Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e39342e302f32342d3234203d3e203532383031.roa
File: 3137372e35322e39342e302f32342d3234203d3e203532383031.roa (raw, json)
Hash identifier: ZcH/E0D8zY1P/WOIHtT41yWkWIt4Di0pHNtWpIRLUd4=
Subject key identifier: C3:59:6E:56:E4:EE:1D:A0:63:65:2C:1C:8C:BF:15:B2:8F:5A:7B:F9
Certificate issuer: /CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Certificate serial: 20C08E9FDC03C2CBFA93A45E4C4D1EC2378908E7
Authority key identifier: 34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e39342e302f32342d3234203d3e203532383031.roa
Signing time: Thu 27 Feb 2025 18:21:49 +0000
ROA not before: Thu 27 Feb 2025 18:16:49 +0000
ROA not after: Thu 26 Feb 2026 18:21:49 +0000
asID: 52801
IP address blocks: 177.52.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c0:8e:9f:dc:03:c2:cb:fa:93:a4:5e:4c:4d:1e:c2:37:89:08:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Validity
Not Before: Feb 27 18:16:49 2025 GMT
Not After : Feb 26 18:21:49 2026 GMT
Subject: CN=C3596E56E4EE1DA063652C1C8CBF15B28F5A7BF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:7a:6b:19:f1:fc:0d:63:09:46:f9:77:b4:
c5:6d:30:49:27:f7:40:fb:44:6a:a0:2b:ea:0d:26:
e8:28:d4:af:55:67:21:da:e1:78:23:af:39:c9:32:
2a:d5:44:9b:d6:03:e3:c3:ab:74:9e:20:1f:23:69:
41:f7:6c:ff:fb:f9:bc:e0:53:ce:21:cb:31:c9:97:
f6:6c:36:ee:95:2b:8d:9a:b3:10:55:a1:ce:17:54:
d0:7b:27:c8:96:54:60:21:fe:70:1b:97:72:2b:b3:
83:fc:2b:ef:28:0d:55:ab:6d:bf:d2:05:3e:05:d4:
5c:b1:f1:a9:20:b4:61:3f:6a:33:ab:8e:0c:fa:1e:
dc:e0:15:60:b3:f7:76:8c:50:7d:8a:9f:3f:b5:5e:
6d:aa:39:6f:67:6f:6e:16:9a:53:76:6e:65:42:c5:
f4:c0:7c:8a:07:8f:2f:d8:88:60:00:67:b6:c0:17:
ac:66:f4:84:bc:3e:2d:4f:56:cc:10:9a:3c:a0:bb:
57:68:3e:37:39:fa:e7:59:4c:ce:f2:14:07:2c:26:
ef:de:17:85:24:63:ab:58:81:9f:b1:e7:3d:b3:28:
29:69:69:14:e3:a7:b2:2e:f4:af:bd:9e:31:d1:3d:
fd:f3:25:ec:97:b0:3d:42:aa:5c:54:77:d3:51:ff:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:59:6E:56:E4:EE:1D:A0:63:65:2C:1C:8C:BF:15:B2:8F:5A:7B:F9
X509v3 Authority Key Identifier:
keyid:34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/340D91D1DC6B13AF4ED3823211FD69C447D525BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e39342e302f32342d3234203d3e203532383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.52.94.0/24
Signature Algorithm: sha256WithRSAEncryption
04:77:a9:13:3a:cc:c7:1d:f9:1e:8d:0b:6f:1d:ff:f2:5b:12:
cc:8e:42:bc:48:1d:34:87:c4:5f:98:ee:7d:2b:87:af:49:38:
34:f2:23:1f:ea:45:53:6d:74:63:21:cd:c6:da:b4:ae:49:6a:
4b:d9:0d:1c:c1:2f:f5:47:35:6a:ff:ea:89:99:0e:5c:30:fa:
08:c2:a2:ae:66:5c:b8:8e:93:ff:7a:30:7a:d3:97:8b:28:62:
cf:3f:f3:f4:f8:be:28:c5:f3:cb:cf:57:90:bc:19:14:f9:44:
16:00:54:60:10:35:97:07:1e:f3:45:10:ac:c3:0c:4d:28:84:
19:b1:95:3c:42:92:5e:bd:d3:cc:af:30:db:c9:60:d5:34:52:
fa:80:67:8f:02:cd:9e:1c:9f:01:11:1d:48:0f:46:20:12:dc:
5c:2e:be:36:57:3c:85:d1:16:41:24:7c:61:d1:8a:5b:e4:39:
73:b9:c9:6f:2c:5f:1f:a7:2b:0c:9c:89:d8:29:72:51:a1:94:
8f:16:45:18:06:fc:a6:4e:5c:50:5d:43:59:27:5c:33:de:54:
c3:14:15:75:97:5c:f2:97:8e:8c:e6:93:b3:ee:c7:71:fb:8c:
65:d8:05:38:31:49:94:36:88:63:0c:fd:b0:2d:aa:ba:6a:b1:
29:c3:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:23:17 2025 by rpki-client