Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa
File: 3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa (raw, json)
Hash identifier: Iw9xLoQRJCUqFNF+F0oEXm5HIGW/3JPjRDeBKbZLDts=
Subject key identifier: 79:BC:32:53:53:BA:47:F7:0B:8A:41:27:A6:B6:68:CF:FC:2A:29:A7
Certificate issuer: /CN=5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8
Certificate serial: 399A9CC971487420B05535964715EBA11ECAC28A
Authority key identifier: 5D:F6:C9:E1:FF:20:4B:9B:90:1D:13:DB:0E:A0:19:AB:4C:0D:0B:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa
Signing time: Sun 24 Mar 2024 17:41:03 +0000
ROA not before: Sun 24 Mar 2024 17:36:03 +0000
ROA not after: Sun 23 Mar 2025 17:41:03 +0000
asID: 262474
IP address blocks: 177.154.20.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:9a:9c:c9:71:48:74:20:b0:55:35:96:47:15:eb:a1:1e:ca:c2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8
Validity
Not Before: Mar 24 17:36:03 2024 GMT
Not After : Mar 23 17:41:03 2025 GMT
Subject: CN=79BC325353BA47F70B8A4127A6B668CFFC2A29A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:05:d5:5a:78:2c:f1:f1:e3:ff:a3:d7:ec:
af:0b:13:97:d0:73:ec:b6:c8:31:57:1d:15:5b:fa:
7a:11:ba:e1:a0:ce:4d:3f:1f:35:13:6f:db:86:1b:
67:c4:1f:0d:df:1b:3a:72:0b:73:4e:09:1b:71:d9:
ff:15:dd:32:e2:6e:99:77:07:fe:d3:96:36:0c:f3:
e6:ca:e4:d7:4f:83:ef:da:83:c1:1f:f3:f6:02:12:
65:9f:6f:13:6b:0b:fc:51:b4:98:24:22:13:52:1a:
c3:c9:a0:2c:51:52:c2:26:15:b2:ac:cc:c4:d5:7a:
6f:27:de:92:5c:46:25:57:4b:01:71:c4:c0:77:80:
05:04:1f:08:82:09:7e:3d:1e:b9:b1:e4:ff:48:32:
82:b4:9c:46:b3:20:95:c1:83:3a:f8:a2:80:b1:fe:
e5:ee:16:30:8d:70:30:d3:c9:1d:64:0f:a5:3e:19:
b0:46:99:bc:63:dc:d9:b3:d8:49:b8:b6:71:46:76:
5b:f6:30:ee:69:d5:45:af:ab:d5:ce:41:26:c6:a2:
69:d8:12:74:d6:90:1a:cd:af:56:e3:48:49:ea:c5:
d3:41:5d:00:d3:d4:15:59:bb:6e:99:07:79:93:89:
4e:17:9e:5f:a3:1e:11:90:66:e4:c8:32:c3:9e:31:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BC:32:53:53:BA:47:F7:0B:8A:41:27:A6:B6:68:CF:FC:2A:29:A7
X509v3 Authority Key Identifier:
keyid:5D:F6:C9:E1:FF:20:4B:9B:90:1D:13:DB:0E:A0:19:AB:4C:0D:0B:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.154.20.0/22
Signature Algorithm: sha256WithRSAEncryption
40:a3:d7:4d:db:1f:20:94:12:9f:bb:63:5b:14:26:ab:2a:a4:
ff:4e:11:11:7e:18:d6:8c:89:8d:a0:89:54:e3:42:7b:8a:58:
d6:f2:25:cb:2d:1a:7f:31:f2:e1:a3:c0:bd:51:03:07:93:77:
f4:74:91:72:7a:5c:09:f1:67:92:24:4f:99:42:2c:59:34:5d:
0f:38:66:35:54:38:58:9e:d7:c9:cf:a2:b8:86:92:4e:3a:a1:
bd:ad:ab:f8:8d:a7:d6:84:1c:50:6b:04:0e:86:a9:de:5c:80:
f3:6b:57:76:39:fc:2e:13:6e:91:1d:47:49:5c:e3:31:f5:5a:
9a:a8:65:56:c0:48:2a:6a:40:72:47:7f:79:e9:98:ff:54:34:
9b:d7:29:44:9f:b8:43:99:f4:ca:7b:fc:d9:39:14:77:b4:51:
25:e3:ea:5b:37:81:87:8a:0c:9d:aa:7a:d0:26:24:9e:df:7b:
6f:a4:9f:7e:19:73:e5:80:2c:ff:76:04:fe:05:15:87:79:e1:
d9:23:0b:b8:b6:c9:20:3b:28:e7:8e:e3:d9:ae:bb:d8:5f:87:
31:89:37:1f:30:c2:2f:85:f2:d0:59:84:6e:17:4b:1e:14:b1:
11:54:90:94:7b:51:79:bb:27:f7:55:59:0b:19:68:ad:38:9d:
4c:38:ca:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:47 2025 by rpki-client