Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e38392e302f32342d3234203d3e203532383031.roa
File: 3137372e35322e38392e302f32342d3234203d3e203532383031.roa (raw, json)
Hash identifier: 4BO01mOxkyqrUsZygIRFSOxVNI0SLLy3fSIt2KbJ2mE=
Subject key identifier: D7:06:35:F4:53:FF:AC:69:3F:9C:24:43:C6:1E:2A:F2:48:F2:19:40
Certificate issuer: /CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Certificate serial: 051B8132473297A6122F42ED39EAAB0E54211B39
Authority key identifier: 34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e38392e302f32342d3234203d3e203532383031.roa
Signing time: Thu 27 Feb 2025 18:21:48 +0000
ROA not before: Thu 27 Feb 2025 18:16:48 +0000
ROA not after: Thu 26 Feb 2026 18:21:48 +0000
asID: 52801
IP address blocks: 177.52.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1b:81:32:47:32:97:a6:12:2f:42:ed:39:ea:ab:0e:54:21:1b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Validity
Not Before: Feb 27 18:16:48 2025 GMT
Not After : Feb 26 18:21:48 2026 GMT
Subject: CN=D70635F453FFAC693F9C2443C61E2AF248F21940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:3f:ec:c2:a6:18:e9:61:16:6b:3e:95:8a:
92:44:2c:8b:ff:b8:59:6f:13:b4:43:23:cd:08:8b:
bb:a0:fb:df:7e:99:26:d5:1e:a4:44:31:1d:f4:a6:
b2:11:8d:5a:64:9d:90:af:cc:e6:5c:b3:88:8d:64:
12:7f:da:a6:0f:7d:62:e0:ba:77:ab:ed:2d:0a:e6:
36:d5:6f:f8:6b:a7:dd:d5:ba:31:d8:4b:d0:c3:73:
9e:3a:31:2e:f8:f9:44:69:c9:42:73:03:f5:95:c8:
d2:ff:c9:a7:1b:18:25:16:af:81:53:7f:c1:c4:7b:
eb:35:05:0a:e9:b4:fd:09:03:b9:6e:ab:ed:fb:f7:
99:c5:3c:8d:b9:ae:e7:5c:51:bf:38:75:96:0c:cf:
bd:d6:f2:f3:7c:86:0a:23:56:20:4b:90:13:03:c3:
b6:85:bf:c4:c2:7b:3c:7d:3e:04:03:d0:0b:3c:67:
46:5a:7a:52:b6:4e:b0:7c:60:05:14:84:79:e2:b9:
fc:22:8a:f9:e6:de:fa:bf:97:5c:5d:17:a8:59:53:
fb:5f:eb:59:5b:17:e4:73:d3:39:41:b8:f1:38:4a:
5f:d1:70:9c:dd:a1:01:41:3a:4c:29:bf:60:33:2d:
83:e3:77:90:c8:4c:a2:d1:da:b1:a3:57:db:a4:68:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:35:F4:53:FF:AC:69:3F:9C:24:43:C6:1E:2A:F2:48:F2:19:40
X509v3 Authority Key Identifier:
keyid:34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/340D91D1DC6B13AF4ED3823211FD69C447D525BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e38392e302f32342d3234203d3e203532383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.52.89.0/24
Signature Algorithm: sha256WithRSAEncryption
67:bc:26:7b:26:33:de:98:5a:fe:14:ee:96:ac:d0:3c:1e:b2:
97:eb:da:4f:f4:6b:35:b2:c3:0e:d0:08:41:83:f1:d5:bc:64:
ad:39:f2:d6:25:7f:70:77:cb:82:62:d0:83:7c:78:74:ff:c5:
d8:95:5f:0d:5b:52:59:a6:d2:7b:05:bb:d2:23:76:d2:ff:62:
85:9d:1c:d7:ec:39:65:51:16:61:c0:83:e7:d5:55:e1:a9:e5:
b6:bd:c5:ff:ce:27:55:33:56:a9:c1:98:24:8a:03:30:8b:1b:
0b:49:4b:e4:ad:2f:03:eb:12:0a:45:f0:f7:5b:0b:f4:91:f1:
33:33:ca:af:1a:6c:f0:bf:86:ab:07:5c:20:3b:61:3e:6b:e8:
94:12:33:a4:be:74:2c:8c:75:b6:81:c4:cc:4b:e6:19:f2:d2:
e1:69:83:c8:b0:e7:18:36:69:05:6e:d4:a8:90:e1:ba:d5:7a:
ed:09:0a:8d:48:9e:22:7b:7a:e9:9f:de:0e:83:37:4a:73:60:
a4:27:20:d2:e8:1b:25:3a:f0:22:34:6f:89:a0:38:13:17:0d:
95:fa:e3:44:3e:29:b5:85:ae:d1:93:16:07:1f:3f:8a:3a:e8:
ec:28:fb:d2:e8:21:cc:80:30:8a:c3:4a:4d:23:79:f8:60:21:
23:16:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:48 2025 by rpki-client