Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa
File: 3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa (raw, json)
Hash identifier: 4PPYBpXogJKoB8CdTXQjzX5YQWO69XxPjOg2VgclUPE=
Subject key identifier: 9A:7F:AB:97:45:53:3A:75:EB:8A:23:A7:5D:CA:B6:DD:1A:3E:FB:71
Certificate issuer: /CN=A910E04F27510FFF1E8362052070412C903FFD8B
Certificate serial: 2B8505C3096AF5013B52190D1C08B117724904C3
Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa
Signing time: Fri 31 Jan 2025 12:52:04 +0000
ROA not before: Fri 31 Jan 2025 12:47:04 +0000
ROA not after: Fri 30 Jan 2026 12:52:04 +0000
asID: 53048
IP address blocks: 132.255.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:85:05:c3:09:6a:f5:01:3b:52:19:0d:1c:08:b1:17:72:49:04:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B
Validity
Not Before: Jan 31 12:47:04 2025 GMT
Not After : Jan 30 12:52:04 2026 GMT
Subject: CN=9A7FAB9745533A75EB8A23A75DCAB6DD1A3EFB71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:d5:d2:61:a9:76:7d:0a:82:21:3b:4e:fd:
20:36:ec:9f:78:36:a2:83:ae:ad:e0:ee:63:a3:45:
13:a8:7c:a3:76:c9:74:50:0c:72:18:5d:42:7b:1c:
03:fe:11:79:cd:17:b5:58:ff:ba:d7:e2:7b:47:b7:
41:f8:a5:ba:db:cf:4d:05:84:4e:35:8e:67:d1:54:
87:b3:ea:49:2a:50:6f:22:27:fd:76:cf:5f:b5:ac:
9d:ee:5b:23:ca:34:b2:fc:d1:2f:7e:79:d5:a5:67:
c5:f8:bf:e1:5d:0d:db:64:7b:77:9b:b8:22:41:64:
0c:8d:18:a8:19:bf:a1:92:6b:d7:94:b8:88:ad:d5:
11:4a:32:3f:e7:79:36:7f:a6:f6:17:98:1c:de:e4:
9e:0b:61:e0:bb:50:09:67:9c:41:8a:44:7b:c4:4e:
44:8e:3a:2d:db:62:01:91:50:49:bd:04:10:99:9f:
65:25:11:71:ca:f2:a1:9e:9a:3b:53:ea:75:64:1d:
ae:44:d1:64:6b:1c:d4:75:5d:8e:07:4a:57:f9:53:
5e:17:ba:4d:c9:59:36:11:b7:99:b9:74:1f:53:d2:
64:0d:87:53:1d:b1:5b:3b:f9:a7:f9:de:58:5a:8e:
f0:09:c7:a5:88:b1:e0:ae:cd:14:28:af:67:0a:fe:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:AB:97:45:53:3A:75:EB:8A:23:A7:5D:CA:B6:DD:1A:3E:FB:71
X509v3 Authority Key Identifier:
keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.176.0/22
Signature Algorithm: sha256WithRSAEncryption
29:0a:e8:f9:af:0c:22:fc:f1:cc:db:76:47:0d:9d:9a:1a:39:
4e:76:c0:47:10:d2:8e:c9:87:fd:58:4c:35:74:16:cf:0f:ef:
5d:25:34:ec:9a:7a:69:45:72:e2:0e:9b:c4:90:4f:be:cd:19:
d0:ea:cd:8b:58:b0:d9:a5:8f:31:9f:23:3a:31:bc:bd:68:c5:
6c:09:07:0f:ab:98:58:38:96:f0:49:d3:2a:ca:30:8e:79:de:
95:bb:16:bb:1d:ba:1d:50:d5:7c:26:64:72:24:d5:00:bc:4d:
ed:ac:64:6c:cd:03:18:55:a5:9d:da:91:fb:29:73:c6:26:08:
65:39:e4:ef:a0:53:ad:7f:c4:73:5f:4f:9e:5a:f3:c6:5a:a7:
7a:23:bb:8a:62:3f:fc:34:c9:2d:ee:9b:c6:21:de:51:6e:ca:
28:bc:b7:76:93:9c:88:85:39:1d:3b:ee:4b:b5:67:f0:5e:cd:
73:05:ac:43:60:bd:2e:d3:bc:96:fe:5b:0b:75:ee:5e:fd:e9:
5a:d8:29:63:64:99:24:13:95:84:43:5e:de:72:c3:e6:14:f6:
fa:b0:da:c2:0d:c7:37:44:70:bf:3e:c4:66:99:ef:b2:10:75:
d0:18:42:1c:3f:6b:de:b1:35:5b:ba:52:a1:e7:94:93:67:c5:
6c:62:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:09:34 2025 by rpki-client