Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e362e302f32342d3234203d3e203238323730.roa
File: 3137372e36372e362e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: eEEqEQGihs+OtYrNSqExCuc7e7QDxpGnXpAHGd9CI/E=
Subject key identifier: 2F:C1:8F:81:27:6B:B2:A1:6D:53:B9:AD:88:F1:83:02:86:50:16:CA
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 5C2DFBBC7D17FC279D167CED3287AB341CEF3FF2
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e362e302f32342d3234203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:14 +0000
ROA not before: Thu 07 Nov 2024 20:35:14 +0000
ROA not after: Thu 06 Nov 2025 20:40:14 +0000
asID: 28270
IP address blocks: 177.67.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:2d:fb:bc:7d:17:fc:27:9d:16:7c:ed:32:87:ab:34:1c:ef:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:14 2024 GMT
Not After : Nov 6 20:40:14 2025 GMT
Subject: CN=2FC18F81276BB2A16D53B9AD88F18302865016CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:c2:c4:3b:9a:1b:a1:85:0f:a4:95:dc:8d:
ba:b2:de:80:3a:5e:e8:39:63:1c:9e:ea:f2:4c:dd:
a7:e8:28:a3:db:27:d3:69:3f:52:4d:c3:ba:07:07:
88:65:72:d5:37:ad:14:a6:48:58:cb:e0:d1:b1:de:
39:c5:f8:11:bd:28:f2:1b:be:ec:b5:49:e5:0e:5c:
b3:17:ad:c5:d4:40:ed:29:3c:fe:2c:37:c1:18:de:
78:d9:1a:99:10:2a:bc:88:7d:6e:02:58:73:18:1c:
cb:15:0e:2a:a9:b0:13:ca:fa:48:ea:e7:94:08:cf:
61:96:9e:50:a8:d2:88:8f:84:3a:30:6a:84:29:fa:
13:bb:56:2b:fc:c1:ed:91:63:25:6e:2e:e5:ff:c1:
c8:d4:17:86:8e:69:f9:5c:0f:e4:1d:10:b2:72:ee:
32:05:38:6d:21:ed:53:3c:3e:11:7f:04:37:06:aa:
5b:89:d3:38:70:5c:da:e3:8d:91:d9:63:dd:9d:63:
38:95:b6:f7:e7:c4:25:08:e8:c0:63:93:b4:66:f4:
b5:b7:5d:2c:b3:04:0d:ef:47:bf:ae:cb:af:6d:15:
ba:0a:44:9a:8d:52:c7:a9:44:d4:5f:08:c2:bd:bd:
25:91:98:22:45:24:4f:f4:cb:fb:fa:37:6c:6a:51:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C1:8F:81:27:6B:B2:A1:6D:53:B9:AD:88:F1:83:02:86:50:16:CA
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e362e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.6.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:7f:23:e4:d5:13:1e:88:08:36:6c:35:cf:90:40:6c:e6:3b:
39:7d:a6:70:02:db:34:e1:3b:9f:91:d3:24:83:e0:c2:f4:30:
0a:da:6e:5b:c5:8e:fa:54:f2:f2:a9:5e:fe:19:6a:12:35:dd:
90:2d:ed:ef:f7:6f:5c:19:0d:be:6a:1f:f4:06:d2:e8:c1:bc:
44:f9:0e:ba:23:25:5d:61:48:72:c7:99:fc:2b:31:b2:61:c2:
88:79:3a:8e:11:b0:d5:5d:c4:27:91:b0:bd:ef:eb:a6:22:60:
0d:10:70:71:c2:6e:81:5f:d0:a4:a6:26:de:b2:70:a8:c4:da:
de:02:74:02:09:80:49:45:08:38:51:ff:25:0d:47:77:63:82:
14:29:1d:20:c0:9a:4c:fa:fa:a9:ba:10:13:c8:0b:0f:6b:6f:
2c:69:7f:93:64:4b:7a:82:eb:af:f0:0f:0c:e5:c2:d3:9e:1e:
4e:af:d5:1b:5a:61:cd:fa:19:0d:72:41:10:37:18:b9:fa:59:
3d:34:af:91:a6:2f:67:36:a7:0e:08:30:63:11:23:86:f7:02:
cb:21:d5:99:2d:d6:4f:62:49:5d:30:5d:b8:ec:16:4e:f4:cd:
1f:fe:8f:d1:1b:d0:e9:9b:58:ba:5d:79:52:91:84:31:47:d0:
38:0f:b2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:03:48 2025 by rpki-client