Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/3137372e32312e38302e302f32302d3332203d3e203533303838.roa
File: 3137372e32312e38302e302f32302d3332203d3e203533303838.roa (raw, json)
Hash identifier: wXf/RK8DqR/CjpwFvOAppiNi0Tr5aa7oPUSPTknLvSQ=
Subject key identifier: B2:56:1E:5D:C8:37:20:BC:66:F7:F2:27:B8:84:B0:DA:3B:50:77:CB
Certificate issuer: /CN=4856F1A3B30D5C7881DA87018005E5D420414FCA
Certificate serial: 79D678D6AEE5D2A29B405FE8D31B3CDAB64FB7B8
Authority key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/3137372e32312e38302e302f32302d3332203d3e203533303838.roa
Signing time: Wed 26 Mar 2025 17:27:03 +0000
ROA not before: Wed 26 Mar 2025 17:22:03 +0000
ROA not after: Wed 25 Mar 2026 17:27:03 +0000
asID: 53088
IP address blocks: 177.21.80.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d6:78:d6:ae:e5:d2:a2:9b:40:5f:e8:d3:1b:3c:da:b6:4f:b7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA
Validity
Not Before: Mar 26 17:22:03 2025 GMT
Not After : Mar 25 17:27:03 2026 GMT
Subject: CN=B2561E5DC83720BC66F7F227B884B0DA3B5077CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:95:3d:9e:a8:2b:df:1d:c1:73:11:79:a6:
8f:b7:eb:c4:22:41:2e:87:1a:8f:b6:ce:3f:0f:5d:
49:9b:41:31:44:b7:1f:2e:df:07:31:0e:a5:c0:25:
a5:a8:e1:45:2d:83:c5:2f:ef:e5:0d:04:c2:cd:39:
aa:5a:94:f4:56:e9:8a:b0:b8:58:28:32:90:17:96:
de:33:4e:05:af:fd:02:b4:21:2a:04:f0:31:7a:71:
53:10:ff:ae:8f:8a:61:c0:b2:4e:9f:88:c1:24:c0:
81:9f:85:7a:17:e5:e9:35:23:ca:4f:af:dd:12:ad:
b1:00:46:77:30:37:07:45:b0:f6:ed:96:96:a9:8f:
d8:e9:14:dd:24:bf:b0:57:ef:c2:2f:19:7f:19:c3:
49:c1:d5:b8:a7:c4:30:ae:da:eb:ab:c9:ba:d7:3c:
67:f7:ba:07:92:c3:5c:84:c4:d5:61:55:26:4c:fb:
d4:2e:ef:d4:05:fa:06:7a:18:fc:6a:82:54:e3:c7:
e0:8f:5b:6e:28:38:4c:5e:88:3b:64:11:38:dc:d0:
e6:71:9d:1c:64:90:ff:0b:e4:a2:2c:2e:71:14:02:
a1:98:b7:49:55:ac:af:68:42:ac:ad:71:59:dc:25:
47:bc:81:4a:72:d7:82:1e:66:ec:9e:b5:9e:8b:7f:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:56:1E:5D:C8:37:20:BC:66:F7:F2:27:B8:84:B0:DA:3B:50:77:CB
X509v3 Authority Key Identifier:
keyid:48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/3137372e32312e38302e302f32302d3332203d3e203533303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.21.80.0/20
Signature Algorithm: sha256WithRSAEncryption
58:a8:de:18:7e:c7:29:b3:33:8d:81:e6:3f:5e:29:ab:e0:61:
83:b2:a6:a5:ca:27:d7:33:24:1b:3f:de:97:8e:ab:ac:5b:09:
90:45:2a:27:50:18:34:da:fd:c0:17:df:f2:10:3b:62:7c:f1:
77:af:a2:77:e8:09:e3:c3:59:2e:94:e4:ca:15:ac:40:bf:d0:
ec:d5:f3:97:ed:a5:dd:7a:4b:8f:21:f8:9f:a7:f0:fe:1e:57:
bf:2d:bd:71:fb:dd:16:b0:e9:6b:21:dc:c4:f7:9a:41:29:99:
c3:1a:9b:62:88:40:48:51:8b:d3:60:39:74:a1:1f:3f:49:b7:
1b:c3:8d:68:bf:5b:6e:f5:8c:af:14:de:b8:13:f9:66:87:09:
7c:bc:ff:68:8f:56:8d:66:3d:de:6c:ed:00:cd:dc:e2:3b:d1:
36:ad:64:bc:43:80:41:5a:47:c5:c9:a3:25:86:d8:be:2a:18:
97:2f:d5:29:3d:7b:c2:c3:40:14:6c:6e:ea:b7:5a:75:70:c7:
7d:7f:66:56:ca:f8:b9:07:fe:54:b9:90:f0:8f:20:ee:a5:e9:
06:03:09:c2:f4:ac:b2:84:e4:74:66:06:4f:d7:38:79:59:46:
e2:34:ab:69:b1:87:bb:71:c7:ef:53:30:70:6c:18:9d:91:23:
4a:f7:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:41 2025 by rpki-client