Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa
File: 3137302e302e3231392e302f32342d3234203d3e20323635313431.roa (raw, json)
Hash identifier: K3Cwc0BA6g5oOgH3LKNkSbhC4YjrTwrmQfZQgDYFH4k=
Subject key identifier: 02:94:3D:45:EF:5D:9D:7C:1D:F3:67:21:47:0F:F8:26:5F:B6:7C:36
Certificate issuer: /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial: 295944C8E88E0A2FB74A9A9147411497971C2846
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa
Signing time: Mon 24 Jun 2024 17:44:58 +0000
ROA not before: Mon 24 Jun 2024 17:39:58 +0000
ROA not after: Mon 23 Jun 2025 17:44:58 +0000
asID: 265141
IP address blocks: 170.0.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:59:44:c8:e8:8e:0a:2f:b7:4a:9a:91:47:41:14:97:97:1c:28:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Validity
Not Before: Jun 24 17:39:58 2024 GMT
Not After : Jun 23 17:44:58 2025 GMT
Subject: CN=02943D45EF5D9D7C1DF36721470FF8265FB67C36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:20:84:09:bd:e2:4b:cb:90:2a:a6:43:31:
22:e6:55:6c:50:1e:26:88:00:2c:61:e1:c2:d1:69:
09:e9:c9:c4:11:eb:ca:c3:a5:d1:10:cd:46:6f:36:
36:ba:51:d7:5e:33:a9:d8:72:e0:a0:6a:41:de:3d:
61:8d:82:aa:44:80:2c:35:0e:47:0d:1d:ab:e5:2c:
82:65:bc:dd:11:e7:cb:30:0b:70:23:37:0c:dc:5c:
d1:a5:6b:9a:55:80:c8:47:1b:7e:2e:b4:d4:47:4d:
dd:8e:ee:9a:bf:a5:1d:79:0f:75:1e:af:b9:a7:65:
d5:f2:53:ce:76:9b:41:71:33:47:4a:c5:47:4e:d7:
76:2a:6e:0e:b2:2a:bc:35:4e:cb:7b:86:27:74:8e:
ae:bd:96:fb:86:a3:b9:3b:82:78:17:22:de:2f:6e:
59:4c:db:1d:9a:a3:a0:00:04:1c:a9:1a:ed:58:41:
e4:b0:b7:b8:97:14:ec:24:bd:81:4e:58:75:09:8b:
59:b7:19:79:2c:77:ba:3d:99:a5:d6:67:76:c9:e0:
6a:dc:dc:6a:39:5d:41:c2:61:e3:82:7e:ba:2c:1f:
e4:24:5d:c5:fc:18:cb:ab:31:b9:d4:53:71:0e:97:
02:40:bb:e5:5a:15:ea:5f:a9:d5:fc:ba:65:59:d8:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:94:3D:45:EF:5D:9D:7C:1D:F3:67:21:47:0F:F8:26:5F:B6:7C:36
X509v3 Authority Key Identifier:
keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.219.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a6:0d:86:75:d1:63:a7:33:1f:ef:dc:e7:11:93:4f:23:20:
94:00:bc:0d:f3:8e:2e:73:f6:ac:e2:09:09:3d:9e:a8:57:bc:
ee:fe:e8:6f:3f:f9:2d:48:84:67:df:2d:05:f9:9e:3a:4f:75:
9a:a8:8b:59:13:81:f8:b4:59:2e:71:cc:81:fc:c1:86:c2:af:
61:c3:19:1c:a3:19:3b:9e:c1:d8:87:ec:c5:7f:d0:35:10:ee:
29:47:e0:e5:94:86:8f:ff:cc:66:a2:45:93:35:e5:5e:c9:8b:
9a:6d:80:92:9c:41:2b:7a:f5:f6:98:1a:4a:bc:26:d4:a1:dc:
1d:96:4a:96:01:e0:cb:d0:7f:04:cc:06:61:92:73:c3:6c:cc:
eb:26:9e:30:87:62:f0:a8:c1:46:5f:26:8e:47:04:61:53:e4:
20:a7:d1:85:17:5f:da:b1:ca:c8:79:4e:c8:4f:fc:90:7c:ce:
7a:c5:fb:fe:e3:40:70:43:d0:f2:11:7c:6f:e8:3c:5e:ff:48:
97:35:5b:e2:6c:e1:c6:52:a4:ad:2c:da:4e:0a:1f:b7:72:68:
bb:f2:7e:e7:fb:77:2a:ca:f7:4a:cc:31:f9:49:7a:be:62:f5:
fb:06:0e:ef:50:bb:3c:a8:18:ed:f9:b6:f0:0d:47:81:cc:4a:
8f:5e:88:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:24:58 2025 by rpki-client