Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa
File: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (raw, json)
Hash identifier: GwRnzGNry6/kKGpLmY3qzV1bCImmZukOz9y1eG4U2Lc=
Subject key identifier: 27:46:D4:CE:18:97:D6:C0:C5:0C:F9:8F:83:4C:A6:C3:16:98:C1:68
Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Certificate serial: 68866F2DDCB45E131133F110E0D3913105606C0D
Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa
Signing time: Thu 04 Apr 2024 13:24:37 +0000
ROA not before: Thu 04 Apr 2024 13:19:37 +0000
ROA not after: Thu 03 Apr 2025 13:24:37 +0000
asID: 263496
IP address blocks: 170.244.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:86:6f:2d:dc:b4:5e:13:11:33:f1:10:e0:d3:91:31:05:60:6c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Validity
Not Before: Apr 4 13:19:37 2024 GMT
Not After : Apr 3 13:24:37 2025 GMT
Subject: CN=2746D4CE1897D6C0C50CF98F834CA6C31698C168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:ec:bb:18:13:37:9c:ec:a5:b1:a2:64:70:
f6:52:3b:67:b5:6a:7a:01:67:10:7a:21:3a:48:2d:
cf:4b:56:fe:a0:3c:9a:9f:59:45:41:a2:3f:f1:59:
26:44:82:be:8e:e9:b8:19:08:cd:79:33:85:be:2f:
21:d5:67:13:76:04:7d:73:0e:78:c1:33:06:cb:9e:
ea:76:5f:87:d0:fd:6d:07:57:52:34:6e:72:23:ad:
8f:ca:c6:95:87:19:46:94:03:2f:f1:9a:17:ab:69:
07:c5:33:23:f5:6f:7f:07:d0:0e:e2:ca:18:25:b9:
cf:9a:26:cd:42:f5:5c:c0:19:90:03:63:41:e7:07:
0a:12:32:2c:a8:2e:24:d4:6f:67:47:f2:b4:ba:73:
32:d6:aa:bd:8b:c9:ab:e8:4b:6c:6b:e7:0e:ed:72:
fe:3d:92:34:a4:df:ab:f7:90:06:d8:42:55:0c:d6:
28:6f:fd:c7:54:3a:70:d9:6d:ac:b9:f8:99:47:1e:
33:fc:9e:c0:d3:88:76:c2:7a:3d:58:d1:c2:7f:80:
c8:db:64:20:88:b2:aa:e9:b3:bc:0e:65:10:2f:b7:
66:16:f2:00:3a:a7:cb:86:e1:89:8e:db:5d:d7:bf:
d1:eb:03:4f:33:82:4b:1b:35:50:e5:3d:79:7b:2b:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:46:D4:CE:18:97:D6:C0:C5:0C:F9:8F:83:4C:A6:C3:16:98:C1:68
X509v3 Authority Key Identifier:
keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.216.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:bc:bf:bc:d4:66:57:43:cd:3d:1f:50:57:8f:86:57:21:8a:
e2:e3:49:b4:38:00:eb:c3:4c:d1:8a:6c:b4:1d:4a:1c:70:6d:
05:df:d4:32:51:a2:bf:29:cf:1a:72:c1:ef:cd:e4:f7:39:de:
33:dd:2e:08:63:07:74:6a:ba:f1:94:9b:96:98:d6:61:af:0f:
3d:ed:6c:7c:31:23:37:b1:38:cc:08:80:a9:a7:f5:47:ba:5c:
7a:c8:60:b2:86:bd:90:39:01:a7:73:bd:dc:ce:26:c9:f8:9d:
a6:2d:d2:c5:2b:8f:7f:81:bc:28:85:94:96:18:98:8b:34:f1:
6b:d9:4b:3f:35:c2:74:18:7b:78:be:67:73:a6:5c:c7:26:fd:
53:e6:29:5e:d2:6d:e4:87:84:c0:32:ec:46:3c:46:7d:36:e1:
cd:34:0e:11:66:e2:b7:09:45:70:e5:f2:25:7f:aa:c9:a7:89:
13:90:3b:67:65:95:dc:fc:5c:2f:72:e2:ee:66:40:43:a2:90:
03:5a:15:9c:96:5c:53:aa:c2:25:be:6d:2f:59:55:e1:6b:8c:
b2:f1:80:68:89:f4:67:1b:42:a8:fe:d0:e0:93:8a:6b:95:fb:
1c:58:a7:bf:c5:63:40:9d:a4:e8:9e:8c:6f:e5:90:d8:61:4b:
7f:17:59:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:56:39 2025 by rpki-client