Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e39352e302f32342d3234203d3e203532383031.roa
File: 3137372e35322e39352e302f32342d3234203d3e203532383031.roa (raw, json)
Hash identifier: mHS2PCLQmY5A31dkQUfrcbaMh+3BYzGtffHUOESlr04=
Subject key identifier: CC:AF:98:EB:F6:19:57:8E:31:0B:1B:32:84:A4:E8:81:E5:E1:4B:EC
Certificate issuer: /CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Certificate serial: 49B0433C29DA21A4F18BFE7E5A760258E15F00F9
Authority key identifier: 34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e39352e302f32342d3234203d3e203532383031.roa
Signing time: Thu 27 Feb 2025 18:21:48 +0000
ROA not before: Thu 27 Feb 2025 18:16:48 +0000
ROA not after: Thu 26 Feb 2026 18:21:48 +0000
asID: 52801
IP address blocks: 177.52.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b0:43:3c:29:da:21:a4:f1:8b:fe:7e:5a:76:02:58:e1:5f:00:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Validity
Not Before: Feb 27 18:16:48 2025 GMT
Not After : Feb 26 18:21:48 2026 GMT
Subject: CN=CCAF98EBF619578E310B1B3284A4E881E5E14BEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:07:1d:36:7f:b8:8c:22:77:0e:9a:2f:ef:
14:42:c6:ea:f8:67:c0:88:d0:33:62:ce:ad:83:ab:
95:4d:60:4f:ac:94:76:e1:77:1d:6e:3c:02:dc:58:
dc:d5:ad:f2:a2:1b:ef:88:b7:2d:de:2d:3f:73:d6:
51:f8:66:d0:bb:3d:7a:67:c7:84:04:8e:2b:0d:c3:
b8:01:9f:7d:54:8f:f9:41:75:4b:2d:af:42:51:73:
a3:07:85:a9:2c:b5:64:21:65:78:c3:dd:f8:3f:8c:
6f:d1:fe:70:84:8e:e0:16:7b:27:62:9b:b5:f5:eb:
03:8b:34:d0:37:af:2a:30:6a:c0:3f:59:26:cf:e9:
be:b1:95:05:cf:60:33:8f:4f:5a:85:b0:9c:58:67:
5e:ba:78:c8:8b:81:f7:90:ec:4a:cd:ce:fa:03:b4:
c2:c3:43:90:3c:06:5f:5b:e6:24:dd:05:dc:09:8e:
54:9a:0c:89:1c:8a:ac:2a:1b:a9:e5:13:2f:8b:6b:
b5:d5:50:ff:60:0d:83:29:49:00:b8:8c:b0:cb:65:
42:79:0b:a7:f5:65:50:32:55:3e:95:23:2d:a9:c4:
40:c3:99:82:e9:ed:94:92:82:53:cd:3d:8b:83:a9:
fd:c9:cb:0e:47:be:c8:33:b3:b0:77:9f:79:b0:6b:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AF:98:EB:F6:19:57:8E:31:0B:1B:32:84:A4:E8:81:E5:E1:4B:EC
X509v3 Authority Key Identifier:
keyid:34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/340D91D1DC6B13AF4ED3823211FD69C447D525BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3137372e35322e39352e302f32342d3234203d3e203532383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.52.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:94:e9:e7:0c:4a:b8:34:4f:84:75:11:64:14:ae:ff:a6:e8:
8a:46:63:5f:3b:ab:32:95:9e:04:6b:b9:fc:52:01:20:37:b1:
69:d1:2b:e2:1e:b5:ee:6e:51:3c:93:20:45:f5:c8:8e:3e:17:
30:c5:47:f2:5e:9b:4e:1d:08:29:24:8d:a8:82:0e:0f:9a:9c:
61:5f:9c:d4:a9:77:f4:1f:b9:83:75:14:8a:e8:04:ca:a9:3e:
bb:5e:79:93:1e:52:63:1c:7c:87:b4:8e:f8:6f:e7:c5:0d:5a:
c2:13:54:b3:37:9b:d3:8f:0d:f0:e7:bd:51:26:3c:5e:8e:b4:
e0:1c:63:a5:b9:04:0b:b4:fc:11:12:b3:51:56:9a:3f:ba:40:
5e:6c:74:f5:28:2e:9e:5f:ea:39:dd:bf:7a:69:fd:55:23:40:
87:37:a0:bc:4b:98:95:31:0d:85:44:03:12:b9:df:9b:74:7d:
3f:1e:4a:5a:c3:d4:ca:b1:d0:88:78:12:fb:10:f8:24:01:83:
55:a7:db:c7:e8:b3:32:24:eb:7f:89:50:c3:b5:a3:0d:6a:d7:
7a:ed:99:77:76:29:dd:f9:1c:db:a7:05:a9:00:21:84:80:6d:
f1:87:d2:ca:b9:08:9d:0c:30:79:a6:cc:e7:b8:0c:3e:64:9a:
3d:84:13:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:49:12 2025 by rpki-client