Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/0/3137372e382e36342e302f32322d3332203d3e20323632383333.roa
File: 3137372e382e36342e302f32322d3332203d3e20323632383333.roa (raw, json)
Hash identifier: 07NaIpZwukQKa2hdV+760grALehLGCSyHHnGrrDe+Fs=
Subject key identifier: E1:31:78:BF:52:E2:83:F1:93:1D:BE:57:97:66:B1:A0:A7:D2:C1:2B
Certificate issuer: /CN=2DC4E7742BEC43606E6290264F426EB1E94AB03B
Certificate serial: 747DD8B3188B2E518E60418448E9DEFA4E5F0940
Authority key identifier: 2D:C4:E7:74:2B:EC:43:60:6E:62:90:26:4F:42:6E:B1:E9:4A:B0:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DC4E7742BEC43606E6290264F426EB1E94AB03B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/0/3137372e382e36342e302f32322d3332203d3e20323632383333.roa
Signing time: Mon 25 Sep 2023 11:52:00 +0000
ROA not before: Mon 25 Sep 2023 11:47:00 +0000
ROA not after: Mon 23 Sep 2024 11:52:00 +0000
asID: 262833
IP address blocks: 177.8.64.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:7d:d8:b3:18:8b:2e:51:8e:60:41:84:48:e9:de:fa:4e:5f:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DC4E7742BEC43606E6290264F426EB1E94AB03B
Validity
Not Before: Sep 25 11:47:00 2023 GMT
Not After : Sep 23 11:52:00 2024 GMT
Subject: CN=E13178BF52E283F1931DBE579766B1A0A7D2C12B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:85:c0:9b:41:97:90:31:39:32:9a:f3:a6:
32:a9:20:f4:10:ef:4d:05:60:11:e6:03:07:9f:2f:
e9:37:6a:29:44:be:15:0e:5a:0c:10:90:6a:2b:96:
61:31:15:6f:c8:74:c6:41:5b:ba:47:15:50:41:48:
a4:ba:4a:e2:09:89:ff:2f:8a:ad:1a:d5:6c:9d:83:
72:c8:0f:7e:43:86:27:0a:0f:b0:69:c7:07:6f:95:
5c:da:db:31:29:42:2a:dd:bd:6d:95:cf:ba:1b:fa:
83:bb:ae:9d:56:a8:29:20:83:a8:6d:11:da:3d:a6:
32:23:e8:a5:c6:3d:c3:08:c7:1a:7a:df:02:5d:1c:
98:43:05:aa:32:66:a3:19:e1:85:67:3d:72:28:21:
f9:b4:18:0d:83:f9:d0:ee:7f:0a:39:94:bf:59:02:
e7:68:c2:aa:d7:2b:3e:ce:fd:10:cf:87:70:09:84:
dc:bb:2d:5d:78:75:5c:7f:ad:36:1b:73:64:9a:2f:
38:cd:f7:7b:17:f9:25:58:d5:ac:75:13:99:43:5c:
23:46:80:42:18:70:da:ee:6e:e7:e3:50:22:fd:95:
d8:41:73:1c:26:cb:8f:8a:85:48:58:e4:97:5b:9b:
f9:16:3f:2a:fe:94:2d:b3:8b:d6:ac:4f:83:8f:32:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:31:78:BF:52:E2:83:F1:93:1D:BE:57:97:66:B1:A0:A7:D2:C1:2B
X509v3 Authority Key Identifier:
keyid:2D:C4:E7:74:2B:EC:43:60:6E:62:90:26:4F:42:6E:B1:E9:4A:B0:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/0/2DC4E7742BEC43606E6290264F426EB1E94AB03B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DC4E7742BEC43606E6290264F426EB1E94AB03B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/0/3137372e382e36342e302f32322d3332203d3e20323632383333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:c9:ff:c9:50:54:a7:60:5a:ce:c2:9f:72:75:5b:41:de:be:
fd:40:24:70:35:24:ba:ff:26:38:1f:ac:78:23:2b:4a:61:0b:
70:7e:8d:cf:84:e6:99:03:45:36:1d:b5:e8:09:77:8a:2f:06:
d2:e3:45:33:87:2f:43:33:b9:88:23:23:8e:cc:1f:72:8c:97:
b2:35:eb:06:c0:81:e9:bb:ed:7c:3b:e1:da:84:85:3f:d2:99:
07:ce:70:6e:8d:ad:d1:7b:3a:3f:55:8c:85:4a:52:90:66:82:
c5:e7:b8:f4:df:a0:24:67:18:ed:bc:3b:55:de:36:25:36:e1:
d7:f5:a7:24:89:b0:bc:d4:4f:f5:a9:da:48:55:27:e7:d5:19:
13:50:68:e8:9c:5b:c9:4a:e1:61:21:f1:04:49:10:1b:f3:d4:
89:52:e3:2c:d3:89:d8:8b:bd:b1:3b:e0:73:d4:3d:8d:8e:75:
ce:c0:59:a6:b0:5c:b9:77:cb:c0:47:ef:e5:39:54:1f:59:da:
2e:53:fe:5e:c2:86:35:2d:5b:05:bc:93:53:e6:4d:26:5d:d9:
9e:dd:7a:95:a9:af:53:d9:af:c0:a2:68:e4:b4:bf:1e:98:00:
66:9e:ab:99:98:6e:35:67:47:e7:8b:60:84:92:c3:97:67:72:
fb:5a:e8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:41 2025 by rpki-client