Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38342e302f32342d3234203d3e203532363533.roa
File: 3137372e3232312e38342e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier: sfSnni+/V/hztpYgBqElfzUIFnJDbv2hjgu8zwNibvY=
Subject key identifier: 2F:AC:AB:76:E2:FB:BA:7F:5E:13:FD:5D:44:DF:64:38:D3:C6:AF:A0
Certificate issuer: /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial: 1192871C27DB96B985A82C3FA178C24D7E5C8AB7
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38342e302f32342d3234203d3e203532363533.roa
Signing time: Thu 06 Mar 2025 00:00:06 +0000
ROA not before: Wed 05 Mar 2025 23:55:06 +0000
ROA not after: Thu 05 Mar 2026 00:00:06 +0000
asID: 52653
IP address blocks: 177.221.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:92:87:1c:27:db:96:b9:85:a8:2c:3f:a1:78:c2:4d:7e:5c:8a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Validity
Not Before: Mar 5 23:55:06 2025 GMT
Not After : Mar 5 00:00:06 2026 GMT
Subject: CN=2FACAB76E2FBBA7F5E13FD5D44DF6438D3C6AFA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:42:34:b0:36:84:bd:82:de:58:39:42:97:
9b:39:19:2d:75:f2:25:70:44:eb:9c:5a:31:51:46:
be:09:1e:77:c5:fa:ae:75:6b:8d:30:82:68:e9:97:
64:9e:47:30:f0:da:ce:6b:92:c6:90:61:d0:6d:8f:
61:b8:85:37:a8:2d:17:97:ec:bf:48:ea:60:49:a5:
ec:71:86:77:20:30:76:ef:98:b1:a6:9b:96:d1:bc:
e1:be:1d:4d:2c:cf:4c:2e:d9:03:87:c5:cc:18:43:
72:8d:1b:fa:65:08:98:70:f3:f1:b6:22:e1:63:0d:
f9:84:8a:64:3b:53:c2:a3:b6:f1:87:2e:0c:36:f2:
2b:28:f5:9b:1f:a6:8f:08:aa:12:6f:ad:40:46:60:
57:c2:74:c7:25:a8:3f:4b:b6:4d:d4:27:5d:a5:17:
10:8e:4e:97:b9:f3:f3:50:f5:fb:d4:53:6e:3f:f7:
09:ac:89:a7:a0:fe:de:ed:f3:5c:c1:6b:11:d4:98:
08:d6:15:76:ef:a5:03:ca:01:38:26:37:2f:0f:16:
25:95:d4:a2:91:82:be:c1:67:ac:ff:8f:7f:a4:d5:
c6:d7:71:6c:4f:36:d7:41:1d:6f:e1:b3:d5:75:0c:
08:10:46:13:45:1f:79:fc:52:40:3e:7b:97:62:02:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AC:AB:76:E2:FB:BA:7F:5E:13:FD:5D:44:DF:64:38:D3:C6:AF:A0
X509v3 Authority Key Identifier:
keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38342e302f32342d3234203d3e203532363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.221.84.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5b:68:ea:d4:4e:58:a6:62:ef:90:c5:66:21:4e:92:ea:bf:
e4:78:1d:62:82:a6:0a:25:d5:1a:4e:d0:4f:33:9a:2f:70:3c:
78:12:30:e8:aa:91:50:eb:62:58:a4:b0:a4:d6:15:9b:2d:24:
25:34:cf:cd:3e:67:cd:86:17:89:89:0e:cc:07:dd:9a:0f:94:
d1:99:43:1f:09:89:a9:e3:bc:05:20:69:79:14:9b:6d:55:11:
70:9f:e6:a6:82:10:5b:04:38:2d:b6:0f:3b:53:21:c4:f0:88:
01:39:10:3b:4b:20:b3:53:d4:8c:dc:c5:e6:ff:61:f3:25:e7:
3d:f4:93:23:84:44:4a:ce:28:03:de:25:53:39:9d:dd:83:76:
f7:9d:5b:18:5a:32:47:e6:a2:4e:70:2e:df:88:71:8e:93:40:
81:e6:43:88:14:47:99:fd:e5:f3:b0:e7:7e:ef:e1:a1:ef:e9:
d1:90:cc:d8:24:47:94:d2:39:0a:f0:a6:a2:10:0b:ab:b3:20:
86:c3:34:b8:52:25:4d:c7:69:ec:10:b5:a2:db:62:fa:ec:21:
f5:86:e2:bf:f2:a6:c2:03:66:74:13:f5:cd:d4:50:fb:19:22:
90:96:8b:83:ed:09:94:7e:6f:e9:72:75:75:bc:a6:86:6c:77:
6b:60:bc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:10:45 2025 by rpki-client