Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e38382e302f32312d3231203d3e203532383031.roa
File: 3137372e35322e38382e302f32312d3231203d3e203532383031.roa (raw, json)
Hash identifier: Q+SDPOLCcnVJ/doFIEzZBwfAVua7O3mFzYj9fczHSGE=
Subject key identifier: 5F:92:69:E7:71:50:7D:F8:B4:FC:12:E1:17:90:AD:BD:81:25:5C:45
Certificate issuer: /CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Certificate serial: 4E2F6069206D10B553CDE3B8AD7DE2F852B167C4
Authority key identifier: 34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e38382e302f32312d3231203d3e203532383031.roa
Signing time: Thu 27 Feb 2025 18:21:50 +0000
ROA not before: Thu 27 Feb 2025 18:16:50 +0000
ROA not after: Thu 26 Feb 2026 18:21:50 +0000
asID: 52801
IP address blocks: 177.52.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2f:60:69:20:6d:10:b5:53:cd:e3:b8:ad:7d:e2:f8:52:b1:67:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Validity
Not Before: Feb 27 18:16:50 2025 GMT
Not After : Feb 26 18:21:50 2026 GMT
Subject: CN=5F9269E771507DF8B4FC12E11790ADBD81255C45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:35:43:f4:be:89:4a:11:e0:fa:43:64:c7:
77:a0:63:0a:78:55:ca:73:b8:41:21:3a:e0:73:50:
da:13:24:7f:91:87:08:07:33:e7:a6:15:ae:a1:d0:
28:b7:2e:23:6f:45:74:5c:2e:47:4a:17:b0:68:ce:
68:e1:6b:02:7f:99:25:6e:99:e1:d8:a8:54:20:71:
3f:d8:04:c4:f4:f7:13:8f:8b:f1:8d:56:94:03:11:
27:cb:1a:c0:ec:a3:1a:92:f9:15:12:36:b5:dc:d8:
aa:7b:98:d8:f6:cd:b4:2a:b4:44:3c:92:a2:bb:b9:
63:4d:12:dc:4a:f0:55:77:c8:2c:a0:99:56:01:bc:
a5:ba:d9:62:44:34:19:ab:7c:73:c1:29:d0:99:bf:
f5:dc:b3:a1:e5:5b:35:08:51:71:5c:a2:53:7c:bb:
e6:90:5a:e7:e2:f0:94:35:04:1f:5f:0e:51:cb:df:
bf:56:ab:06:dd:87:31:79:e0:95:67:7f:5a:7c:aa:
c3:b6:68:21:0f:61:e1:0c:ad:16:c6:61:09:b7:34:
ad:ad:4a:91:c4:15:a8:57:01:a6:3a:68:e6:2d:a5:
4d:2b:8e:49:c7:de:d5:ba:c1:ee:03:ee:f5:0d:d1:
7b:4b:23:26:be:57:e2:0d:fe:af:93:e2:a0:f9:54:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:92:69:E7:71:50:7D:F8:B4:FC:12:E1:17:90:AD:BD:81:25:5C:45
X509v3 Authority Key Identifier:
keyid:34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/340D91D1DC6B13AF4ED3823211FD69C447D525BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e38382e302f32312d3231203d3e203532383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.52.88.0/21
Signature Algorithm: sha256WithRSAEncryption
65:53:4f:28:77:00:18:6c:eb:f3:50:4a:26:37:41:f1:dc:72:
e0:cd:cb:b0:36:b9:f3:2f:78:31:b2:a2:e2:18:e0:c8:2c:1d:
d4:35:a0:f9:60:87:6e:47:8d:41:05:07:a7:d6:f7:f0:91:76:
38:13:31:14:e8:4d:e6:55:40:06:43:71:90:81:c1:3e:a6:6f:
e5:94:e7:79:a1:8b:42:af:3d:b9:8b:32:e1:af:bc:68:55:6b:
8e:f1:27:12:32:26:32:f9:6f:71:0b:a4:12:f0:df:79:da:9c:
1e:04:2c:ed:69:47:23:4f:55:65:f9:05:f7:70:e7:28:49:32:
da:64:09:6c:03:06:f2:b0:0f:2f:77:ae:05:b3:29:50:5f:28:
bf:a3:0d:b5:8f:2c:7b:cd:ea:80:99:bf:75:a8:06:40:ef:70:
ea:d1:f0:2e:bd:83:90:72:91:16:16:6c:32:b1:30:44:b7:51:
86:da:a6:4e:31:d8:e8:69:89:01:8c:26:fc:7a:c2:2a:6a:c2:
08:e0:86:f7:54:47:99:9c:63:f4:07:e8:a0:06:5b:90:d6:47:
14:69:cd:ce:12:cf:6d:eb:f2:b7:75:dc:44:92:d7:a0:32:9d:
8c:13:7d:97:30:ef:a4:c4:96:90:5f:53:91:79:68:8f:ea:67:
c5:45:c7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:55:59 2025 by rpki-client