Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33352e302f32342d3234203d3e20323634353530.roa
File: 3137302e302e33352e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier: g08rqUpprZEm/O09QxfCt5qZ8Uhgcfg2R4QCl5i4S3E=
Subject key identifier: 98:8E:64:28:A7:15:86:C6:55:33:F8:10:18:E2:CB:91:E3:98:90:26
Certificate issuer: /CN=460AB498EE332630D0D0D3A518D373758466C069
Certificate serial: 330AD43081F68602E3E733AD3FF036D19E9C000B
Authority key identifier: 46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33352e302f32342d3234203d3e20323634353530.roa
Signing time: Thu 10 Apr 2025 17:59:16 +0000
ROA not before: Thu 10 Apr 2025 17:54:16 +0000
ROA not after: Thu 09 Apr 2026 17:59:16 +0000
asID: 264550
IP address blocks: 170.0.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0a:d4:30:81:f6:86:02:e3:e7:33:ad:3f:f0:36:d1:9e:9c:00:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460AB498EE332630D0D0D3A518D373758466C069
Validity
Not Before: Apr 10 17:54:16 2025 GMT
Not After : Apr 9 17:59:16 2026 GMT
Subject: CN=988E6428A71586C65533F81018E2CB91E3989026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:12:15:df:af:47:89:27:f1:12:8b:8e:cc:
d0:84:6e:70:84:fc:7e:6c:82:a0:8c:c8:b7:91:e9:
cf:5d:0c:f4:3b:00:06:77:e7:76:05:bd:55:23:22:
a8:f8:7e:c6:9a:bd:d4:19:dc:17:3a:ef:5e:db:a7:
c0:e3:bc:57:cc:d9:bd:f8:f1:f8:99:fb:b4:7b:5b:
9b:35:1a:5a:9e:25:90:53:16:da:6a:dd:62:6e:9c:
20:8e:c4:af:af:97:b0:ba:bd:3c:4f:79:5f:7d:1f:
2b:be:85:15:d3:0a:14:93:09:8f:84:00:89:aa:11:
68:f8:79:75:21:80:e7:40:ab:d5:e5:fe:b6:c2:e6:
09:83:d1:e1:81:a0:1f:58:a4:c0:3b:f9:e0:df:6b:
42:eb:43:97:22:5a:49:3f:1c:1b:e7:5c:3f:22:3b:
bf:6f:e4:d6:09:3c:32:df:83:fc:ea:74:3e:0a:3c:
57:56:cc:a4:0c:a5:56:27:88:5b:0b:c7:a9:65:d3:
31:96:30:3c:8d:8a:27:08:fb:e6:98:b5:67:ce:71:
01:8a:44:fc:13:ff:2e:51:8f:4c:1b:3a:4c:72:4f:
b4:71:77:80:8b:0c:c0:e6:29:13:9b:07:ba:8c:5f:
a5:1f:de:3b:f7:9b:a1:8c:79:28:9a:0e:84:44:77:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8E:64:28:A7:15:86:C6:55:33:F8:10:18:E2:CB:91:E3:98:90:26
X509v3 Authority Key Identifier:
keyid:46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33352e302f32342d3234203d3e20323634353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.35.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c4:e2:53:90:b8:7b:46:6f:ef:78:bf:1d:95:80:c6:0e:ff:
74:73:82:31:0e:11:95:2a:9f:48:ba:ec:a9:41:ba:a9:e4:d2:
ce:7e:76:d3:e2:76:d2:db:eb:b2:c3:c5:b5:a5:8c:72:6c:00:
89:7c:c7:b6:3c:1e:98:86:cd:7d:78:bd:61:1f:b1:c9:cc:d9:
33:79:25:76:df:d5:5f:61:74:6c:f8:f9:c3:e5:79:28:a7:e7:
af:b7:21:99:1a:35:31:bf:05:83:7f:9f:2d:bc:4d:78:7d:17:
a0:e6:fe:f7:b8:72:8d:d8:11:10:c8:f8:49:8a:74:f6:df:e7:
c0:4b:e3:f8:3b:f4:96:e6:be:5d:01:0b:79:38:dd:ff:65:b6:
db:eb:d3:0c:7f:7a:4b:fe:74:60:13:74:2a:25:0a:6e:11:3a:
dc:d6:7f:bf:7e:79:6a:d5:a5:0d:ce:4a:0e:4c:a9:4a:f5:a0:
11:bf:70:e5:71:3f:e5:49:48:2b:f4:35:88:48:a7:cc:1f:6e:
00:b9:41:89:08:4d:ff:4e:ce:0e:60:1f:3b:a4:93:6d:a4:8a:
57:60:0a:62:73:7e:cd:b7:29:4e:0d:4c:d5:a9:f6:65:62:99:
3d:79:e4:05:63:e9:59:9a:2e:bf:e0:03:73:39:46:c6:30:b4:
f4:a2:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:42:01 2025 by rpki-client