Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32322d3232203d3e20323632343434.roa
File: 3137372e3132382e382e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier: xqStPlWm1++VUNz/K3BMGd0TsxKl+juK/wq7B2UNaCA=
Subject key identifier: D6:8D:80:86:51:98:EE:12:97:F4:A3:D9:B4:2B:5F:59:F7:51:DB:23
Certificate issuer: /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial: 21B433720754353D6DB654F4AD69E5AB1F782FE5
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32322d3232203d3e20323632343434.roa
Signing time: Wed 07 Aug 2024 13:14:34 +0000
ROA not before: Wed 07 Aug 2024 13:09:34 +0000
ROA not after: Wed 06 Aug 2025 13:14:34 +0000
asID: 262444
IP address blocks: 177.128.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b4:33:72:07:54:35:3d:6d:b6:54:f4:ad:69:e5:ab:1f:78:2f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
Validity
Not Before: Aug 7 13:09:34 2024 GMT
Not After : Aug 6 13:14:34 2025 GMT
Subject: CN=D68D80865198EE1297F4A3D9B42B5F59F751DB23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:17:2a:b5:36:a8:fb:9c:4e:ec:4e:79:c3:
a3:c7:c7:18:fe:ea:73:b4:76:43:ec:d4:26:a8:b9:
9a:86:91:b8:26:54:f7:e2:08:47:df:f1:50:cf:25:
ad:c1:68:16:20:59:67:a5:ee:56:be:a4:4a:20:f0:
68:3a:8c:e3:5d:14:a8:4c:77:7f:1a:bf:92:22:fd:
22:1a:14:43:a8:d3:23:f2:40:0a:22:49:99:3c:ca:
ac:2c:ac:20:04:32:98:76:14:43:39:93:2d:51:2b:
99:93:3d:b2:ee:88:1e:7b:2c:cb:a5:4f:d0:d0:32:
a3:ad:d0:4a:30:3c:78:23:be:b4:ba:b6:82:e2:36:
0b:5d:0f:1a:1f:73:68:4f:f9:a9:0c:54:b7:95:67:
74:5b:fb:d0:62:2d:71:94:00:71:6a:53:d7:28:9b:
3c:aa:d3:6e:c9:72:c6:65:b7:15:21:58:44:96:8d:
0e:72:22:44:24:d6:50:2d:69:4e:ee:2c:ad:3e:00:
95:93:f1:6d:a3:0f:25:1c:7e:7b:87:b9:14:31:70:
fb:f3:4b:fa:5f:dc:8d:31:8c:23:eb:ac:c0:27:30:
7f:a6:1d:fe:e8:7d:9e:f2:6e:6f:ba:b2:45:ee:14:
e7:dc:f0:44:ab:43:8b:b0:cf:8a:4a:d9:d8:cc:91:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:80:86:51:98:EE:12:97:F4:A3:D9:B4:2B:5F:59:F7:51:DB:23
X509v3 Authority Key Identifier:
keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32322d3232203d3e20323632343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.8.0/22
Signature Algorithm: sha256WithRSAEncryption
56:34:0a:80:49:6f:c2:f7:86:03:5b:1e:a2:81:68:8e:c3:ac:
a1:36:1c:0f:50:b6:a4:ae:38:44:d0:4e:b3:39:20:9d:57:13:
69:a5:87:47:ac:2e:fe:fa:d8:8b:4b:80:1b:9f:c1:61:63:6e:
f0:bd:81:21:6f:d9:5c:c0:59:7e:9e:df:ff:51:16:ef:a1:1c:
d5:50:52:a8:2b:d4:b3:73:6c:a4:08:ed:80:7d:e4:b4:55:bb:
1a:2a:04:9b:79:37:df:1c:1f:0e:9f:24:ab:63:65:8a:2f:22:
3f:91:cf:03:c4:02:7e:9d:1a:73:cb:c2:4f:7d:b0:ba:bc:3e:
8c:18:53:7e:fc:8a:5c:6a:df:09:c3:48:a2:02:76:36:b2:a3:
d4:86:49:42:c2:1d:ff:2f:f7:28:40:b1:d9:4a:90:60:76:fb:
9c:2b:c1:82:29:b8:3d:7f:bf:e2:cc:18:d4:90:61:9f:1f:8c:
e8:4c:9e:6d:df:f7:bd:4e:7d:38:89:0f:d2:8d:f0:58:96:7d:
4a:d9:f4:5c:b1:51:c0:8d:46:ea:5d:72:44:f4:21:82:a8:3f:
9e:b0:bc:0e:f1:8c:33:68:60:78:cf:0f:dd:84:25:29:f8:14:
26:07:63:c1:0d:db:70:20:84:e2:2c:a6:9f:cd:48:40:78:45:
3c:e6:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:11:56 2025 by rpki-client