Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
File: 3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier: XAwGgQfnu95S8nE+y5svWxgq23SzksxJ+tEuNWC3b6s=
Subject key identifier: DF:C0:2B:DA:36:A8:71:53:04:B2:3C:A9:76:41:20:96:A1:3D:08:F8
Certificate issuer: /CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Certificate serial: 7CEF76638B542E33BBBD3DE6EC1CA8B2E30D12EF
Authority key identifier: 91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
Signing time: Tue 01 Apr 2025 15:16:01 +0000
ROA not before: Tue 01 Apr 2025 15:11:01 +0000
ROA not after: Tue 31 Mar 2026 15:16:01 +0000
asID: 262503
IP address blocks: 167.249.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ef:76:63:8b:54:2e:33:bb:bd:3d:e6:ec:1c:a8:b2:e3:0d:12:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Validity
Not Before: Apr 1 15:11:01 2025 GMT
Not After : Mar 31 15:16:01 2026 GMT
Subject: CN=DFC02BDA36A8715304B23CA976412096A13D08F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:53:6e:93:a4:16:6e:0b:51:07:00:63:9f:
71:0f:49:03:fb:e9:8d:f3:3d:63:7f:85:5b:b9:4e:
69:3d:c4:8e:f0:f7:6f:02:4b:8d:f0:93:32:d0:e2:
b4:c8:9a:f6:ed:4c:cf:97:71:79:a8:7a:25:35:6e:
fc:50:10:ed:82:2c:d2:83:c5:37:9d:f5:c7:a2:d6:
47:13:ea:d8:22:4f:55:7c:1d:73:a1:44:5a:5b:13:
be:32:c5:22:78:76:19:67:d1:24:01:b6:fb:4d:bf:
26:0e:30:9e:38:c3:2a:fb:22:40:ff:39:7c:41:07:
bb:8a:b3:1e:82:cc:e7:f1:be:07:55:54:7d:40:35:
1e:96:86:4a:d1:69:84:8c:d8:d5:53:22:47:87:bc:
4b:29:1c:83:35:6a:02:7d:61:1c:11:70:f4:82:5d:
f4:c4:5d:79:6f:0b:65:a8:a5:10:f6:6c:0c:95:ea:
99:90:7c:8a:e8:11:c9:05:1d:84:3a:20:f5:69:e2:
e3:bb:90:e3:ad:1f:43:ca:9b:0c:67:f9:3c:2c:f6:
c6:55:8d:c4:43:ae:b3:e8:e6:f7:70:ca:67:c7:57:
36:59:a6:43:2b:29:c6:28:22:2b:e2:65:b3:5c:ce:
6d:8f:43:cd:33:97:c7:bd:2d:df:b3:dc:7a:1f:96:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C0:2B:DA:36:A8:71:53:04:B2:3C:A9:76:41:20:96:A1:3D:08:F8
X509v3 Authority Key Identifier:
keyid:91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.168.0/24
Signature Algorithm: sha256WithRSAEncryption
64:dd:c8:e7:b3:c9:19:97:fd:77:5c:d8:62:d9:92:b7:85:04:
9c:82:30:cf:dd:41:1d:3c:6e:ef:3d:87:a1:12:79:b1:c7:3d:
51:9d:7b:0a:da:d2:ca:78:68:bf:bc:d6:02:00:2d:fd:64:a5:
a5:77:37:2b:4b:92:98:e6:46:16:39:df:8a:46:9d:e9:cd:4c:
53:49:20:f2:f7:da:e4:58:a8:0d:15:7d:ae:04:12:1f:67:33:
b1:6a:a6:9b:b0:6c:7f:e9:b7:83:f4:32:20:c7:5a:f2:db:06:
93:65:69:f6:f9:58:bc:d0:0c:fd:f1:5c:76:2b:97:4f:21:53:
86:10:0a:b4:22:c6:4c:f0:94:e5:05:54:9f:32:36:21:d8:f3:
37:d3:b6:ac:25:8a:89:61:ae:0a:83:35:79:ec:75:56:31:84:
0b:b7:ed:97:11:d4:b4:e9:eb:c4:8f:fc:4b:55:5f:d9:01:1a:
9f:27:c1:f9:8b:8e:91:bd:2b:ed:05:aa:52:51:1a:b1:bb:6e:
0e:f2:70:3f:a1:cd:2b:e8:28:8f:e4:54:a0:e0:c2:dc:c2:7b:
a8:b0:bc:64:79:0d:12:55:92:2f:ec:19:5e:3c:8c:b0:6d:db:
05:00:0b:8b:39:24:57:cc:ca:09:56:c9:f7:2a:ab:79:6a:b0:
f4:a2:7d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:03:38 2025 by rpki-client