Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32322d3234203d3e203532353932.roa
File: 3137302e3234372e36342e302f32322d3234203d3e203532353932.roa (raw, json)
Hash identifier: iIrQVb+oFNoMn4qIX3ARP+rhcCH/gWUK95CLvP//8bw=
Subject key identifier: 4D:A4:58:BE:C6:17:DF:86:A4:FC:27:D3:13:6D:E6:60:B6:26:00:FF
Certificate issuer: /CN=CFF957416ABC451AD3955260CF69F31756051BD6
Certificate serial: 2E8B0F2832DE554FF3DF88A35EF396207C120660
Authority key identifier: CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32322d3234203d3e203532353932.roa
Signing time: Thu 27 Jun 2024 12:04:00 +0000
ROA not before: Thu 27 Jun 2024 11:59:00 +0000
ROA not after: Thu 26 Jun 2025 12:04:00 +0000
asID: 52592
IP address blocks: 170.247.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:8b:0f:28:32:de:55:4f:f3:df:88:a3:5e:f3:96:20:7c:12:06:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFF957416ABC451AD3955260CF69F31756051BD6
Validity
Not Before: Jun 27 11:59:00 2024 GMT
Not After : Jun 26 12:04:00 2025 GMT
Subject: CN=4DA458BEC617DF86A4FC27D3136DE660B62600FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:23:0f:5f:47:c7:5a:19:29:b6:33:11:3b:
80:76:15:da:de:84:9d:4f:49:c9:ea:aa:70:f5:06:
d6:db:ad:23:bc:36:92:99:65:6a:0e:d4:95:96:db:
22:31:c2:44:3b:7e:28:46:f3:7d:ae:3b:ea:cf:1e:
91:d4:7e:76:58:9f:96:fa:fe:f3:0b:30:d9:c4:4a:
9b:15:b4:8f:76:d5:91:91:20:75:3f:26:93:58:fa:
45:81:eb:5b:0a:1b:57:a6:8d:ec:b4:27:4d:97:3e:
6d:5e:0f:e9:12:b5:c0:2b:79:50:26:20:a7:f0:58:
13:a7:c8:a9:9f:52:1d:8c:d4:16:a4:04:e1:2a:c3:
42:59:2d:23:48:75:02:3b:1f:1e:76:47:84:7b:49:
73:3a:3d:4a:fa:06:1d:42:b4:6d:a5:29:4c:d0:80:
d5:0f:4e:68:8f:d2:6b:20:d4:67:3c:eb:50:90:04:
71:18:89:b4:f8:89:f2:09:57:b1:55:b6:34:f5:09:
63:17:0f:db:a0:9d:ee:c7:f0:58:fc:a3:82:8d:0c:
e3:b7:ff:a2:b6:b7:49:04:cf:12:62:e5:8c:8e:e6:
ac:c8:11:5c:8f:f2:51:24:ba:96:61:55:05:85:92:
b6:ea:05:38:c8:16:c4:08:df:c9:de:61:74:0b:72:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A4:58:BE:C6:17:DF:86:A4:FC:27:D3:13:6D:E6:60:B6:26:00:FF
X509v3 Authority Key Identifier:
keyid:CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32322d3234203d3e203532353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.64.0/22
Signature Algorithm: sha256WithRSAEncryption
23:d9:ad:0e:ef:45:f1:e7:d8:f0:a1:81:56:93:5a:fb:80:a5:
33:d0:38:2d:61:60:5c:72:8b:75:91:84:f6:83:20:b7:d5:68:
3c:2f:f6:b4:4d:17:23:2c:1c:3e:61:fc:58:81:0a:c8:df:40:
f9:b0:cc:ba:af:14:3d:75:d7:ac:90:8c:6e:38:23:97:d0:ab:
5b:1d:37:61:2d:c5:6f:a7:7e:89:61:45:fe:69:65:00:0c:4c:
9f:ac:67:47:c9:8f:f1:5f:1b:6a:e8:d9:46:1b:f1:20:52:cd:
d3:80:be:fb:74:c5:2b:be:cb:0d:d6:81:25:d1:62:86:f3:b7:
89:7e:73:0c:74:09:a4:19:7f:9f:15:ad:da:c2:39:cc:d2:9d:
2f:9f:0a:31:81:de:8b:08:b6:23:68:64:a0:3d:0f:a7:44:a9:
ce:e1:c8:92:85:dd:dc:47:66:d7:5b:5c:cc:1a:87:3b:24:b0:
ab:9d:08:06:4d:3f:92:9e:f0:99:e1:4c:13:6b:ba:76:b0:6b:
aa:e0:99:07:1f:d5:2b:10:bb:e0:3d:9b:27:6b:ba:75:20:44:
10:32:47:66:9e:67:a6:7d:ea:45:44:2d:7e:77:ef:24:b5:7b:
f6:76:82:d1:23:e4:ba:e5:79:ed:26:2d:c1:13:95:cd:e2:76:
d2:0e:bb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:27:38 2025 by rpki-client