Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/3137372e37302e3136302e302f32302d3332203d3e203533303139.roa
File: 3137372e37302e3136302e302f32302d3332203d3e203533303139.roa (raw, json)
Hash identifier: evlfZ0uZkl1POfFaoYCb/csni1PkdXH3pwuHdXQkZvg=
Subject key identifier: AA:70:6C:50:34:B2:75:04:2E:31:FD:FB:EC:27:69:20:A0:00:4B:43
Certificate issuer: /CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Certificate serial: 592182E6ED89D2EE845ACABBB9E5CED8D02D2FE4
Authority key identifier: E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/3137372e37302e3136302e302f32302d3332203d3e203533303139.roa
Signing time: Wed 15 Jan 2025 03:00:23 +0000
ROA not before: Wed 15 Jan 2025 02:55:23 +0000
ROA not after: Wed 14 Jan 2026 03:00:23 +0000
asID: 53019
IP address blocks: 177.70.160.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:21:82:e6:ed:89:d2:ee:84:5a:ca:bb:b9:e5:ce:d8:d0:2d:2f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Validity
Not Before: Jan 15 02:55:23 2025 GMT
Not After : Jan 14 03:00:23 2026 GMT
Subject: CN=AA706C5034B275042E31FDFBEC276920A0004B43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:42:36:01:48:c1:2f:fc:e6:1c:82:5f:78:
de:1b:44:57:5f:d3:2a:b3:03:33:8d:ad:cf:3a:df:
b5:26:2a:3a:83:00:c5:03:ea:52:a9:23:a3:82:e0:
d6:b5:6d:11:b3:9d:00:b1:89:ba:7a:71:bd:03:cf:
54:35:6f:1f:28:b4:65:da:89:bf:b2:ff:e9:5b:19:
07:bf:cf:41:82:65:f8:f3:b8:13:82:4f:b0:b3:6a:
d1:04:73:e2:37:42:b8:90:ef:a2:96:84:21:86:f7:
5e:39:37:a3:a1:4b:c2:34:cb:2a:0e:66:af:cf:8b:
0b:9d:6e:a2:71:47:54:58:ac:6d:ee:7c:3d:fe:36:
aa:b5:cc:e7:cd:92:2a:fe:77:13:82:7c:87:dd:b3:
6e:80:13:fd:43:44:12:68:20:7b:81:03:15:c8:f7:
ee:5f:f5:0a:3f:c0:ca:4c:82:b4:ef:81:6a:31:9d:
0c:07:09:56:c9:47:2e:01:90:d1:7f:03:76:09:e2:
c5:bb:fb:96:d9:34:ab:e6:50:dd:7c:74:13:92:27:
1a:d1:41:64:9b:56:c9:ff:61:4f:3e:a5:eb:01:26:
87:3e:fd:05:66:a7:74:cf:78:c0:39:b7:7e:95:4a:
0c:8d:69:0e:cf:08:c9:30:9a:79:11:77:b2:3a:c4:
ca:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:70:6C:50:34:B2:75:04:2E:31:FD:FB:EC:27:69:20:A0:00:4B:43
X509v3 Authority Key Identifier:
keyid:E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/3137372e37302e3136302e302f32302d3332203d3e203533303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.70.160.0/20
Signature Algorithm: sha256WithRSAEncryption
54:1b:af:71:5b:7e:ff:f2:ff:d1:00:e7:07:86:50:1c:44:23:
11:55:b9:f0:fc:5a:65:74:a9:80:ad:c4:95:b0:57:38:f5:53:
47:ff:57:12:b6:84:f7:a5:38:3d:9c:b3:a2:71:f7:41:9a:1a:
af:73:88:ec:54:14:ca:b1:f6:bb:e4:6e:48:c1:48:56:20:9f:
5f:8b:cd:6f:1a:d2:63:a7:35:70:b1:5c:f1:08:15:23:38:e8:
77:10:4c:f5:0b:9e:ec:c9:57:a1:15:fd:79:f4:41:a3:b3:bc:
6d:cf:b8:e1:e2:1c:3e:be:16:bd:22:ad:31:49:66:28:fa:36:
78:06:ea:23:2b:c1:e2:9d:31:d2:5b:87:e9:ea:0e:da:44:ab:
0c:4e:87:cf:76:f2:22:06:08:9b:91:c8:72:a0:89:c7:48:e8:
af:e9:2a:a4:02:e5:a0:78:03:bf:46:29:ae:18:c7:15:2b:0a:
da:08:51:c9:58:42:b4:54:e8:b0:ee:bb:32:4c:dc:9a:3c:de:
e7:b3:30:f1:80:20:ea:f9:16:67:fd:e7:9e:9b:93:a2:be:7f:
2e:4e:61:1e:ba:10:83:f0:92:2f:fb:cd:a2:f8:f6:53:7b:48:
79:22:9d:d7:ef:34:20:bb:31:d0:fa:74:31:ed:09:03:77:75:
f8:d1:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:21:32 2025 by rpki-client