Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
File: 3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa (raw, json)
Hash identifier: FvoUmyFLzOdGOoaF3xAqtfxHzAqxodNgqSbr+Aok+2k=
Subject key identifier: FE:94:B9:B3:6A:72:A7:57:FC:2B:5B:FE:2F:18:54:F6:3D:A2:6E:56
Certificate issuer: /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial: 65BA0BAD68322DBD87354202AB7EAB392ECB0659
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
Signing time: Wed 03 Apr 2024 18:31:06 +0000
ROA not before: Wed 03 Apr 2024 18:26:06 +0000
ROA not after: Wed 02 Apr 2025 18:31:06 +0000
asID: 266320
IP address blocks: 170.238.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ba:0b:ad:68:32:2d:bd:87:35:42:02:ab:7e:ab:39:2e:cb:06:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Validity
Not Before: Apr 3 18:26:06 2024 GMT
Not After : Apr 2 18:31:06 2025 GMT
Subject: CN=FE94B9B36A72A757FC2B5BFE2F1854F63DA26E56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:52:34:95:f6:96:93:88:3d:cd:49:2c:d9:
56:cc:be:21:fa:45:0c:e4:a9:9c:36:8e:80:d4:c5:
30:eb:37:49:8f:15:35:65:d3:7d:85:bc:98:7e:30:
ae:6a:40:3e:48:a6:e2:d3:31:32:08:6b:93:ae:4f:
04:db:79:64:1b:9f:d2:b3:32:91:9a:b1:53:09:5b:
e5:cc:4b:bf:c2:d5:15:a5:fa:2c:8f:c3:30:fa:2f:
67:87:89:84:1e:89:e3:6c:e8:ce:ce:e2:09:3c:93:
5c:0f:be:8c:22:3e:63:8b:0d:3e:7f:93:7a:4f:2e:
15:9f:e9:24:1d:97:de:ed:bb:ac:77:e7:82:c2:e5:
75:7b:73:9e:0f:1c:31:f6:e8:2b:22:19:67:de:88:
92:7a:7e:0e:e5:44:8f:a5:97:43:84:3e:65:3f:9a:
fc:aa:11:b7:07:a6:fd:68:1d:ca:1e:fa:c5:6e:80:
31:0d:3a:66:22:1f:d6:d6:f6:2a:b5:e7:f2:61:e5:
20:6e:c4:ab:a9:23:89:c0:c7:2b:89:9c:a9:3b:c3:
92:15:e0:41:98:8e:08:32:ac:b0:97:08:f5:98:52:
5a:a2:55:93:f2:6c:31:3f:a7:99:0e:c1:60:4c:65:
58:7c:a2:3d:de:ef:9d:45:c3:c4:51:5f:92:96:35:
db:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:94:B9:B3:6A:72:A7:57:FC:2B:5B:FE:2F:18:54:F6:3D:A2:6E:56
X509v3 Authority Key Identifier:
keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.136.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:0f:85:99:c2:d5:7d:d0:63:39:e1:11:0b:16:b8:f2:ca:49:
54:84:d4:5e:fd:30:2e:e9:80:fb:3f:c5:c1:8b:a3:54:47:ba:
7a:75:86:4c:68:f8:d1:14:fc:92:a4:98:c3:90:f0:7e:b7:c4:
51:45:c0:ee:b0:37:28:ef:6c:2d:ea:98:e7:d6:16:29:81:d1:
c4:76:4b:8b:fa:4d:8d:f0:b8:bd:3e:63:22:e0:24:0a:e0:8f:
34:4c:57:1f:c3:51:1e:b2:13:ca:c4:c9:80:ea:bd:05:8f:a0:
69:67:29:cd:1e:0f:22:3a:6a:69:82:58:ed:f1:c3:1b:33:93:
ec:4b:9b:8a:28:f2:26:62:83:0b:af:3a:97:41:73:f0:90:82:
5e:de:ce:2a:8a:93:17:04:33:a5:0a:df:81:77:e9:50:7a:8e:
2a:fc:d8:42:31:c4:3b:51:d2:e7:4e:66:52:b6:d5:50:ae:c7:
c0:74:1d:ff:bb:94:d6:9b:b9:4d:a7:51:dc:2a:6b:fc:f9:f4:
4d:d6:17:8d:4e:00:68:66:94:4d:aa:41:c9:18:ad:9d:78:4f:
59:0c:90:66:54:f2:b6:39:c8:2c:71:26:8e:5e:6e:b7:6a:42:
a5:83:35:e4:1e:59:bf:6e:1a:46:91:a5:16:fe:83:2a:5d:92:
6e:7d:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:40:20 2025 by rpki-client