Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e38382e302f32342d3234203d3e203532383031.roa
File: 3137372e35322e38382e302f32342d3234203d3e203532383031.roa (raw, json)
Hash identifier: BaKyM6eIPvjNo6XgEYv3iMFfj3nesQt4SFhlR/1pZyU=
Subject key identifier: D3:BB:5D:19:5E:0B:9D:F7:47:AD:F9:81:D8:F9:F8:4C:1D:A8:5C:73
Certificate issuer: /CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Certificate serial: 6BE75662C6A782C33E87608CBDC62D8DB954BCAA
Authority key identifier: 34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e38382e302f32342d3234203d3e203532383031.roa
Signing time: Thu 27 Feb 2025 18:21:49 +0000
ROA not before: Thu 27 Feb 2025 18:16:49 +0000
ROA not after: Thu 26 Feb 2026 18:21:49 +0000
asID: 52801
IP address blocks: 177.52.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e7:56:62:c6:a7:82:c3:3e:87:60:8c:bd:c6:2d:8d:b9:54:bc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Validity
Not Before: Feb 27 18:16:49 2025 GMT
Not After : Feb 26 18:21:49 2026 GMT
Subject: CN=D3BB5D195E0B9DF747ADF981D8F9F84C1DA85C73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:50:71:8b:63:42:75:dd:8f:35:0f:9a:76:
d0:81:90:39:bf:f4:d3:9a:d7:df:38:6f:c6:61:b1:
82:c4:fa:58:7e:e6:6d:3b:7a:27:97:e0:b9:66:e7:
f0:20:bb:d6:26:d1:7b:eb:05:b6:1c:9f:7d:ea:5a:
e3:16:25:4c:a1:73:74:86:2b:69:b0:87:62:f0:84:
2b:53:ef:76:01:6b:22:db:ed:b0:d0:42:9f:ff:e1:
00:09:a1:75:31:ca:ed:c8:42:5a:7d:ad:15:b6:ad:
ed:39:d2:9e:91:23:e5:cf:f2:ec:0d:97:30:07:d8:
33:55:26:9c:50:ad:1c:ec:87:38:7f:1a:5b:41:0a:
8d:46:44:ea:21:83:f9:30:73:cc:7c:95:89:97:51:
91:05:b8:7f:49:f7:94:bb:88:f7:63:36:3a:e9:53:
57:e7:bd:bf:ec:ee:24:ad:fd:93:2b:13:f4:b9:1f:
7f:8e:dd:f2:80:18:8f:d4:74:73:c3:ce:df:e8:2b:
04:43:3d:f5:a3:de:ff:dc:cb:ae:58:f3:a3:b1:c8:
9e:75:a6:5f:26:bc:cc:38:f4:20:29:c1:f4:44:57:
6c:26:d8:d5:4b:f7:11:9e:71:17:cf:fa:33:7a:cd:
13:ac:04:39:4b:3f:97:6c:1c:a0:e5:f7:a2:cb:be:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BB:5D:19:5E:0B:9D:F7:47:AD:F9:81:D8:F9:F8:4C:1D:A8:5C:73
X509v3 Authority Key Identifier:
keyid:34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/340D91D1DC6B13AF4ED3823211FD69C447D525BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e38382e302f32342d3234203d3e203532383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.52.88.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:de:e0:4a:29:3e:75:c7:21:da:c8:e8:89:57:f7:8a:1a:a1:
57:b7:cf:86:7f:c2:c9:c1:6b:dd:7e:66:a1:59:bc:e5:76:c1:
ed:9a:9e:91:c6:8c:a8:86:85:ee:37:36:f1:be:23:7c:e3:57:
3e:81:12:21:a5:62:e4:b5:1b:d6:5b:fe:35:49:bd:af:f1:65:
e7:4a:ba:63:a2:0e:d0:1d:dc:4b:b6:6b:c5:48:da:01:8d:f6:
37:09:e5:38:28:c0:fc:f8:f6:2a:36:28:6a:93:18:36:90:63:
99:6f:69:18:a9:68:f4:60:a5:73:be:22:c4:09:32:fd:3f:ad:
8c:ba:bc:44:a9:d0:34:33:e7:67:8f:7f:78:14:f3:01:fd:e8:
99:cc:75:fc:0b:9a:12:e1:77:ad:d3:5b:60:54:46:ae:a5:86:
eb:f9:7d:b4:e5:5c:38:e3:b6:d5:bb:a8:25:c8:5e:ab:8a:20:
d2:1f:e7:db:f4:98:7d:b5:d8:9d:cc:cd:f6:45:16:bc:86:4e:
7d:ac:a5:7b:65:fb:b7:37:4a:52:7f:dd:f8:66:b5:e3:13:e6:
67:fe:9f:9d:a3:75:84:78:ef:e8:a7:b3:b8:b1:39:7d:9c:04:
13:46:62:5d:c5:ea:fe:e3:d8:1b:8b:be:d0:12:d9:3a:ff:2a:
49:c7:46:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:52 2025 by rpki-client