Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e39332e302f32342d3234203d3e203532383031.roa
File: 3137372e35322e39332e302f32342d3234203d3e203532383031.roa (raw, json)
Hash identifier: XWWJPBWTA2Plmefrxvf29P6K2YBj1NyM6M5nEmn6/J0=
Subject key identifier: 1C:C5:F2:87:C9:F5:57:E8:56:69:41:85:1C:97:C0:0F:14:F9:15:72
Certificate issuer: /CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Certificate serial: 27B4A1F7133946BFD8FFC052345D1C2AF94B654D
Authority key identifier: 34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e39332e302f32342d3234203d3e203532383031.roa
Signing time: Thu 27 Feb 2025 18:21:50 +0000
ROA not before: Thu 27 Feb 2025 18:16:50 +0000
ROA not after: Thu 26 Feb 2026 18:21:50 +0000
asID: 52801
IP address blocks: 177.52.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b4:a1:f7:13:39:46:bf:d8:ff:c0:52:34:5d:1c:2a:f9:4b:65:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Validity
Not Before: Feb 27 18:16:50 2025 GMT
Not After : Feb 26 18:21:50 2026 GMT
Subject: CN=1CC5F287C9F557E8566941851C97C00F14F91572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:25:3c:ff:a5:73:af:d4:9f:d0:cf:e9:06:
03:f5:04:b7:04:29:55:41:b4:93:e7:8d:f1:ca:38:
e9:3c:5a:8c:2b:c7:ba:27:1a:19:08:99:c3:ef:0e:
a1:11:be:48:e3:9b:ad:0f:e9:2e:59:de:49:62:94:
56:4c:7b:67:9e:8a:5c:30:1c:31:02:2e:71:42:98:
97:12:71:5d:7a:13:98:6a:5e:ca:9d:02:f8:80:ef:
58:b8:a0:70:09:7c:27:d2:ab:4f:6f:b5:57:6c:33:
95:35:78:3f:79:b3:56:1e:f9:46:85:1f:c4:5c:e8:
fa:87:42:dd:0d:ce:9f:3b:9e:ab:b7:d7:c8:8a:b6:
27:8b:c8:91:ab:35:bd:53:65:5e:f0:90:de:45:3d:
a7:e4:6c:da:1c:eb:4b:77:ff:6e:c0:8d:d8:15:eb:
32:b4:4a:26:68:6b:c1:7c:91:99:82:61:3e:43:14:
84:9c:98:ea:06:0a:26:b4:fb:d3:6a:42:c8:9c:2b:
e3:12:67:22:df:ba:69:f5:bb:a4:ae:9e:e5:9f:1a:
14:64:ef:eb:a2:56:08:fb:27:0c:22:98:d6:40:a1:
69:8a:5e:7e:6f:9c:44:36:bc:7c:a3:7a:df:98:d4:
6d:4d:5b:fe:0d:b6:c7:69:8a:e6:b5:a4:b6:af:42:
62:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C5:F2:87:C9:F5:57:E8:56:69:41:85:1C:97:C0:0F:14:F9:15:72
X509v3 Authority Key Identifier:
keyid:34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/340D91D1DC6B13AF4ED3823211FD69C447D525BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e39332e302f32342d3234203d3e203532383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.52.93.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ac:93:05:76:fb:41:0e:72:cb:82:d6:58:de:67:54:40:4a:
91:65:c0:20:a5:53:12:00:95:b8:50:ee:4a:78:c3:b6:38:bf:
ba:c1:f9:45:67:dc:87:57:5e:23:23:dd:52:38:02:ff:6d:b2:
f4:b4:98:f0:d4:da:fa:9d:7d:ae:dc:26:a2:c8:b6:ae:3a:3e:
3b:d7:d1:cc:cb:35:0b:7e:b6:1c:81:61:29:d1:4b:22:e0:0a:
fd:ce:b3:e8:55:a9:ef:98:1f:bb:a4:c5:9e:c0:6a:15:39:c6:
98:cf:26:4a:60:1d:5d:de:42:5d:4c:e5:7d:15:23:e9:6a:f7:
13:36:36:1e:ef:fa:40:a8:4f:47:d5:da:81:56:85:c9:32:ac:
48:49:39:f2:d5:3a:6d:35:d0:af:b3:af:05:86:55:dc:51:4d:
b3:83:41:88:cf:4d:ea:29:d7:ae:ee:76:5e:63:6a:0c:e4:6f:
cb:2f:b5:0a:4c:03:6f:16:fc:c1:aa:a6:4c:17:bc:d3:4b:b0:
bb:53:14:1e:05:f7:04:64:d6:c0:e1:51:f3:4b:12:2c:3e:29:
6a:e5:94:f1:a3:77:57:ad:b8:f4:12:8e:c2:c1:32:5d:48:a5:
7e:72:d5:50:af:62:a2:7f:36:44:04:ba:ff:db:71:8c:13:1c:
c2:06:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:01:47 2025 by rpki-client