Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38342e302f32322d3232203d3e20323633343333.roa
File: 3137372e39312e38342e302f32322d3232203d3e20323633343333.roa (raw, json)
Hash identifier: ZWs1UDhzXsBizUC/74SWlzmGlE5sNqAwzPujJ8p3HBQ=
Subject key identifier: 78:E6:06:15:45:7F:2A:96:F8:87:EE:EE:6C:1A:02:3D:56:81:F4:BE
Certificate issuer: /CN=67D877A4E50B3ECFE3C59259F9F24C748712CA67
Certificate serial: 0F1BEAF686B070B5C6F911526CFC213F9E1F292F
Authority key identifier: 67:D8:77:A4:E5:0B:3E:CF:E3:C5:92:59:F9:F2:4C:74:87:12:CA:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67D877A4E50B3ECFE3C59259F9F24C748712CA67.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38342e302f32322d3232203d3e20323633343333.roa
Signing time: Tue 25 Jun 2024 00:33:46 +0000
ROA not before: Tue 25 Jun 2024 00:28:46 +0000
ROA not after: Tue 24 Jun 2025 00:33:46 +0000
asID: 263433
IP address blocks: 177.91.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1b:ea:f6:86:b0:70:b5:c6:f9:11:52:6c:fc:21:3f:9e:1f:29:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67D877A4E50B3ECFE3C59259F9F24C748712CA67
Validity
Not Before: Jun 25 00:28:46 2024 GMT
Not After : Jun 24 00:33:46 2025 GMT
Subject: CN=78E60615457F2A96F887EEEE6C1A023D5681F4BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:98:80:28:80:ba:7d:74:d1:40:e8:e7:98:
d2:7c:45:fd:76:11:ee:5f:d3:f5:57:0b:45:24:4f:
0f:82:72:8b:72:c8:21:64:ba:03:b2:e5:5f:ca:4a:
15:2d:b7:5f:aa:e0:c3:cc:67:74:40:46:dd:a6:24:
77:bf:66:e9:45:fe:bd:7e:21:fc:cd:73:ea:de:10:
4a:e0:9d:83:88:be:01:4e:c6:12:d1:83:c5:c8:8e:
6b:1b:3f:8c:8a:41:87:f8:f2:66:7f:24:a8:84:9f:
c8:09:07:c4:f2:58:d4:68:05:a8:00:fc:fb:50:22:
59:b0:0e:f6:86:5f:c3:98:86:79:66:39:ca:b6:59:
08:70:81:63:d8:e4:f5:87:33:33:70:1d:a1:19:eb:
94:ad:d5:a7:de:90:3f:e5:3c:a9:a9:48:34:19:a9:
87:09:37:60:85:5f:fb:54:aa:2f:3a:49:41:fd:97:
52:8d:3a:a5:ad:c1:24:0a:bd:89:4d:6b:d2:dc:ec:
40:14:5e:ca:d0:a0:8d:12:8d:4d:23:89:c7:be:6a:
1d:1c:ad:da:b0:ea:60:ff:79:f1:2e:d3:46:a7:9c:
a4:83:9e:29:9b:27:27:13:43:b1:96:7e:62:77:eb:
98:81:fd:c7:71:68:3a:77:6b:aa:fb:ed:68:17:d6:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E6:06:15:45:7F:2A:96:F8:87:EE:EE:6C:1A:02:3D:56:81:F4:BE
X509v3 Authority Key Identifier:
keyid:67:D8:77:A4:E5:0B:3E:CF:E3:C5:92:59:F9:F2:4C:74:87:12:CA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/67D877A4E50B3ECFE3C59259F9F24C748712CA67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67D877A4E50B3ECFE3C59259F9F24C748712CA67.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38342e302f32322d3232203d3e20323633343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.91.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:61:ee:e9:51:39:7d:a0:11:8d:b3:eb:79:cd:ff:4a:72:b7:
ec:a6:b9:5e:28:75:a3:7a:99:3c:8f:78:3b:fd:64:c5:4b:d2:
49:ea:32:ed:9c:b9:e9:24:38:b0:0d:2e:b8:7f:c5:a0:00:a8:
bb:78:0e:6a:5e:0f:76:03:a4:66:73:72:b8:09:fe:31:15:52:
c0:0d:fe:4a:83:7a:11:56:58:cd:77:20:e8:b1:91:19:1a:52:
16:0f:d6:5c:47:0c:f6:e4:03:b0:5e:73:29:a5:d2:b8:9d:dd:
99:5a:2e:8f:66:aa:06:47:e7:3c:80:64:bd:d0:65:65:a1:0d:
c4:30:d9:da:67:68:25:3d:16:8a:3d:d8:9c:79:fa:46:59:b5:
e7:14:58:19:82:09:c0:4a:8f:01:a0:c8:2b:69:ef:60:46:b8:
18:a4:38:99:af:1c:1c:3b:37:c5:4f:ea:8c:f9:52:84:8b:2e:
fb:ce:ab:45:91:2b:9d:28:15:da:d3:76:ba:1a:d1:15:5c:34:
0f:38:49:40:ed:e4:95:8c:c2:4b:c4:a7:29:46:6f:4d:18:43:
61:bd:af:e3:27:6f:57:b0:0d:7f:b5:c3:bb:31:08:b1:94:37:
a0:63:dc:4d:61:9d:9b:d4:4d:6f:11:1f:28:99:36:d5:7b:bd:
48:36:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:48 2025 by rpki-client