Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3137302e3135302e3230392e302f32342d3234203d3e20323633323930.roa
File: 3137302e3135302e3230392e302f32342d3234203d3e20323633323930.roa (raw, json)
Hash identifier: 5/Pkc8ASvTylNjrEZ2ZKaRJk/Uy8HpS6VCTC5VmsKAg=
Subject key identifier: BA:DF:74:90:81:04:CE:C3:82:6A:1C:00:71:54:16:28:4C:0B:70:DF
Certificate issuer: /CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Certificate serial: 5DF4DA9BA791C3C84248D18E228681BFFC301DC0
Authority key identifier: A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3137302e3135302e3230392e302f32342d3234203d3e20323633323930.roa
Signing time: Mon 02 Jun 2025 20:52:54 +0000
ROA not before: Mon 02 Jun 2025 20:47:54 +0000
ROA not after: Mon 01 Jun 2026 20:52:54 +0000
asID: 263290
IP address blocks: 170.150.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f4:da:9b:a7:91:c3:c8:42:48:d1:8e:22:86:81:bf:fc:30:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Validity
Not Before: Jun 2 20:47:54 2025 GMT
Not After : Jun 1 20:52:54 2026 GMT
Subject: CN=BADF74908104CEC3826A1C00715416284C0B70DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:3e:bb:86:6d:32:bd:70:56:20:0a:52:26:
19:27:3f:65:12:4c:1d:3e:21:b1:e3:1e:56:b6:8f:
14:87:79:5e:1b:04:ac:ca:6f:1d:a0:f3:6d:ca:87:
53:b9:d4:17:61:15:47:86:13:5a:a7:31:66:02:07:
6e:f7:67:ab:51:a8:36:f2:9b:ce:2b:cf:22:3c:75:
b4:f4:c3:d6:f3:c6:60:0b:36:35:cb:e3:9c:e2:92:
ef:25:bd:40:2a:19:59:3f:28:48:65:7e:ba:78:30:
e6:af:a1:4c:8b:5c:1c:c5:84:08:f9:42:00:e4:73:
29:e3:a7:ce:57:04:14:12:a0:1d:0e:f2:fa:7b:58:
70:c9:21:85:cc:c4:24:c6:de:52:39:e2:3b:d7:fa:
cd:5e:c5:da:69:f3:fd:16:6a:7f:e4:be:78:a7:12:
c3:30:c9:48:f3:2b:0d:4c:a7:3b:84:51:5d:0e:99:
f1:0c:96:5b:c9:82:07:28:22:db:8a:0f:da:ff:56:
4b:52:46:fb:5a:70:5d:50:45:4a:a1:36:9a:22:60:
7c:69:2d:e9:2a:38:30:1c:4b:a6:9c:6a:5b:46:0e:
ef:ff:12:24:39:f9:cd:03:5a:08:e9:aa:09:92:d4:
cf:fd:47:d9:72:ed:89:93:36:2b:31:af:85:a6:24:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DF:74:90:81:04:CE:C3:82:6A:1C:00:71:54:16:28:4C:0B:70:DF
X509v3 Authority Key Identifier:
keyid:A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/3137302e3135302e3230392e302f32342d3234203d3e20323633323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.209.0/24
Signature Algorithm: sha256WithRSAEncryption
37:92:e0:40:77:8b:80:38:d3:71:0c:e4:48:3f:87:47:dd:00:
f4:40:a1:33:12:84:bf:48:cb:3f:e2:19:40:fe:33:9b:08:89:
c5:61:4a:86:f9:38:7c:fa:da:da:aa:64:3b:26:5c:a0:d2:22:
e3:69:e6:b6:b5:b9:16:df:48:a9:46:a7:35:1c:42:ca:ee:36:
4c:7a:58:a7:d2:70:f7:e0:22:ce:b7:38:1d:a7:08:97:53:3f:
b7:42:7e:7c:e6:4f:91:68:5a:be:6f:34:ba:27:54:e4:2f:e8:
ab:57:b5:43:29:56:77:86:28:dd:41:f7:21:c6:fa:bb:98:ad:
58:5e:6a:b4:f7:d5:9b:a3:2b:ce:71:18:0e:2d:6f:e4:86:bb:
98:80:c0:bb:2b:2b:a8:1a:51:41:93:db:87:09:e3:c6:f1:e2:
a9:99:f1:01:4a:9d:c0:c1:a0:4a:91:f0:86:cf:9d:fd:74:08:
9e:bc:46:e2:29:52:b3:3a:4a:f2:1a:29:a6:de:96:f6:72:36:
ea:75:00:e4:b3:8d:f8:28:26:1b:ce:b5:04:99:2f:64:18:74:
00:bd:b5:ff:bc:1c:a1:6a:96:76:88:55:bb:c1:87:ea:d4:2e:
69:c4:c7:5f:f8:65:e6:cd:c3:96:07:d1:f0:f0:7a:35:71:0d:
ce:94:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:53:36 2025 by rpki-client