Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134302e302f32342d3332203d3e203532353438.roa
File: 3137372e38352e3134302e302f32342d3332203d3e203532353438.roa (raw, json)
Hash identifier: SubQUoFtqUhGZJwbJiyxhzVxFDiKtYwfgCiGgvg5exc=
Subject key identifier: 01:AB:F7:E1:3A:B0:54:3F:61:D5:AC:F5:6C:04:D5:71:01:60:7E:4A
Certificate issuer: /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial: 45650333824DDA1FB2473571979E069614B1DB4E
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134302e302f32342d3332203d3e203532353438.roa
Signing time: Fri 28 Jul 2023 14:34:40 +0000
ROA not before: Fri 28 Jul 2023 14:29:40 +0000
ROA not after: Fri 26 Jul 2024 14:34:40 +0000
asID: 52548
IP address blocks: 177.85.140.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:65:03:33:82:4d:da:1f:b2:47:35:71:97:9e:06:96:14:b1:db:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Validity
Not Before: Jul 28 14:29:40 2023 GMT
Not After : Jul 26 14:34:40 2024 GMT
Subject: CN=01ABF7E13AB0543F61D5ACF56C04D57101607E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:8f:6b:0b:66:b8:24:44:2b:55:2c:46:1f:
4c:08:63:86:c5:1d:22:8d:70:b9:c7:52:90:b7:6a:
55:ba:2f:4f:b5:c7:af:40:0f:47:ac:0d:d3:57:72:
56:6f:39:01:a2:d9:f3:c3:e5:69:b9:1d:d9:47:14:
b8:c6:61:4f:18:e4:da:fd:cd:3e:86:bf:50:67:d8:
ff:8a:22:05:05:0d:c9:c5:70:2f:ed:90:45:89:d5:
e4:02:20:00:20:7d:b6:88:ae:a0:0c:15:7c:6a:2d:
d2:23:de:fa:8c:6a:2e:0e:26:56:81:7b:79:01:72:
3f:0b:07:98:2a:36:59:aa:1a:fa:9b:97:8b:4e:da:
70:31:87:a4:08:a7:35:6e:a4:97:26:7e:a0:36:06:
4c:f5:20:a9:ab:e5:58:c9:8a:9e:e9:07:ca:4b:5a:
c5:de:be:ac:1f:3a:47:d6:58:84:ab:e0:2e:24:1c:
9f:d5:d5:1e:7f:10:c9:52:db:26:5a:52:d5:5f:2a:
25:d3:7f:5a:1e:66:0a:40:d2:92:7e:b2:17:66:d7:
7d:b0:d5:a3:d9:ce:d9:f2:01:42:80:67:d8:ce:29:
39:c5:11:a1:17:c2:82:df:0d:55:03:f2:64:4d:0c:
38:67:80:bb:d8:89:d1:73:a5:e1:8c:37:d9:a7:52:
60:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:F7:E1:3A:B0:54:3F:61:D5:AC:F5:6C:04:D5:71:01:60:7E:4A
X509v3 Authority Key Identifier:
keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134302e302f32342d3332203d3e203532353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.140.0/24
Signature Algorithm: sha256WithRSAEncryption
51:56:a2:24:22:4f:11:2d:4e:27:3a:c3:88:48:f5:c1:70:ec:
fc:39:c2:aa:82:b2:ac:a3:1b:c1:10:85:33:a3:07:74:de:da:
5f:ec:b9:96:4d:34:bf:4c:8b:fc:68:9d:69:0d:80:be:b1:e1:
74:78:50:be:94:5a:eb:65:76:65:28:a8:1f:15:c5:4c:92:1f:
54:ab:03:a0:83:03:0a:dc:43:fa:df:9d:24:30:db:36:9c:74:
20:6c:78:56:00:16:c1:16:84:1e:57:eb:f1:3d:b3:65:fa:98:
f7:b1:15:15:12:7e:6b:33:e7:44:f9:d3:b0:4b:b7:83:6b:5d:
30:77:97:55:6c:44:88:cd:ac:a2:3a:ca:c8:ad:e3:24:16:75:
89:a3:ce:9f:b4:49:63:33:19:0c:23:45:5f:f1:5b:dc:c9:26:
1a:c8:7c:44:23:6c:3b:5d:95:4a:52:2a:bb:6f:3c:f1:50:69:
ae:da:fc:26:6f:1d:e0:29:52:92:9b:d7:d5:19:7b:c9:98:48:
36:e8:12:7c:09:03:4b:1d:7c:51:39:c3:33:12:86:79:81:78:
7a:e7:17:95:b3:a1:7e:39:9a:01:b6:03:6d:f4:ca:95:b8:eb:
fb:5c:32:dd:d9:63:46:8b:f7:ca:aa:d8:34:cb:d4:12:04:0c:
cd:bd:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:44 2025 by rpki-client