Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32342d3234203d3e20323632353039.roa
File: 3137372e36372e342e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier: uTm00dmrUEflnCKRYOtb371KUF+p3wloObYRFLIHNkQ=
Subject key identifier: A8:8D:CD:8E:A5:4A:49:1A:6C:B9:71:E5:DE:05:CC:23:F4:AF:6C:A0
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 23C054FD817280DB7FFC7F0884F7838DC6645FFA
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32342d3234203d3e20323632353039.roa
Signing time: Mon 14 Oct 2024 01:49:51 +0000
ROA not before: Mon 14 Oct 2024 01:44:51 +0000
ROA not after: Mon 13 Oct 2025 01:49:51 +0000
asID: 262509
IP address blocks: 177.67.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c0:54:fd:81:72:80:db:7f:fc:7f:08:84:f7:83:8d:c6:64:5f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:51 2024 GMT
Not After : Oct 13 01:49:51 2025 GMT
Subject: CN=A88DCD8EA54A491A6CB971E5DE05CC23F4AF6CA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:0f:04:0e:c0:42:4c:13:5b:fa:92:b4:8d:
00:29:c5:1b:ef:3a:dc:0f:7a:d4:7d:09:60:3f:b2:
d9:ff:fb:a0:1d:72:9e:4c:67:3a:22:8f:76:e6:77:
21:ea:f8:7a:e1:be:09:85:bb:bf:be:7d:c0:c0:cd:
96:11:73:92:b8:dc:35:56:02:6a:ff:72:f0:04:26:
05:66:88:14:47:26:98:4a:25:a8:ab:60:3f:58:86:
5c:fc:cd:61:f6:99:4f:06:7d:f7:fb:c6:f9:b6:ed:
62:70:51:f7:09:c8:de:91:f9:43:c6:f3:44:92:24:
f7:24:48:a7:bc:e2:40:4e:7f:2e:a3:93:4d:95:11:
a3:c1:de:02:af:5a:af:6d:f2:a7:d2:cb:03:74:a5:
43:0c:c5:bc:ec:f5:7b:e0:1d:82:d9:63:3c:d7:9d:
49:5b:b4:a6:34:9d:b3:92:d0:b0:b7:45:64:33:2e:
c2:48:64:56:ee:8a:a6:5e:d4:ae:b6:0a:7a:ce:54:
d8:19:2f:e7:5e:26:d8:56:42:58:9b:d3:8b:53:b8:
e8:0d:32:ac:08:b0:b7:e8:b9:b0:2a:33:ac:39:3b:
13:6e:73:f8:ce:07:09:c6:5a:af:38:8b:3c:43:6f:
df:0b:ff:c0:dc:84:91:fb:7e:f8:4e:44:71:e8:5f:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8D:CD:8E:A5:4A:49:1A:6C:B9:71:E5:DE:05:CC:23:F4:AF:6C:A0
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32342d3234203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b2:ff:90:a7:33:dc:94:23:38:7c:7e:50:3a:6d:6f:5d:8b:
f8:9f:ca:56:bb:79:13:71:db:ac:8e:fa:01:61:15:35:77:bf:
60:bc:01:84:46:a2:49:14:d5:76:20:8d:5f:e4:da:95:0d:61:
4c:90:63:55:46:dc:42:43:1c:de:e0:b1:72:75:9d:07:07:b5:
86:91:52:22:ef:12:7b:cc:46:bf:e6:3e:06:d3:f4:13:b6:7d:
84:fb:cb:c4:71:a0:e3:fd:da:5c:3c:e0:4a:e0:88:a9:c5:24:
79:93:04:8a:56:82:82:69:9b:73:32:aa:2c:e5:3c:d5:ee:7b:
3a:1b:60:36:70:29:79:23:c6:59:06:3f:e2:75:d6:a4:2b:d0:
93:9d:46:8b:57:01:76:76:f7:02:58:ca:21:da:bc:d4:dc:2a:
70:97:ea:c5:77:6c:c1:9b:33:2b:c9:3c:9b:9e:18:31:b0:b2:
f7:aa:e9:7e:54:58:ce:7c:41:0e:30:fa:c6:94:07:24:b0:c4:
e4:da:42:06:cf:44:ad:de:fa:0e:84:dd:ce:75:50:aa:05:4e:
f5:55:23:78:94:85:64:5e:29:03:fa:9a:f3:9b:b0:5d:dc:d9:
a6:c9:4b:80:ab:d0:a0:0c:8f:62:0c:c8:e2:6f:f7:a2:55:28:
ea:1f:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:14:11 2025 by rpki-client