Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38322e302f32332d3233203d3e203532363533.roa
File: 3137372e3232312e38322e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier: iRTITNmONY4z+KWsWqID7RjAlg1M3aIF+wU2jybNlVg=
Subject key identifier: 28:F5:9C:C9:E8:85:3B:94:E4:26:CD:C8:1E:86:8F:EF:07:EA:68:85
Certificate issuer: /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial: 2A2AB1169D27404473A09ED5C2C66A2AEB33136A
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38322e302f32332d3233203d3e203532363533.roa
Signing time: Wed 05 Mar 2025 23:59:59 +0000
ROA not before: Wed 05 Mar 2025 23:54:59 +0000
ROA not after: Wed 04 Mar 2026 23:59:59 +0000
asID: 52653
IP address blocks: 177.221.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2a:b1:16:9d:27:40:44:73:a0:9e:d5:c2:c6:6a:2a:eb:33:13:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Validity
Not Before: Mar 5 23:54:59 2025 GMT
Not After : Mar 4 23:59:59 2026 GMT
Subject: CN=28F59CC9E8853B94E426CDC81E868FEF07EA6885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:b1:80:e8:00:b3:5d:61:eb:73:47:d7:2e:
a9:03:78:3f:86:2a:e9:05:61:7b:97:7b:b9:df:aa:
1f:ed:16:af:ba:0f:25:c5:c1:a1:e7:fc:9c:7b:bd:
e2:eb:e9:97:c1:d0:4d:4a:b3:39:4b:1a:5a:9b:b5:
f2:0f:5d:5c:a7:50:84:84:b3:af:52:83:1c:42:03:
12:55:07:44:c9:a8:fa:69:60:4a:29:f9:5f:0a:81:
98:27:70:aa:87:d3:22:74:ef:a2:24:fe:e5:75:e8:
9d:0b:9a:d1:fa:80:ab:05:5f:97:7f:92:ef:d7:ff:
73:8a:f2:49:c2:4d:f7:1d:fe:ee:aa:c2:cf:e5:22:
ed:a5:ba:83:03:c1:31:3a:f7:69:2f:5d:39:8a:97:
e3:65:83:5a:3f:9c:5c:ef:dc:7d:28:e0:3a:de:61:
b5:63:1d:ea:fe:e3:bf:de:27:1b:9f:a7:f8:cd:ae:
ee:34:5c:67:0b:73:7a:26:f2:da:5c:f1:8a:c5:91:
0c:c9:d0:ce:6f:13:60:f8:c3:d2:89:2b:a9:14:4b:
65:7c:ad:b4:fa:91:30:b0:98:97:8b:f6:2f:4f:51:
80:8f:fa:fe:4b:93:9d:3e:7c:cb:2b:a5:2c:d5:ed:
a4:7e:71:6a:8c:7e:9d:67:51:dc:ac:60:1e:d2:07:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F5:9C:C9:E8:85:3B:94:E4:26:CD:C8:1E:86:8F:EF:07:EA:68:85
X509v3 Authority Key Identifier:
keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38322e302f32332d3233203d3e203532363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.221.82.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:ff:7f:7c:3d:07:30:c1:e6:18:65:2e:76:a9:36:79:56:61:
32:70:ad:19:74:b0:ef:9c:78:5a:36:e9:cc:03:98:2c:45:d0:
b1:4e:f0:55:8e:30:81:84:2b:43:43:5c:4d:5c:c7:3e:1a:e1:
46:2d:b3:fb:9d:88:08:db:61:42:ce:99:be:ed:dc:b5:69:6a:
5f:e6:11:f6:3e:33:b9:28:8d:d4:94:51:c1:52:2a:76:8d:7f:
3d:85:fe:9c:02:d8:5a:9e:54:a4:33:aa:3b:7e:b2:2a:69:b5:
47:0f:d0:77:20:95:45:7a:ce:f1:b8:5b:7e:f9:f0:95:01:12:
9c:f0:7f:5a:9f:07:b5:35:55:fc:bd:5c:f8:5b:c9:73:6a:1b:
e0:e7:65:af:d2:75:61:28:bd:03:99:d0:61:86:a2:f4:c2:d2:
b5:dd:3b:13:d4:ec:58:4d:51:c7:26:cd:d0:d6:ec:01:e3:17:
b4:cc:98:37:ef:75:8f:01:e4:71:61:03:c3:c5:a2:91:79:2d:
fd:71:8c:2a:9a:ea:40:70:1a:49:69:cb:4c:46:ca:cc:2a:ce:
b8:16:d0:82:13:2a:f8:a3:ee:c0:4d:9a:be:2d:c2:32:19:90:
16:9b:fe:7c:96:37:d4:fc:b4:74:ce:be:dd:2a:df:09:24:19:
83:2b:09:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:10:37 2025 by rpki-client