Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa
File: 3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa (raw, json)
Hash identifier: OP/tG9Psm0oOg6ouqyWWuMzPW/rNCVE1LHzK4nwHqKA=
Subject key identifier: DF:47:ED:AE:ED:3C:F7:A8:97:2C:69:1C:07:06:44:E4:77:A8:ED:C2
Certificate issuer: /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial: 60101DDE0AA98A0969BB441DE5CBB6F9D2F7CC0B
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa
Signing time: Wed 03 Apr 2024 18:31:06 +0000
ROA not before: Wed 03 Apr 2024 18:26:06 +0000
ROA not after: Wed 02 Apr 2025 18:31:06 +0000
asID: 266320
IP address blocks: 170.238.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:10:1d:de:0a:a9:8a:09:69:bb:44:1d:e5:cb:b6:f9:d2:f7:cc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Validity
Not Before: Apr 3 18:26:06 2024 GMT
Not After : Apr 2 18:31:06 2025 GMT
Subject: CN=DF47EDAEED3CF7A8972C691C070644E477A8EDC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:08:76:17:3c:17:6e:90:ac:9f:72:ee:3f:
25:86:09:bf:8b:e4:d0:88:6b:57:5a:d8:f3:0a:37:
4e:d1:d1:d5:7a:d2:cd:72:18:1f:37:7a:36:b0:c4:
9c:9d:aa:1a:c7:c7:c7:1c:04:c1:f2:7a:13:c9:67:
33:ba:d3:da:6a:42:54:35:7c:04:0a:ac:98:51:4d:
af:bb:8b:fc:e5:2e:08:b4:31:1d:44:cb:d2:51:0d:
9f:72:ac:1f:06:83:86:f6:b9:bd:5e:6d:8f:8b:4c:
de:02:24:9b:36:b5:39:92:ae:c7:f3:78:90:2c:e4:
b9:f5:64:b9:f6:1a:6c:9d:bd:6c:37:1a:ee:ad:27:
8f:1f:4e:34:80:41:53:d0:e5:4a:cd:db:2c:2b:84:
0e:e5:e1:98:da:ad:ec:17:63:85:b7:5d:9f:7d:59:
c3:51:3a:fb:37:b3:cc:94:be:f8:27:2b:de:b3:45:
7e:5b:6f:73:08:e4:ac:e6:4c:ad:89:46:ee:f7:af:
7a:ca:09:68:a3:12:d9:c1:8b:f8:6d:07:8d:23:d5:
e1:25:bc:c6:45:d7:27:76:d8:37:b2:6d:22:65:c3:
b6:04:d3:26:3d:3c:df:9a:54:47:6b:1a:1b:e6:30:
21:7b:96:6c:d0:dd:2a:8e:3c:ef:60:58:10:3e:96:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:47:ED:AE:ED:3C:F7:A8:97:2C:69:1C:07:06:44:E4:77:A8:ED:C2
X509v3 Authority Key Identifier:
keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.138.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:21:8f:26:8d:8c:3c:09:b9:e1:c8:94:9c:16:06:03:d2:1f:
30:2e:d6:84:e2:15:64:23:e8:a2:d2:f1:48:fc:d2:7b:0c:59:
16:41:b4:bf:74:9f:3f:c8:b9:bd:ad:3e:d3:0e:14:1d:85:40:
f4:67:d5:49:76:d9:e1:7b:a0:49:8a:36:1d:a5:fe:c3:e8:a3:
77:a4:f8:d7:15:4b:1a:57:1d:8a:1f:be:ab:07:d8:e6:2a:d9:
e5:06:c6:e3:b8:2f:eb:01:47:3c:8c:21:2c:76:9a:96:cf:3e:
89:af:84:71:9c:70:e6:fe:e0:dd:4a:3a:cf:59:02:a4:4b:53:
61:eb:f2:b5:3a:fc:b4:bb:fd:c4:ff:df:61:6f:fe:a2:6f:6c:
26:fc:bc:80:b2:98:83:84:ae:1b:ec:66:9e:b6:3c:2e:db:54:
77:b5:10:b3:ca:54:5a:88:de:28:6a:3f:41:bb:7c:0f:88:d5:
ee:96:df:55:d1:2b:c1:3b:de:76:40:68:60:64:b1:7a:53:4c:
17:59:9a:f2:d9:11:41:1c:3f:a6:ab:06:0e:df:76:b8:94:10:
ab:45:ab:e9:21:c8:33:dd:58:d2:a4:ff:20:bc:43:25:80:25:
d3:03:84:7c:ec:ac:7a:a3:0b:38:b8:5b:80:55:ee:b8:9a:f2:
30:00:0f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:12:01 2025 by rpki-client