Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39352e302f32342d3234203d3e203532363533.roa
File: 3137372e3232312e39352e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier: /MHcynToLHt+/fGWT7fPS6pMP392XxFci9I7HvT+Ook=
Subject key identifier: 7D:10:F0:38:A2:57:33:A8:FE:43:1C:55:94:76:05:C1:69:5F:3A:C0
Certificate issuer: /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial: 08FBCEA02D01DF87BC0757E008D36A5EC724DE08
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39352e302f32342d3234203d3e203532363533.roa
Signing time: Thu 06 Mar 2025 00:00:02 +0000
ROA not before: Wed 05 Mar 2025 23:55:02 +0000
ROA not after: Thu 05 Mar 2026 00:00:02 +0000
asID: 52653
IP address blocks: 177.221.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fb:ce:a0:2d:01:df:87:bc:07:57:e0:08:d3:6a:5e:c7:24:de:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Validity
Not Before: Mar 5 23:55:02 2025 GMT
Not After : Mar 5 00:00:02 2026 GMT
Subject: CN=7D10F038A25733A8FE431C55947605C1695F3AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:39:b6:bc:9d:67:6c:da:88:80:36:6c:d2:
80:5b:ca:93:13:6d:32:7f:bc:a6:ea:79:fc:cc:2f:
97:36:06:51:59:63:5e:e4:f4:9d:d4:4c:1e:c5:cc:
17:2e:8e:f3:88:76:fb:ab:73:f0:d9:29:ba:93:bb:
be:3d:66:2a:36:ac:4f:77:8d:c1:82:b7:a7:a1:5c:
f9:8c:38:1c:73:1b:2c:5e:e4:64:b1:c7:86:d0:d9:
3b:08:9f:ed:f4:e6:91:95:d2:83:c1:7a:d3:50:07:
68:a0:fe:6c:3c:2e:0c:6c:3f:1d:0a:41:ee:22:56:
2e:9b:81:ea:7d:14:b2:79:3c:e4:51:3f:8f:77:2f:
d6:78:05:42:fa:2e:23:e2:a4:e5:d1:46:50:30:7b:
c8:fd:99:ff:ba:54:79:18:ff:c7:86:9d:19:28:50:
6f:13:9c:48:51:7e:f1:88:f0:e3:b7:d2:5b:4c:9e:
d5:e5:8c:3f:7f:67:61:ac:47:27:7d:3e:4d:f5:c0:
a6:0c:f2:e1:b5:1a:ba:61:9a:99:22:49:15:62:74:
bd:b7:eb:97:9c:aa:56:73:03:d1:57:f2:01:fc:bc:
0f:02:fd:dc:fb:b2:85:69:a3:77:38:57:bc:3d:9f:
bc:60:af:2a:2f:0e:a0:e2:69:46:61:83:ca:19:75:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:10:F0:38:A2:57:33:A8:FE:43:1C:55:94:76:05:C1:69:5F:3A:C0
X509v3 Authority Key Identifier:
keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39352e302f32342d3234203d3e203532363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.221.95.0/24
Signature Algorithm: sha256WithRSAEncryption
09:07:63:90:dd:0c:08:85:51:a0:d4:6c:e6:f1:9b:91:21:b2:
c8:d4:2c:6f:31:a4:21:ed:6a:e0:90:60:13:04:4c:2d:fb:73:
ef:24:1d:7d:71:fb:3c:74:bb:e9:9b:d0:f4:ce:94:9b:44:ca:
6e:92:d0:6b:bc:a8:9c:38:e4:8b:a8:80:2e:01:11:0b:36:69:
36:d8:96:0f:36:2b:a3:ae:78:2c:4c:b2:e7:13:07:ae:b6:97:
e3:0d:35:09:d7:00:9f:67:a4:ac:5b:f4:22:8a:54:2a:5d:43:
27:dc:94:00:cb:6f:91:34:65:3c:46:fa:ca:f4:59:6c:c4:93:
d6:38:b2:21:99:e1:ce:ad:4d:c6:43:52:fb:5d:2b:b3:15:b6:
4f:e8:0c:bd:4c:a9:66:3e:26:45:c1:86:fc:a2:b3:fe:5b:3c:
8e:bd:10:be:b0:ba:01:54:fd:9a:0e:ec:2a:6b:74:d7:7b:dd:
17:81:b5:1d:ff:18:22:18:61:ae:4a:b2:8a:82:a3:b1:f7:e8:
77:7a:6a:f3:f6:80:0f:7b:33:32:cc:5b:75:97:a9:f8:2e:89:
c1:7e:6b:89:2f:0d:a2:7d:a3:d6:6a:e5:34:f9:65:12:85:68:
6a:e6:4a:8d:f1:b1:0a:76:71:3a:bd:e1:07:38:87:7b:d6:cd:
98:ec:c7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:10:07 2025 by rpki-client