Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/3230312e3134382e3137322e302f32322d3234203d3e20323632363232.roa
File: 3230312e3134382e3137322e302f32322d3234203d3e20323632363232.roa (raw, json)
Hash identifier: GSKq6WMo1jEzoJM3zjk/0mUwBsToAhsx33+8b7wLNP4=
Subject key identifier: 3D:FD:8A:F8:A1:ED:41:B4:5E:31:B1:E6:D1:F0:7E:3D:C3:3C:ED:4B
Certificate issuer: /CN=2EF0CF727D2573B3CCB71103C2E44D1F67817E6D
Certificate serial: 2C06471B62F78C6258D25B4B98DA336B73195DA1
Authority key identifier: 2E:F0:CF:72:7D:25:73:B3:CC:B7:11:03:C2:E4:4D:1F:67:81:7E:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/3230312e3134382e3137322e302f32322d3234203d3e20323632363232.roa
Signing time: Mon 28 Apr 2025 17:25:31 +0000
ROA not before: Mon 28 Apr 2025 17:20:31 +0000
ROA not after: Mon 27 Apr 2026 17:25:31 +0000
asID: 262622
IP address blocks: 201.148.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:06:47:1b:62:f7:8c:62:58:d2:5b:4b:98:da:33:6b:73:19:5d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EF0CF727D2573B3CCB71103C2E44D1F67817E6D
Validity
Not Before: Apr 28 17:20:31 2025 GMT
Not After : Apr 27 17:25:31 2026 GMT
Subject: CN=3DFD8AF8A1ED41B45E31B1E6D1F07E3DC33CED4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e5:0f:54:e0:67:58:1a:ba:de:3d:72:f5:73:
9e:0c:97:e6:11:26:0c:ad:ac:a6:75:82:40:69:b5:
84:5c:8c:3e:b9:97:ec:ff:45:95:bd:36:e3:86:ba:
d3:b4:4c:f5:40:e4:bc:83:33:98:85:53:f3:d1:65:
8e:c2:79:17:6d:0c:50:e4:c7:46:76:3e:80:bf:05:
3e:d8:6d:7e:f6:31:ca:c5:4f:40:2e:c5:43:05:77:
cd:e7:e4:81:ba:83:ee:7d:87:e8:a9:87:cc:a4:23:
ac:b1:2b:6a:81:95:3b:00:3c:66:a1:74:23:67:83:
6e:b1:e7:ff:91:0a:e0:c7:cf:79:f0:c1:93:23:f7:
09:c3:d6:d4:15:75:6c:3f:97:df:f9:71:ff:0e:9a:
06:cc:b3:5c:a1:3c:95:32:ee:d2:88:16:01:c8:ad:
e4:72:5b:f0:17:f3:a2:e4:6c:b5:6f:58:7a:6c:d5:
0c:34:f2:f8:5c:60:a7:d4:d4:d4:43:30:9f:5f:67:
79:0f:d9:29:1e:1f:16:e2:3b:c2:7e:87:08:bd:8b:
0c:75:c1:6b:b8:d6:15:4e:d0:ea:94:8f:8f:c0:ba:
fa:c8:3f:f8:e1:59:ed:ab:cc:ea:0c:43:9d:38:90:
7c:4b:25:25:f4:ac:e5:9f:9d:14:72:a8:19:29:3a:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FD:8A:F8:A1:ED:41:B4:5E:31:B1:E6:D1:F0:7E:3D:C3:3C:ED:4B
X509v3 Authority Key Identifier:
keyid:2E:F0:CF:72:7D:25:73:B3:CC:B7:11:03:C2:E4:4D:1F:67:81:7E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/3230312e3134382e3137322e302f32322d3234203d3e20323632363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.148.172.0/22
Signature Algorithm: sha256WithRSAEncryption
11:aa:cb:cb:96:ad:7b:3b:84:d2:88:c8:18:e8:32:8d:c6:88:
b6:fd:b0:b1:db:e2:6b:03:4d:c7:b1:99:9c:b6:13:52:44:04:
78:04:b0:fb:7b:19:53:ac:fa:61:c7:6f:db:1e:5e:d3:71:75:
5c:93:7c:19:3d:44:cd:f5:29:5d:fe:e8:4a:c7:ba:87:80:19:
30:36:b7:13:57:3f:83:3d:ee:43:f8:64:5c:7d:8a:33:7d:70:
52:f9:b5:07:64:67:46:c7:b0:a5:61:da:a7:0a:49:5f:12:0c:
8c:69:5c:11:3f:1a:e3:96:34:e9:30:e0:ba:59:9c:8b:46:67:
6f:e4:bb:38:5a:da:cb:c3:9e:b4:e3:dd:b4:31:64:e6:83:b4:
bb:24:22:bc:a3:12:4a:56:b1:30:fe:54:62:15:b5:2b:6d:d9:
24:8a:f5:4e:21:eb:54:0c:5a:c5:91:4f:dc:e7:71:83:ab:28:
3a:78:23:17:af:24:3e:aa:61:42:46:4a:12:79:f3:6e:f9:a3:
38:04:2a:b3:eb:a2:93:07:2a:cb:20:a8:62:ed:86:84:1c:59:
59:af:ad:cb:8e:86:68:38:11:e8:3d:89:0b:64:2f:2c:3d:00:
5a:92:f0:17:6d:a4:36:56:92:02:73:05:f6:da:7a:a5:d7:54:
d6:55:a5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:21:34 2025 by rpki-client