Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
File: 3137372e36372e342e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier: g84lwQAKv3T3iGt+t5qCY6S9pMx/Rcg0frcdX56Kamw=
Subject key identifier: A9:D8:1C:E6:B8:7D:BE:69:16:F1:25:39:96:C2:B7:50:21:79:13:E2
Certificate issuer: /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial: 274CAFC7EA00F4F6DCFB4EE4EFF6899D9B281FA0
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
Signing time: Mon 23 Jan 2023 22:16:18 +0000
ROA not before: Mon 23 Jan 2023 22:11:18 +0000
ROA not after: Mon 22 Jan 2024 22:16:18 +0000
asID: 262509
IP address blocks: 177.67.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:4c:af:c7:ea:00:f4:f6:dc:fb:4e:e4:ef:f6:89:9d:9b:28:1f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
Validity
Not Before: Jan 23 22:11:18 2023 GMT
Not After : Jan 22 22:16:18 2024 GMT
Subject: CN=A9D81CE6B87DBE6916F1253996C2B750217913E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5d:bc:02:c6:66:5f:6a:e3:4f:05:57:31:fc:
3d:93:e6:7e:85:a8:e7:70:7d:91:85:92:e9:db:0e:
7d:32:92:fa:fe:8c:5c:de:e3:88:92:0b:77:dc:0f:
65:ca:93:84:d0:9a:3e:3c:64:80:ec:51:26:48:f5:
9a:d6:c6:6e:83:26:43:56:45:40:53:ff:bf:a4:35:
00:3b:48:ff:f2:81:c9:60:25:6f:a2:91:18:66:af:
69:c2:24:c9:0a:ff:38:14:cc:1c:91:cc:3c:48:07:
31:42:19:59:99:ac:99:2e:7c:e0:55:6c:36:ff:e3:
6b:80:e5:1f:a0:e1:15:38:84:8d:c9:ef:bb:ea:6a:
5d:4e:8d:df:2d:5a:94:38:ff:5b:3a:35:25:72:95:
50:1b:d3:1a:64:d0:2b:5f:bc:f7:96:ff:c5:88:6c:
4c:b4:d7:d9:91:79:ad:1c:38:cd:4d:61:f9:e7:e6:
55:81:e7:96:36:19:39:63:81:fb:46:77:71:57:c1:
fd:47:92:fe:1b:0a:e8:5d:d9:78:b8:4f:c8:75:12:
ab:02:ea:8b:00:e8:22:43:cb:4b:41:d7:01:28:f0:
21:9d:db:ec:b7:09:78:44:af:3c:e2:ac:5c:7c:a5:
28:19:7b:21:58:53:4d:4d:6e:02:2c:a5:76:72:9e:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D8:1C:E6:B8:7D:BE:69:16:F1:25:39:96:C2:B7:50:21:79:13:E2
X509v3 Authority Key Identifier:
keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:08:64:86:11:20:a5:cc:b5:c1:ee:b1:b5:85:34:0d:32:8f:
09:fd:21:1a:5a:89:46:d0:b9:38:e4:ed:b2:a1:79:05:38:04:
42:e7:9b:57:41:5f:80:44:a2:c0:f3:f9:df:27:e8:91:e8:98:
a8:e9:c4:2a:88:fb:9e:76:14:91:6c:ab:b7:44:7f:00:58:f9:
bf:58:82:2f:e2:28:2f:b1:b2:6a:f2:07:7e:c4:f8:a8:7b:78:
9a:a6:89:f5:15:1b:e3:35:1f:e4:60:89:f8:c9:9f:d0:22:16:
34:0a:56:95:4a:60:39:ba:1a:ac:99:a6:3d:15:c0:34:95:c2:
52:db:d1:f5:07:cc:3c:8b:3b:1b:85:1e:18:04:58:4f:8b:73:
88:5f:1e:f4:a9:63:f4:c7:98:6f:dd:33:31:a1:73:e9:60:45:
3a:93:ca:93:ca:78:67:d1:d1:43:a3:9d:4a:1b:99:ad:73:69:
0c:42:ce:a8:3e:73:1e:b3:c8:bf:8f:9a:ac:0b:c9:44:0e:06:
68:d8:7e:c2:7b:7a:20:5e:a2:d3:97:aa:53:ab:3a:54:68:8d:
3d:dc:41:20:91:5c:45:57:fb:e7:05:7f:04:be:c0:83:ec:34:
42:0c:64:27:8b:ed:72:09:69:dd:69:a3:e5:03:27:0b:76:e8:
93:91:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:50:07 2025 by rpki-client