:4d:
1d:f1:5d:c2:9b:36:40:b1:a7:51:cf:33:65:4b:df:d3:63:fe:
4b:7c:cc:0b:bf:a7:b9:cf:f9:1f:01:02:6e:26:d5:77:0c:5f:
dc:73:b6:2c:05:49:ea:a4:2f:d4:64:ca:63:5a:37:74:61:19:
f0:4a:22:4a:c5:bd:3a:ed:bd:2c:a2:50:7d:24:c9:43:5e:f0:
a5:c6:ae:62:7b:60:78:21:dc:f9:b0:d6:14:3d:3c:8d:4d:a2:
c0:e2:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:52:26 2025 by rpki-client