Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e312e302f32342d3234203d3e203238323730.roa
File: 3137372e36372e312e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: qwioeZasxXYoQa7ItsnkqinDMxYcQdnNh8sAnWk0ogQ=
Subject key identifier: 33:40:88:18:23:4C:A9:C4:69:B1:60:D2:0F:33:C1:F8:C0:F4:7B:34
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 66A5DBC123339F195FCB4136CE7A8612C2A061AF
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e312e302f32342d3234203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:11 +0000
ROA not before: Thu 07 Nov 2024 20:35:11 +0000
ROA not after: Thu 06 Nov 2025 20:40:11 +0000
asID: 28270
IP address blocks: 177.67.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a5:db:c1:23:33:9f:19:5f:cb:41:36:ce:7a:86:12:c2:a0:61:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:11 2024 GMT
Not After : Nov 6 20:40:11 2025 GMT
Subject: CN=33408818234CA9C469B160D20F33C1F8C0F47B34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:06:b6:08:35:6f:27:c9:7c:e8:57:9e:b3:
39:c4:2e:79:96:cf:bc:f0:7f:cc:8d:b5:7e:f9:20:
7d:3d:9b:f7:f0:42:2f:1d:c6:6a:83:65:ac:aa:50:
ca:1c:08:c9:80:55:3b:c4:2f:29:58:c4:0e:5c:f7:
12:e8:e8:f6:b2:0f:fc:3c:28:0d:ba:bf:64:41:40:
bf:23:fe:9e:c2:83:b9:97:f0:d1:30:a6:77:2b:d9:
f2:ac:91:94:ef:ee:4e:93:b2:81:22:40:f5:db:ae:
bb:7d:2d:19:a2:22:85:7e:0b:a7:70:45:77:2d:3e:
9e:67:41:75:72:c6:64:24:0b:1a:a2:81:af:9f:ed:
74:47:9a:0f:53:18:c9:0d:4e:68:33:10:91:bb:55:
7e:20:66:11:4c:49:54:53:84:91:a1:78:f5:4e:f9:
ee:8d:e1:c6:6b:39:e2:20:7c:26:1f:f5:c1:8b:c3:
74:dd:89:e7:ea:a2:65:7e:fd:5b:28:0a:19:7a:8d:
7c:e1:f0:79:e0:a7:2c:39:f2:e0:77:6e:3d:58:fe:
0b:d6:1b:93:54:86:d5:36:a8:0d:7d:2b:08:6d:25:
bd:c3:d5:d6:f6:7d:80:8f:48:d4:02:d3:f5:de:3a:
bb:c4:50:ab:b3:bb:ef:2d:c1:22:78:b1:15:29:8c:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:40:88:18:23:4C:A9:C4:69:B1:60:D2:0F:33:C1:F8:C0:F4:7B:34
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e312e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b7:c5:36:3e:ee:cf:d9:8c:5a:25:93:fd:02:e6:d2:e3:d1:
9c:73:a4:a3:48:c9:e6:c2:8e:31:4b:48:56:e6:8a:de:43:8c:
05:e1:75:14:90:b6:7a:03:69:d4:ce:78:d6:43:b2:de:dc:e1:
a6:41:c5:63:36:7c:ab:1c:9b:b9:e8:db:47:75:a9:2f:6f:40:
0f:72:16:48:0a:aa:e6:0b:2a:27:9d:41:62:47:ae:e3:62:cd:
75:34:03:e4:49:87:0d:94:c7:20:49:1a:51:5c:c1:ca:25:74:
5f:a7:93:f4:5c:f9:9a:96:14:6e:2f:63:d1:5e:50:27:6c:8b:
16:68:ca:a4:ae:45:a5:f2:9f:75:14:19:3c:8c:1b:26:18:49:
ea:28:9e:f8:51:99:a1:07:22:dd:b7:60:4b:9c:37:d9:98:05:
8c:1b:03:66:d5:15:19:0d:e3:14:16:f4:e1:b4:96:d6:55:b6:
7c:3c:46:69:22:2d:b2:b2:42:62:20:2b:8b:4c:36:66:74:33:
26:1d:4a:00:fb:7e:39:31:f2:62:5f:fd:7b:e3:07:ec:b0:ff:
2f:e9:70:fc:7d:44:9d:66:6d:c9:98:5f:74:d1:d9:dc:01:f7:
05:73:62:8f:9b:63:ae:a7:a7:52:00:93:e8:a3:41:f4:c7:f1:
f4:47:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:23:57 2025 by rpki-client