Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e34372e3232342e302f32302d3234203d3e203532393935.roa
File: 3137372e34372e3232342e302f32302d3234203d3e203532393935.roa (raw, json)
Hash identifier: MseSa4HG/weDmlELirBkt/nTTv+H5XCBBcmga3oUBEI=
Subject key identifier: 47:E2:67:74:B4:64:A7:B8:59:99:BB:5A:E9:EE:54:24:87:4F:8D:13
Certificate issuer: /CN=1E5F9067846F1D128DA384BACDA2B1C825AAB969
Certificate serial: 2F8F0ED80D1AA4724C9A9C0CADF259692C27F1D1
Authority key identifier: 1E:5F:90:67:84:6F:1D:12:8D:A3:84:BA:CD:A2:B1:C8:25:AA:B9:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e34372e3232342e302f32302d3234203d3e203532393935.roa
Signing time: Fri 28 Mar 2025 17:04:58 +0000
ROA not before: Fri 28 Mar 2025 16:59:58 +0000
ROA not after: Fri 27 Mar 2026 17:04:58 +0000
asID: 52995
IP address blocks: 177.47.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:8f:0e:d8:0d:1a:a4:72:4c:9a:9c:0c:ad:f2:59:69:2c:27:f1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E5F9067846F1D128DA384BACDA2B1C825AAB969
Validity
Not Before: Mar 28 16:59:58 2025 GMT
Not After : Mar 27 17:04:58 2026 GMT
Subject: CN=47E26774B464A7B85999BB5AE9EE5424874F8D13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:e2:28:06:b3:bd:b2:1c:3e:8e:c0:90:f4:
78:1f:a9:63:29:b0:4a:1a:b8:b5:3a:d6:05:1f:36:
c1:a7:92:8e:5d:9c:a1:42:df:f0:cb:11:b3:9d:9c:
bd:37:4d:66:68:e7:8c:e5:67:5d:22:bd:cb:f7:3a:
9f:4a:ba:d8:08:27:76:5c:25:45:0a:e4:39:91:ea:
1d:f0:dd:39:ea:d6:da:4c:e2:f5:17:7d:ea:69:1f:
c7:08:73:07:30:02:39:72:a1:47:72:2c:e9:36:e2:
68:f4:f6:17:b2:b2:e7:6b:e5:cf:8d:ca:5f:a3:7c:
06:1d:e0:56:31:8e:ef:ee:35:c8:c4:cc:b2:62:04:
6c:bf:0d:cd:f5:da:67:68:ff:15:fb:04:bc:1d:3b:
6a:97:fb:91:79:28:fa:c0:d4:f7:db:6e:91:f4:1a:
13:c7:69:b4:3c:ca:89:2c:e7:b4:b8:89:2d:01:d2:
4b:55:18:a6:cc:a3:3c:92:47:1e:32:72:d8:ee:e6:
e3:50:a3:c7:ce:72:cb:49:53:ef:df:8b:50:d5:a4:
22:e6:d7:b0:a4:a7:02:84:a9:bb:da:be:c8:dd:6c:
0d:71:e3:d0:83:7c:5f:86:fa:05:70:76:91:42:b5:
f1:54:42:1a:0e:6d:28:75:04:b1:23:d8:b4:c3:b1:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E2:67:74:B4:64:A7:B8:59:99:BB:5A:E9:EE:54:24:87:4F:8D:13
X509v3 Authority Key Identifier:
keyid:1E:5F:90:67:84:6F:1D:12:8D:A3:84:BA:CD:A2:B1:C8:25:AA:B9:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/1E5F9067846F1D128DA384BACDA2B1C825AAB969.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e34372e3232342e302f32302d3234203d3e203532393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.47.224.0/20
Signature Algorithm: sha256WithRSAEncryption
49:a7:8c:b5:20:9d:6b:83:60:a6:35:c3:bb:2c:e9:58:82:86:
1f:a7:65:05:f3:e3:49:f2:f7:47:40:2d:b7:e8:48:c2:a1:2a:
b8:f8:96:57:f0:19:4f:8d:8f:bf:2a:d3:26:a8:52:83:d4:6d:
c1:d7:2b:8e:d9:7e:ae:ad:99:ec:c2:a7:f7:80:1e:c0:98:50:
8c:4f:e3:9b:d1:2c:cb:b2:a7:af:82:0c:d1:8d:13:f5:a8:54:
31:63:13:23:54:4d:b9:47:c7:85:5d:ed:13:81:ba:15:a3:9c:
bb:34:6f:57:43:97:dc:aa:ce:2f:f1:ea:ee:ea:af:74:72:d4:
a2:79:25:ba:57:72:df:a9:12:2b:af:4b:7c:cd:2d:9c:29:a8:
f3:91:05:9e:85:e6:20:ca:c5:dd:a8:44:2c:af:3a:ba:0a:e0:
1a:7f:6b:71:7a:2f:01:d0:a7:52:42:b3:d9:c6:19:c1:e6:bf:
9d:0f:1c:1e:2b:e6:30:9f:7e:2f:09:89:3f:88:25:d3:1a:43:
1d:c4:49:ba:3c:df:14:0e:a3:d5:0d:b6:43:1d:5d:9d:ae:5f:
ec:8e:99:45:83:c9:5d:81:d6:b8:13:8a:af:6f:08:72:58:88:
b8:54:7a:e7:bc:7d:9f:2e:38:58:88:fc:9a:30:1a:24:24:20:
fc:81:69:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:13:19 2025 by rpki-client