Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32322d3232203d3e20323632393031.roa
File: 3137372e32322e3139322e302f32322d3232203d3e20323632393031.roa (raw, json)
Hash identifier: A+kH14mRrLHA57YawAAXmrgrg/MU5b5jG+PnLKo6drQ=
Subject key identifier: 8B:64:6F:03:63:03:88:8B:12:73:35:14:BA:13:24:7F:C6:A4:C3:E5
Certificate issuer: /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial: 375141864A9A6585D1A02CD6999FAAF74DCC632A
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32322d3232203d3e20323632393031.roa
Signing time: Mon 04 Dec 2023 19:44:17 +0000
ROA not before: Mon 04 Dec 2023 19:39:17 +0000
ROA not after: Mon 02 Dec 2024 19:44:17 +0000
asID: 262901
IP address blocks: 177.22.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:51:41:86:4a:9a:65:85:d1:a0:2c:d6:99:9f:aa:f7:4d:cc:63:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Validity
Not Before: Dec 4 19:39:17 2023 GMT
Not After : Dec 2 19:44:17 2024 GMT
Subject: CN=8B646F036303888B12733514BA13247FC6A4C3E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:4e:18:69:57:35:fb:d4:cd:a7:a2:e1:32:
a4:23:d8:e7:fd:0e:26:00:a6:7e:8e:8f:6c:c4:44:
be:21:b9:bd:c5:de:72:cf:18:3e:26:2f:38:d6:43:
bf:0e:6f:c9:97:ad:fb:5f:33:ce:e4:4d:05:83:f0:
be:f9:d0:22:ef:5a:2e:70:55:a8:e0:9d:28:13:ec:
ab:6b:a2:7b:51:d1:0a:0a:2e:30:56:0f:0a:8d:5d:
ba:40:3e:08:4d:0d:27:22:b6:f8:e0:57:04:66:35:
2a:96:6b:8a:d7:5d:35:6c:da:21:af:55:d6:9d:c3:
07:3c:e7:f0:76:04:54:8c:70:af:9b:27:c6:5b:0c:
64:87:63:93:1c:3a:0d:e9:12:7c:bf:da:01:e0:ff:
80:92:6a:be:88:de:17:9d:5f:50:1a:2b:97:b9:57:
40:db:33:bc:b7:12:70:90:ed:4b:59:b0:15:bc:11:
58:ec:f9:42:c0:66:da:0b:48:a2:36:05:c9:c2:43:
9e:0d:11:58:8d:68:04:1f:1a:45:f2:81:03:67:32:
1d:8f:f4:80:45:e0:ab:61:04:20:60:b3:b8:9f:19:
f8:ff:d3:19:a3:46:b5:b9:02:5d:e0:5a:21:73:e2:
90:c6:2c:7f:ae:14:1a:bd:73:46:ef:04:fb:47:9e:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:64:6F:03:63:03:88:8B:12:73:35:14:BA:13:24:7F:C6:A4:C3:E5
X509v3 Authority Key Identifier:
keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32322d3232203d3e20323632393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.22.192.0/22
Signature Algorithm: sha256WithRSAEncryption
58:a7:2d:16:98:d1:0a:f8:8f:ad:4a:0c:b3:df:6b:e4:cf:53:
32:17:f9:47:3f:3f:9d:76:11:c2:d3:49:83:13:a4:d3:2f:c1:
e8:38:d7:00:95:33:2a:33:87:7c:44:3c:91:38:62:e6:4b:f0:
f4:ac:de:44:4a:26:fd:e5:43:8a:57:a3:07:bc:4f:62:71:cf:
61:06:c5:f9:7e:d0:4d:6c:b4:21:87:a1:9c:09:b9:c6:3c:7d:
55:84:46:b8:f5:3e:fc:fe:cf:a8:57:2f:d1:7f:03:06:3f:7a:
07:f2:3e:a4:eb:0f:f5:5c:ec:2a:3b:ca:6f:be:2b:1d:12:1b:
02:dd:6e:e9:96:60:60:e5:7c:5f:2e:26:e4:96:c2:6f:44:70:
f3:c0:29:57:3e:5e:d3:d7:33:21:10:cd:d9:b2:25:43:0f:85:
58:8a:29:c0:18:d9:08:fa:b6:a5:b6:17:46:94:b2:7a:be:e1:
79:10:36:c5:8c:08:3e:fa:dd:19:da:1e:e6:4d:4d:6a:25:db:
3b:ce:10:97:fe:4c:85:ff:ba:3d:c1:98:2d:c5:a6:3a:52:ac:
2f:0e:18:73:eb:2e:fd:c3:b8:b8:22:95:4e:a8:37:72:a1:0d:
70:89:c9:ed:33:d6:eb:c6:67:a1:3e:a1:97:6d:51:66:14:72:
2d:1b:aa:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:59 2025 by rpki-client