Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e3235342e33322e302f32322d3234203d3e20323633343035.roa
File: 3137302e3235342e33322e302f32322d3234203d3e20323633343035.roa (raw, json)
Hash identifier: bzWBY8mjSD9TlcG7DAIeJYLeo8ju2vFy9N1BDgFEMjI=
Subject key identifier: 38:30:E0:7A:BD:E7:15:38:D8:F0:2A:F6:84:42:CE:B4:5B:1A:B2:9F
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 125AE03C0C94FF8093F8CBAAC8986391017A71B7
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e3235342e33322e302f32322d3234203d3e20323633343035.roa
Signing time: Fri 03 May 2024 21:54:16 +0000
ROA not before: Fri 03 May 2024 21:49:16 +0000
ROA not after: Fri 02 May 2025 21:54:16 +0000
asID: 263405
IP address blocks: 170.254.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5a:e0:3c:0c:94:ff:80:93:f8:cb:aa:c8:98:63:91:01:7a:71:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:49:16 2024 GMT
Not After : May 2 21:54:16 2025 GMT
Subject: CN=3830E07ABDE71538D8F02AF68442CEB45B1AB29F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:24:8e:ed:d1:99:20:e5:6e:19:d9:5a:27:
f1:6a:93:c5:81:d8:38:93:70:82:0d:ce:0f:b2:4b:
21:78:a2:29:84:37:65:72:50:17:41:f1:1d:da:a5:
91:e5:a0:53:08:ef:d4:2c:8c:d9:41:c2:c1:4c:b2:
bb:7a:29:2c:c0:1f:8d:16:50:40:b0:a9:28:f7:34:
63:e3:8c:e1:8c:37:a4:d1:f8:63:0d:c6:fb:0a:5c:
1e:dc:24:f3:38:84:5c:c4:f4:34:be:11:c1:d0:e6:
9c:0e:50:12:21:e0:fb:3f:12:31:3b:95:bc:cd:df:
65:c5:f8:fa:b0:0f:ee:41:86:a5:18:36:6f:e3:5f:
24:4a:b3:6a:af:10:af:93:62:1c:4d:86:9d:c5:9d:
d4:db:79:17:6e:1b:2c:44:99:64:23:c5:3b:54:7e:
c5:63:7a:65:06:7e:a9:b3:62:f0:8a:bd:f7:de:a6:
48:73:4c:34:19:94:0f:85:e7:56:96:d0:bc:6e:88:
17:bf:07:0b:e5:a5:a1:40:2c:4f:e5:14:52:cc:c8:
70:24:34:7e:2a:23:e0:02:32:bd:ee:9d:42:6b:c0:
38:9f:da:88:90:18:20:20:6d:7c:9e:6c:bf:9c:2a:
8b:ce:9a:b2:bd:02:f5:21:28:a1:3a:fe:d0:f2:b5:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:30:E0:7A:BD:E7:15:38:D8:F0:2A:F6:84:42:CE:B4:5B:1A:B2:9F
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e3235342e33322e302f32322d3234203d3e20323633343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.32.0/22
Signature Algorithm: sha256WithRSAEncryption
26:ac:cc:c8:a4:06:68:1a:52:6a:d7:77:8f:c6:94:6e:d0:d3:
2e:19:fe:18:83:ed:01:6d:fb:6b:dd:45:06:f1:6e:5b:d0:8b:
4c:f1:08:0d:aa:31:d7:d4:5d:79:5e:40:13:57:f5:09:f0:2e:
89:31:64:48:c3:f3:d5:7a:6c:67:47:f0:e5:72:6b:2c:86:5c:
3a:28:93:86:5b:4f:7d:8b:30:ed:5f:19:91:c7:65:87:15:ae:
62:70:7c:6e:ec:8f:a9:65:3c:9a:23:0c:df:9c:d4:8c:38:8e:
d3:50:66:9b:b4:26:61:a7:48:05:c6:02:af:eb:bd:db:1f:c8:
e8:bf:a1:4f:f1:fb:f1:d8:d5:e7:1f:73:27:7a:38:1a:2a:29:
57:91:1d:b7:82:34:da:82:21:f2:cd:de:ce:07:28:70:8e:ce:
ee:64:41:54:20:bf:23:d4:ad:90:15:bc:95:4a:c3:84:9b:2e:
d8:ef:de:2c:e7:7d:d5:ff:d5:3a:ba:35:ac:e9:93:42:55:f8:
2d:88:0f:66:fd:fe:fe:d5:89:a7:d1:75:74:ae:0d:c8:eb:a0:
12:fa:c0:c3:0c:c1:b8:7e:69:50:60:74:66:e9:a0:dc:2a:0f:
a2:20:4c:1f:54:ed:1d:7c:53:bf:3f:0b:a4:49:22:b5:1a:ea:
b9:fb:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:00:02 2025 by rpki-client