Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231322e302f32342d3234203d3e203532383438.roa
File: 3137372e38352e3231322e302f32342d3234203d3e203532383438.roa (raw, json)
Hash identifier: MK46EOQmbC35WhEWUmA1L+F9AWzxso9iv0FyQJWVVEg=
Subject key identifier: 70:78:EE:90:B3:1F:88:8F:74:96:F3:4D:9B:95:80:40:C1:3F:F3:4B
Certificate issuer: /CN=99143CBAF11D170944D719FD796009BC38F9F201
Certificate serial: 0C49162329E8AC143B52DED0C0087AF5E9D728F3
Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231322e302f32342d3234203d3e203532383438.roa
Signing time: Fri 21 Feb 2025 13:31:57 +0000
ROA not before: Fri 21 Feb 2025 13:26:57 +0000
ROA not after: Fri 20 Feb 2026 13:31:57 +0000
asID: 52848
IP address blocks: 177.85.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:49:16:23:29:e8:ac:14:3b:52:de:d0:c0:08:7a:f5:e9:d7:28:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201
Validity
Not Before: Feb 21 13:26:57 2025 GMT
Not After : Feb 20 13:31:57 2026 GMT
Subject: CN=7078EE90B31F888F7496F34D9B958040C13FF34B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fc:37:49:91:f9:ae:c9:a4:65:9a:7a:1d:88:
9f:2c:65:5d:94:7d:ba:66:f5:c7:40:06:d1:0c:65:
55:4c:9e:2d:44:2a:13:53:af:2c:8a:59:11:43:3e:
1c:a7:af:85:5f:0a:27:da:6e:c5:54:c5:66:52:64:
8b:06:7d:4a:b6:38:6d:89:84:a1:e3:ea:29:99:f1:
2c:c1:fb:e3:4c:ee:51:ab:45:ea:cd:e2:04:8c:89:
30:7f:f2:f2:39:1b:27:44:4b:13:72:36:70:29:df:
8f:3c:73:46:c3:e9:ca:d6:82:5c:74:43:70:07:8f:
46:dc:b8:e8:df:e4:cb:5d:86:95:7a:55:85:7d:a0:
d4:6b:d7:bf:96:16:10:6a:ed:82:0a:99:33:bd:93:
06:0e:c0:fc:a2:15:e2:cb:bd:29:c3:c3:3d:21:d0:
5f:20:8a:61:99:2b:2d:e3:20:15:9e:8f:56:95:27:
35:a2:d1:be:32:ac:ed:53:e4:96:2d:1c:89:2b:78:
38:8a:b1:19:5e:0b:78:4e:14:b9:08:0f:25:7c:f5:
9b:42:81:8a:cf:47:45:46:90:b7:f0:12:4a:46:89:
61:6d:1e:f3:00:41:99:23:78:80:39:51:a5:f3:ef:
f8:e6:73:fe:28:00:40:27:4c:6e:21:3d:85:0d:ff:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:EE:90:B3:1F:88:8F:74:96:F3:4D:9B:95:80:40:C1:3F:F3:4B
X509v3 Authority Key Identifier:
keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231322e302f32342d3234203d3e203532383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:50:e0:5d:8e:86:a6:d8:ee:db:5b:ee:08:05:d0:db:61:de:
37:d5:ea:a7:26:80:cf:e3:ba:c4:00:8f:cd:57:a6:1a:fc:80:
ab:5d:46:c9:1c:f8:22:7c:ef:16:b1:90:97:4a:0a:71:03:36:
de:4d:ba:3a:ee:1a:27:e3:71:a5:c4:50:f0:5a:ce:d9:45:43:
91:db:a3:3f:c1:22:15:45:f2:bc:10:95:61:da:d4:11:a3:f4:
f4:ae:53:43:51:2c:3d:c8:4c:28:e5:0e:54:33:8f:85:bd:ab:
02:e3:38:fe:74:8b:09:f1:57:31:6d:73:14:92:c8:cf:7f:a8:
0c:8b:14:1b:f3:e5:ff:d3:b1:d7:e7:a5:d4:15:1c:12:f4:8b:
ce:94:03:82:9a:84:5e:28:e3:7f:24:9e:0d:5f:c5:a4:17:56:
45:6e:35:66:46:f1:ea:af:73:2a:41:66:9a:d0:eb:20:e8:af:
0c:fb:6a:e8:c4:e9:d8:50:d4:77:43:43:5e:f8:b1:a3:6f:25:
3c:00:aa:03:13:e2:74:7c:18:d6:9e:41:e5:18:37:cc:64:6f:
04:cc:f4:9d:97:76:e0:35:3d:c1:11:00:08:a1:9e:43:76:13:
43:be:bb:3a:cf:b3:5c:2a:dd:a6:fe:02:34:3d:9f:d4:8a:39:
a3:ac:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:29:29 2025 by rpki-client