Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/3137372e35332e3136382e302f32312d3332203d3e20323632343734.roa
File: 3137372e35332e3136382e302f32312d3332203d3e20323632343734.roa (raw, json)
Hash identifier: trKe5u9BouI6g1M3hw+cuCbwn0N8XlX/1iMAQTkRmto=
Subject key identifier: 9C:D4:9D:74:F8:24:A2:30:94:E1:E7:15:0D:08:D7:98:37:83:F0:10
Certificate issuer: /CN=5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8
Certificate serial: 1676B5DF77BEC4DF8567F2903D6A27552A33BFC0
Authority key identifier: 5D:F6:C9:E1:FF:20:4B:9B:90:1D:13:DB:0E:A0:19:AB:4C:0D:0B:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/3137372e35332e3136382e302f32312d3332203d3e20323632343734.roa
Signing time: Sun 24 Mar 2024 17:41:03 +0000
ROA not before: Sun 24 Mar 2024 17:36:03 +0000
ROA not after: Sun 23 Mar 2025 17:41:03 +0000
asID: 262474
IP address blocks: 177.53.168.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:76:b5:df:77:be:c4:df:85:67:f2:90:3d:6a:27:55:2a:33:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8
Validity
Not Before: Mar 24 17:36:03 2024 GMT
Not After : Mar 23 17:41:03 2025 GMT
Subject: CN=9CD49D74F824A23094E1E7150D08D7983783F010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:c3:6f:a5:e0:ca:6b:10:7c:33:95:c0:ee:
72:1e:56:db:86:52:1b:18:5f:fc:b1:45:c5:cc:23:
3e:e0:d9:28:5e:a4:5e:34:d7:70:65:37:10:9f:3d:
95:01:1c:6e:01:52:fe:12:d1:b4:92:f9:71:7d:25:
36:60:ad:db:c8:e3:01:78:25:dd:5e:a9:fc:90:4a:
c4:08:60:48:84:b5:f2:dc:19:22:0c:24:ab:9e:8e:
60:2d:0b:db:5b:27:15:e9:06:b8:4d:16:fb:c1:d8:
e5:2c:73:87:cd:48:43:d2:01:f3:26:d2:d5:25:65:
0b:07:8a:76:5c:1b:32:fa:0d:56:cf:b0:f3:dd:f8:
1e:68:21:63:54:e3:59:5a:8b:a1:22:0f:38:45:e7:
c5:ca:90:22:9d:7e:42:20:95:07:62:97:ca:2f:ea:
96:67:22:63:dc:cb:e9:2b:c9:1f:5a:f1:1e:84:40:
c3:80:9c:c9:46:6e:3b:bd:f7:0c:a9:b0:49:32:3f:
ac:e2:da:c9:c9:c3:04:df:65:9b:2e:7e:1c:1d:58:
89:0b:5b:8a:85:b6:ed:53:91:3e:0b:95:17:b9:4f:
be:f5:da:34:28:fa:b3:f4:3a:a4:c5:b7:fa:07:a8:
d4:9c:7f:19:71:d7:6a:9b:e8:2a:84:bf:6c:5b:c5:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:9D:74:F8:24:A2:30:94:E1:E7:15:0D:08:D7:98:37:83:F0:10
X509v3 Authority Key Identifier:
keyid:5D:F6:C9:E1:FF:20:4B:9B:90:1D:13:DB:0E:A0:19:AB:4C:0D:0B:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/3137372e35332e3136382e302f32312d3332203d3e20323632343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.53.168.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:5c:82:ac:50:62:e2:aa:95:ab:66:3c:65:dd:ca:2a:6f:f2:
73:bd:e8:fd:c2:52:f0:63:36:d6:ac:91:71:0c:55:b1:f9:00:
a1:88:4a:64:e0:6e:72:7f:1e:4f:e8:4e:df:24:7e:d3:37:b0:
98:74:f5:ba:59:a1:90:8f:cf:fd:89:7f:95:55:ab:85:30:aa:
d8:0b:49:6d:3d:bd:57:21:57:92:f9:29:81:fb:98:04:2c:d3:
93:82:96:76:f4:ab:33:b1:74:01:86:a0:6c:98:2f:36:d6:8f:
3c:60:12:e0:e6:f4:a3:14:49:43:bd:06:7b:b2:76:30:ba:18:
28:50:2c:59:61:8e:16:11:43:26:c3:08:71:f1:7b:5b:a5:82:
9c:81:b5:f6:6c:f0:12:67:c0:5e:88:84:46:1d:3e:ab:d5:15:
4b:de:8d:4b:fb:49:5f:ed:d7:cc:94:22:2b:7b:ac:7f:e2:d2:
27:02:fe:4d:46:65:1d:34:e3:6b:b7:aa:1f:dc:e4:93:31:85:
5c:6f:06:95:9d:15:3d:e8:e6:86:6f:ed:62:06:b4:0d:97:8f:
13:e7:e1:f5:f9:65:d6:1d:de:36:ec:fa:21:88:e4:15:4c:ba:
de:2f:22:7d:cc:5c:f9:12:32:44:1f:70:37:9d:21:f7:5b:47:
ba:5d:1f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:49 2025 by rpki-client