Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3332203d3e203238333630.roa
File: 3137372e382e302e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier: sebdx+71V1SPfz5jgGt15p8vyYg1zNIocQGwTnYDiO0=
Subject key identifier: C1:80:0A:4E:B0:16:DE:9C:4F:90:E4:DA:50:40:52:7D:89:E7:E2:D1
Certificate issuer: /CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
Certificate serial: 681A8A80394606ED5DE0B1E8BFA3B08898666EE8
Authority key identifier: 01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3332203d3e203238333630.roa
Signing time: Fri 10 Jan 2025 19:58:23 +0000
ROA not before: Fri 10 Jan 2025 19:53:23 +0000
ROA not after: Fri 09 Jan 2026 19:58:23 +0000
asID: 28360
IP address blocks: 177.8.0.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1a:8a:80:39:46:06:ed:5d:e0:b1:e8:bf:a3:b0:88:98:66:6e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
Validity
Not Before: Jan 10 19:53:23 2025 GMT
Not After : Jan 9 19:58:23 2026 GMT
Subject: CN=C1800A4EB016DE9C4F90E4DA5040527D89E7E2D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:83:7c:3c:f5:f6:3e:4f:48:3a:9c:82:c4:
7c:8e:d9:ea:3a:29:37:22:2a:01:bd:ee:75:0d:c8:
e3:74:2f:fa:7f:f4:c4:1b:73:7f:2f:59:89:08:cc:
7e:37:da:ea:5f:1f:65:b4:dc:19:0b:57:05:a1:2a:
b1:79:cb:6c:3e:4e:34:79:c0:24:ee:df:db:bc:bd:
56:29:d4:60:ee:17:37:45:76:35:74:1b:3e:15:1b:
b9:6f:ab:a5:2e:ac:e5:ee:26:e0:57:fb:25:18:a2:
00:3b:f6:65:6f:b1:b9:81:6d:96:e3:f8:90:cc:2b:
70:23:61:13:4f:23:89:27:c2:30:94:e8:02:3b:9c:
92:cc:34:34:fe:03:1e:d3:6b:ac:48:e4:b6:79:64:
7a:36:84:e0:ca:93:59:a0:6a:e9:eb:49:04:3d:84:
2e:d9:5f:82:09:25:96:90:7a:5e:60:89:55:c7:bf:
89:d5:94:30:1e:f3:17:c0:55:a6:c1:5d:7b:97:ee:
2c:c8:54:aa:65:15:64:8a:bb:4b:3e:40:57:f5:3c:
9b:ed:d2:49:aa:57:97:d1:18:f6:6f:fc:ad:cf:47:
d8:b6:fd:76:a7:73:ce:5a:3b:07:90:da:71:8b:07:
92:ab:d1:ce:43:d7:da:4f:75:c0:90:92:d1:ca:9b:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:80:0A:4E:B0:16:DE:9C:4F:90:E4:DA:50:40:52:7D:89:E7:E2:D1
X509v3 Authority Key Identifier:
keyid:01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3332203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.0.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:46:df:6a:ef:dd:45:c9:da:51:d5:a1:00:18:a5:28:d8:15:
b9:5f:42:da:5e:51:29:08:53:5f:c5:b6:2a:50:0b:74:3c:8c:
38:f4:95:db:cc:91:f5:35:2d:25:37:46:03:4e:2d:dd:49:b1:
85:46:11:10:ac:55:a8:d2:37:1c:ae:e7:3b:00:59:63:60:ab:
b0:5c:76:71:2d:4d:68:d4:9b:83:53:8c:22:80:7d:4e:ac:49:
96:cb:e4:eb:f6:2c:61:02:39:4b:0d:f9:a2:28:25:d6:94:59:
a9:c4:d2:cd:be:18:5f:f8:44:22:bc:da:27:6a:56:4b:8f:30:
ab:47:be:2d:28:08:3b:4e:89:b5:29:0d:6a:71:e0:32:41:58:
69:5f:ac:f5:06:53:4d:60:9e:89:30:b1:e7:27:58:e9:f7:81:
0c:f3:e5:34:e1:09:77:28:d2:18:fd:44:d6:59:cb:5f:97:0d:
ba:15:02:e2:75:27:bf:80:d7:e7:0d:f3:0e:ce:3b:12:27:ef:
ae:b2:c3:5e:85:88:ec:8c:cd:d5:3b:ee:0b:6f:6c:df:de:11:
48:f5:81:bd:cc:e8:f1:c8:34:6d:90:3e:c8:e6:14:59:bd:44:
3d:6d:42:4f:be:77:8c:67:71:ae:16:a8:a9:5b:58:56:63:ab:
24:97:4e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:20 2025 by rpki-client