Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37362e302f32322d3234203d3e20323731333631.roa
File: 3137392e302e37362e302f32322d3234203d3e20323731333631.roa (raw, json)
Hash identifier: RRR55kh3PsEBtltJnYpzmvXcONn+w6LhmOV77SpKi/w=
Subject key identifier: AC:7E:03:C2:A8:39:4B:73:F7:A5:23:6B:92:2D:E4:52:5C:03:A0:88
Certificate issuer: /CN=98980CEC2611F43F690D06E91CE7253FC1396E1D
Certificate serial: 4600B02B36B7C0E7CB7E973F3ABDDFB7EF951D0C
Authority key identifier: 98:98:0C:EC:26:11:F4:3F:69:0D:06:E9:1C:E7:25:3F:C1:39:6E:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98980CEC2611F43F690D06E91CE7253FC1396E1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37362e302f32322d3234203d3e20323731333631.roa
Signing time: Mon 10 Mar 2025 20:23:16 +0000
ROA not before: Mon 10 Mar 2025 20:18:16 +0000
ROA not after: Mon 09 Mar 2026 20:23:16 +0000
asID: 271361
IP address blocks: 179.0.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:00:b0:2b:36:b7:c0:e7:cb:7e:97:3f:3a:bd:df:b7:ef:95:1d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98980CEC2611F43F690D06E91CE7253FC1396E1D
Validity
Not Before: Mar 10 20:18:16 2025 GMT
Not After : Mar 9 20:23:16 2026 GMT
Subject: CN=AC7E03C2A8394B73F7A5236B922DE4525C03A088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:81:cf:43:10:1c:dd:4e:be:17:89:8f:ac:
00:76:1e:22:5d:3d:e3:15:73:02:62:2c:10:91:c7:
f8:c2:fa:f1:98:7a:fc:4f:c9:07:98:ed:ba:af:27:
28:36:91:8e:86:e1:f8:db:53:4a:46:77:31:58:8c:
11:93:e0:26:d5:58:b6:86:ef:95:14:be:bc:4b:ec:
20:e4:cb:14:67:b8:80:39:94:cf:e6:d1:a3:cb:66:
ce:0e:8a:90:e5:d5:d4:c4:b0:b0:ff:57:2a:19:a1:
bb:ac:43:fe:b0:80:9a:18:14:38:39:97:db:45:8c:
ad:82:eb:59:a8:cb:0e:b3:e6:2b:47:4c:35:5e:34:
21:8f:24:ca:71:34:0a:d7:bd:84:59:f8:b0:aa:50:
53:f4:23:d2:0f:5c:fc:2b:b6:3f:cf:18:53:a4:ec:
06:99:29:54:70:86:48:d2:4b:6a:e1:1d:8c:bd:2c:
d2:33:0d:ea:7a:f6:84:9e:ce:74:ad:61:1f:7a:5a:
b1:f4:96:3f:81:fb:32:ea:65:ff:2b:2a:b7:4c:cf:
35:9b:16:98:e5:e1:72:6f:13:55:fa:ba:24:6d:d7:
61:36:6b:03:14:88:8d:fa:09:a6:02:c0:f2:57:56:
32:26:06:97:fe:70:c6:aa:08:e7:38:07:e1:fe:a6:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:03:C2:A8:39:4B:73:F7:A5:23:6B:92:2D:E4:52:5C:03:A0:88
X509v3 Authority Key Identifier:
keyid:98:98:0C:EC:26:11:F4:3F:69:0D:06:E9:1C:E7:25:3F:C1:39:6E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98980CEC2611F43F690D06E91CE7253FC1396E1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37362e302f32322d3234203d3e20323731333631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.76.0/22
Signature Algorithm: sha256WithRSAEncryption
71:bd:28:c4:cb:48:e7:9a:ae:ff:d7:db:8b:fd:d3:c3:86:b0:
6f:34:b0:71:a3:1b:af:f9:34:4c:15:7f:6e:24:f9:14:02:8e:
71:0d:cb:ac:3a:ab:eb:84:11:74:7c:7c:41:e2:b3:17:06:88:
4d:96:a0:99:fa:05:c1:e8:98:42:52:d5:cd:4c:f9:52:ff:7b:
e7:c1:0c:38:ee:61:6a:9e:8a:9e:d6:9f:f1:0b:42:96:f8:94:
90:56:03:8e:60:3d:4e:4e:8f:d7:d0:43:b3:8e:5b:17:f0:e5:
2e:c7:cd:a9:42:bb:73:0e:20:8e:f3:97:25:b5:c2:6f:8a:d0:
32:39:11:60:e3:2f:e4:c2:69:e9:88:12:d6:a1:10:77:bb:1c:
24:2e:43:a9:9c:7a:61:f4:77:91:69:15:16:1c:e1:8b:f3:83:
61:b5:bf:68:1e:58:ec:84:8c:dc:a3:4c:44:c6:17:df:be:fa:
9e:85:b6:a2:55:0b:fa:9a:58:4a:30:40:c0:1a:a9:a5:44:d8:
ca:23:86:9b:34:d1:b4:3b:3e:52:20:cb:6d:47:8e:13:3b:b3:
b1:3c:c2:2c:ef:00:c0:8e:54:2e:46:3b:13:23:6c:02:06:22:
ed:ce:23:87:62:63:7e:d9:20:0b:91:2f:58:75:bb:4a:e0:e8:
59:7f:25:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:09 2025 by rpki-client