Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa
File: 3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa (raw, json)
Hash identifier: o4g5XU20jdFu4J/XwxAVfr4F1cH7vUffEOyIh7mNHUg=
Subject key identifier: CA:58:79:77:CB:DF:59:EA:36:0E:73:8C:BA:44:4E:38:92:B6:1E:DF
Certificate issuer: /CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
Certificate serial: B3D1DB2D46F20AF3B0F1505003F74A1399C4D0
Authority key identifier: 90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa
Signing time: Wed 05 Mar 2025 23:00:54 +0000
ROA not before: Wed 05 Mar 2025 22:55:54 +0000
ROA not after: Wed 04 Mar 2026 23:00:54 +0000
asID: 262302
IP address blocks: 177.87.132.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b3:d1:db:2d:46:f2:0a:f3:b0:f1:50:50:03:f7:4a:13:99:c4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
Validity
Not Before: Mar 5 22:55:54 2025 GMT
Not After : Mar 4 23:00:54 2026 GMT
Subject: CN=CA587977CBDF59EA360E738CBA444E3892B61EDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:36:57:00:8d:fe:bc:ca:c3:80:e6:9e:4f:
4e:49:17:b7:1c:86:48:32:f1:86:eb:59:57:66:40:
c9:31:20:2e:13:fa:4c:c6:47:22:ad:29:91:3e:c1:
81:a6:63:bd:4a:49:bb:06:93:7c:52:11:73:15:c2:
7d:28:a0:4f:49:3e:ca:44:ba:ad:56:11:79:d0:79:
92:2b:de:7d:5d:b9:2d:82:b4:0b:05:2d:2e:c7:cd:
53:e9:35:8c:c3:55:36:1f:3b:ac:71:77:1e:38:ca:
4a:a1:54:a7:5c:57:8e:29:67:e2:82:ca:89:71:8b:
4b:e7:c3:3d:94:09:87:96:de:3c:52:1a:ba:6f:6f:
aa:1f:47:ac:4c:81:72:7c:fc:12:e3:cd:2d:0a:09:
3d:18:b8:e0:07:82:f5:99:93:a4:4a:ee:28:bd:45:
32:3d:50:32:92:a4:ec:c2:f8:02:eb:43:eb:04:d1:
65:01:7e:63:3f:0e:f2:d6:06:20:c5:d0:6f:b9:10:
45:07:03:57:d5:32:7f:4c:80:3c:99:c6:88:a9:67:
7a:7a:8f:da:f6:7d:2c:14:71:61:56:bc:c4:46:d1:
4b:81:9b:9a:dc:b2:2a:b0:e3:94:03:8c:9b:fd:61:
18:ec:68:ca:e9:d0:f9:a4:52:33:64:10:61:b4:ef:
c4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:58:79:77:CB:DF:59:EA:36:0E:73:8C:BA:44:4E:38:92:B6:1E:DF
X509v3 Authority Key Identifier:
keyid:90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.87.132.0/22
Signature Algorithm: sha256WithRSAEncryption
66:c5:b7:d4:e9:29:11:7f:a3:53:89:26:81:3d:5c:ff:8c:a8:
2e:06:8c:1e:dd:87:3a:48:ca:2c:bc:ae:9e:98:98:90:ae:ce:
40:d5:31:5d:d5:04:b4:75:7f:07:c9:35:25:1c:80:b7:7e:a3:
b2:44:3f:9f:f5:a3:f3:f0:68:fb:c5:d3:c7:5e:39:0a:47:84:
6a:db:e9:76:92:8e:e0:d4:9c:c7:3e:2a:87:4e:66:ca:22:75:
32:0f:32:7c:72:66:8a:4a:bc:73:fd:22:6b:55:a7:82:d6:6c:
17:da:10:9a:14:56:30:13:25:a0:88:d6:52:fe:01:1a:d7:db:
6e:eb:7f:53:db:3d:87:06:4a:b0:12:9a:a6:fd:ca:9a:91:21:
9c:f5:42:09:a8:24:de:c3:87:09:72:a2:7c:91:db:25:e7:13:
84:fa:17:30:54:71:b7:83:7e:65:f4:08:8b:b8:61:c4:e0:f6:
86:39:b3:cf:7d:57:63:0a:4b:2e:14:eb:23:10:4d:a9:2b:5e:
f4:25:4f:48:93:aa:95:80:3f:28:12:44:cc:d9:2d:2c:85:6f:
2a:75:91:0a:31:16:2c:0b:50:b5:df:d4:69:77:85:e4:ef:99:
29:54:92:d1:4d:a2:b4:52:38:85:1f:a6:ce:0c:6c:c5:8c:a6:
c6:7c:28:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:26 2025 by rpki-client