Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa
File: 3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa (raw, json)
Hash identifier: PAW+mW2aDMNZvOIrAoASZ9hJMX3Ha+FopDqAZPfA/nc=
Subject key identifier: 27:7C:F1:1F:C3:40:4F:5B:9D:F3:E8:9D:26:9E:F3:F7:D4:F9:20:D8
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 1674249D7E7D7DDD7ED51323042C821D6F686A0A
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:22:59 +0000
ROA not before: Fri 10 Jan 2025 17:17:59 +0000
ROA not after: Fri 09 Jan 2026 17:22:59 +0000
asID: 28202
IP address blocks: 177.130.128.0/19 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:74:24:9d:7e:7d:7d:dd:7e:d5:13:23:04:2c:82:1d:6f:68:6a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:17:59 2025 GMT
Not After : Jan 9 17:22:59 2026 GMT
Subject: CN=277CF11FC3404F5B9DF3E89D269EF3F7D4F920D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:1e:7f:f1:78:f6:42:5f:f2:38:40:55:74:
83:88:06:01:87:28:03:06:85:3a:2c:05:cd:d1:9b:
fa:10:0a:56:72:d7:ad:e7:82:f1:7e:ea:2c:38:ae:
b7:07:e1:e1:4b:1b:7d:60:e5:dd:8a:92:25:1b:0f:
6b:23:b2:78:98:ae:fe:4b:24:04:8a:2b:e9:e5:dd:
1d:e2:4b:5e:d7:85:ac:52:1c:eb:49:cc:08:56:04:
9e:9f:57:dd:f0:65:42:cd:45:57:03:c2:92:44:13:
91:81:0a:72:8d:d6:7d:d9:5b:4d:d0:bf:bf:27:b2:
9f:dd:c1:7b:e0:00:da:d9:25:d2:ff:20:e4:60:12:
9b:22:9f:ba:d6:59:68:75:96:be:1b:67:78:73:3a:
c1:e9:d0:9c:61:2f:b9:67:21:06:94:43:64:26:db:
4e:c7:de:0e:54:7f:8a:55:f4:e7:d6:d7:2e:bd:38:
70:bd:fe:6c:5d:ae:03:16:d4:76:2c:0d:3a:7e:09:
a6:66:27:7c:f9:ec:db:4f:f8:34:ef:f8:13:b5:b4:
98:cf:2d:77:f3:5d:73:55:b0:b8:a9:49:f5:1f:f1:
c3:3e:d9:70:bf:14:15:1a:7d:fd:39:f4:a5:18:51:
9b:33:ad:c0:77:f7:4f:67:f9:8f:e0:3c:83:d7:c8:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:F1:1F:C3:40:4F:5B:9D:F3:E8:9D:26:9E:F3:F7:D4:F9:20:D8
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.130.128.0/19
Signature Algorithm: sha256WithRSAEncryption
90:75:3e:0e:e4:20:11:9c:ed:71:1f:d4:7e:52:5c:92:97:0b:
c5:20:7f:1e:a7:01:26:61:4c:60:03:8a:21:5c:f2:dd:0d:2f:
f4:38:fa:ab:2c:86:85:28:af:4a:4e:ae:45:9d:0c:92:4a:f2:
13:e2:75:72:70:3a:05:1b:f1:ef:b7:84:ef:0b:09:dd:a9:7b:
4f:cb:41:39:9f:ec:a8:0d:bd:c1:75:83:db:f0:76:53:e9:73:
5b:34:f2:26:c6:dc:4d:a5:29:e4:b5:82:cd:c1:03:9b:31:fe:
81:14:b9:76:51:79:c4:f2:ac:db:38:4d:bc:26:a6:cc:72:79:
2b:a8:6f:34:8c:f0:b2:ba:7a:d1:48:7b:3e:fb:6f:09:75:29:
e9:34:3e:62:fd:c6:98:46:dc:c2:12:cc:c8:9e:91:6c:3a:06:
ea:a3:18:39:50:3c:73:24:38:34:a5:99:82:51:ba:03:33:8e:
77:17:e3:d9:79:15:47:a7:ce:03:54:60:27:59:0d:b9:fd:00:
e9:66:a4:51:88:e6:e1:8c:90:08:12:fb:da:98:aa:d1:92:41:
1a:c5:30:00:1b:c3:cf:eb:7e:4b:48:09:eb:56:b5:40:36:9f:
c1:76:76:ec:54:30:74:4f:a9:f2:c2:08:64:c1:02:ff:3e:03:
15:15:b8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:56:23 2025 by rpki-client