Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e312e302f32342d3234203d3e20323632353039.roa
File: 3137372e36372e312e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier: uV8vtgR2OYKIS7ZR8Qjtb8hXwF/oJvq1HfwQ0W/lsM8=
Subject key identifier: AF:34:FF:EB:1E:73:FC:18:15:49:93:E9:07:CC:F6:8C:50:07:82:DE
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 40AC34CA4181D0C01D14A5722749642704D71E8B
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e312e302f32342d3234203d3e20323632353039.roa
Signing time: Mon 14 Oct 2024 01:49:52 +0000
ROA not before: Mon 14 Oct 2024 01:44:52 +0000
ROA not after: Mon 13 Oct 2025 01:49:52 +0000
asID: 262509
IP address blocks: 177.67.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ac:34:ca:41:81:d0:c0:1d:14:a5:72:27:49:64:27:04:d7:1e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:52 2024 GMT
Not After : Oct 13 01:49:52 2025 GMT
Subject: CN=AF34FFEB1E73FC18154993E907CCF68C500782DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:64:06:92:b6:e0:81:1a:fc:78:6a:ea:e8:
f7:eb:39:8d:c8:5e:5a:84:1b:93:cb:f9:e7:56:b9:
bd:70:f1:87:5e:5a:3e:7f:2d:90:f5:23:67:30:90:
a0:9c:83:43:9d:39:dd:dc:f3:ac:c3:97:73:ca:b3:
4a:b6:ab:9d:fa:cb:08:4f:60:4e:98:31:03:77:37:
c5:be:7a:d8:75:0e:c2:2f:a6:2d:59:38:c8:ce:fc:
55:8f:f5:a6:9c:7a:7a:c4:43:17:0e:0c:ab:a4:b3:
77:75:fb:51:31:82:51:2f:8b:9a:15:fd:22:d1:e2:
97:80:63:f2:ed:b4:ff:e3:2e:0f:c5:c2:19:5d:64:
26:43:eb:78:08:75:23:b8:51:20:e0:94:40:9a:a7:
42:80:11:c0:06:ba:d5:a9:64:e2:36:ef:bb:81:e6:
f9:6c:fe:0d:a5:3f:ec:54:0b:18:24:94:af:37:d7:
81:52:c8:44:f5:12:d0:ee:da:75:bf:93:81:df:b7:
75:6b:aa:c6:8e:9a:8b:ec:ff:49:0a:f5:fc:2d:a1:
5a:f3:49:2d:37:cf:92:82:6a:00:85:de:2c:fe:8f:
f6:fa:cd:ae:a4:90:f2:7c:2b:29:02:4b:f9:4c:65:
cd:dd:76:64:48:d3:d2:4b:55:0c:ea:f2:8d:9b:54:
6b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:34:FF:EB:1E:73:FC:18:15:49:93:E9:07:CC:F6:8C:50:07:82:DE
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e312e302f32342d3234203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:71:77:cf:f5:db:3c:2f:59:04:bd:7d:1c:3a:fa:3f:9b:18:
68:5b:11:7b:83:da:9c:92:c3:c8:8c:22:f8:38:0d:03:bf:8f:
d5:82:2d:e8:dc:e9:7f:4c:2c:1d:1b:7e:26:c2:22:06:73:d5:
29:a3:82:08:56:9f:0e:ea:47:35:72:3a:29:40:a1:78:28:bb:
af:ad:17:60:8c:3a:fb:47:ff:ce:e2:2c:a2:c8:47:1d:40:51:
36:ec:12:91:d2:cc:4d:80:0a:a3:74:1f:62:7b:43:b1:41:bd:
d8:eb:4a:91:c2:e3:a6:9e:38:0f:7f:3f:db:95:5c:04:7e:c9:
67:09:8f:4a:75:99:a4:75:24:e7:7d:cb:c8:a4:5e:3f:2d:b1:
0f:63:7a:cc:e6:65:8f:64:0e:9f:96:e9:33:eb:46:0f:79:e3:
6b:90:03:53:4f:00:08:aa:08:62:4a:76:8b:93:7c:d4:b8:53:
e6:5a:fa:eb:eb:e2:1e:6b:c0:7a:c7:e6:e5:31:b1:3b:a2:c2:
9a:f2:57:eb:08:0e:bd:e3:77:18:39:9d:0e:44:ea:a2:3f:a7:
f1:57:b6:78:01:0d:cd:c9:b5:f6:36:15:2c:ff:f9:69:47:79:
8c:c4:a7:9b:f0:3e:82:b2:b1:27:e1:b9:6f:ac:04:54:ed:c8:
51:66:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:33:38 2025 by rpki-client