Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
File: 3137302e38322e3136382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier: lUbXQpRHgGjtKeiTZmMb2PKbYixz7UfahyPa9iA2MXg=
Subject key identifier: A1:BC:88:17:23:59:C2:A3:BE:B3:28:93:A1:C7:D7:B6:6D:4C:41:31
Certificate issuer: /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial: 0B645FC448B9FFBFCF47ECCFA245E9B894E38D9F
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
Signing time: Thu 06 Mar 2025 02:06:27 +0000
ROA not before: Thu 06 Mar 2025 02:01:27 +0000
ROA not after: Thu 05 Mar 2026 02:06:27 +0000
asID: 52545
IP address blocks: 170.82.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:64:5f:c4:48:b9:ff:bf:cf:47:ec:cf:a2:45:e9:b8:94:e3:8d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Validity
Not Before: Mar 6 02:01:27 2025 GMT
Not After : Mar 5 02:06:27 2026 GMT
Subject: CN=A1BC88172359C2A3BEB32893A1C7D7B66D4C4131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:8e:ea:b3:95:70:b8:a0:b3:af:2e:d4:1c:
ae:95:c8:e9:9e:3c:09:9d:1c:10:51:5b:45:9e:a7:
f9:f0:58:41:ae:fe:c3:e7:bc:9a:5a:cc:cc:26:21:
bb:23:49:8c:64:55:b5:c5:40:25:8f:4a:1b:c4:d2:
f1:48:77:64:82:23:b4:0f:9f:c1:f5:ab:3a:ab:85:
d4:75:f0:93:31:7e:67:96:a6:e6:b6:fb:54:60:f6:
ab:9a:29:b4:d2:20:82:cd:3d:51:58:f6:3a:6e:07:
32:9b:3f:e4:94:9c:c4:af:7f:98:a7:c3:53:89:71:
2f:23:d5:fb:e1:20:43:1d:8a:48:a4:e7:52:4e:db:
58:79:23:6c:44:a7:56:e6:ff:dd:5c:5d:ca:ae:71:
de:4d:38:1d:21:e3:c3:5c:e3:12:90:4d:86:3a:a4:
d8:c5:7b:ab:64:34:17:4d:49:e2:29:92:25:b1:f4:
fb:8f:1c:da:35:b8:61:10:f0:d1:62:91:27:d6:49:
d1:cb:5e:30:75:ef:78:65:5e:ca:7a:7f:c7:df:a6:
8c:71:8a:ff:16:9b:bb:e1:58:29:98:fe:50:a2:3c:
dc:13:a8:72:fd:96:b5:21:57:bb:0f:37:cf:46:25:
19:71:42:23:da:c4:ce:18:bb:91:12:89:48:69:f3:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BC:88:17:23:59:C2:A3:BE:B3:28:93:A1:C7:D7:B6:6D:4C:41:31
X509v3 Authority Key Identifier:
keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.168.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:26:92:5d:42:b7:81:b5:db:e3:1d:2e:32:16:de:c1:e5:67:
f3:6d:8e:87:a4:63:64:42:7e:33:40:3a:54:bb:a5:85:11:53:
cc:88:1d:d6:6c:75:74:7e:89:4c:51:17:a3:7d:25:b7:ef:20:
c3:b2:db:87:c6:04:cb:66:52:69:19:5d:88:d1:6d:b7:fc:3d:
ef:ee:f4:56:55:9d:b3:95:b2:67:97:e9:42:96:3d:3c:15:1f:
d6:11:ec:fd:b9:f9:ba:2e:6b:20:f5:72:3f:cd:5c:27:54:2e:
7e:fd:ab:e3:84:49:a6:af:31:d8:52:69:08:a3:1e:3e:b0:3a:
65:f7:86:7c:0e:0a:23:3a:c5:0e:75:1f:1c:f0:61:7a:b8:19:
98:4d:8d:63:0e:2b:1e:22:cd:4e:8f:74:75:75:50:b2:7c:7d:
3f:5e:20:58:fb:c9:79:8d:89:a7:ea:b8:85:5e:1c:bb:dd:9c:
eb:53:6d:12:d6:3e:e6:9d:21:ee:39:95:f5:7d:dc:20:9d:75:
58:93:73:f7:1d:5f:9b:14:cd:98:76:25:0d:9b:8d:52:c0:22:
b0:75:9b:ef:ef:9b:61:06:1e:d7:ab:c4:dd:5b:eb:68:0d:df:
26:fa:f2:5a:70:46:d1:22:5b:e0:ea:eb:7b:f9:cc:6e:dd:58:
b2:e3:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:06:29 2025 by rpki-client