Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32302d3230203d3e20323632383638.roa
File: 3137372e32302e3230382e302f32302d3230203d3e20323632383638.roa (raw, json)
Hash identifier: i/8n3zRIS28Jcwqp29P4d7kEUjHLUAGyKJDc3yz6WNo=
Subject key identifier: A8:A5:D1:EE:DD:4E:D6:BF:96:CE:B4:41:FD:DF:13:2D:15:D6:DF:8C
Certificate issuer: /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial: 6DB2D1C9505DCF4BFA2A02B77E19DD039245A0D9
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access: rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32302d3230203d3e20323632383638.roa
Signing time: Thu 06 Mar 2025 11:39:08 +0000
ROA not before: Thu 06 Mar 2025 11:34:08 +0000
ROA not after: Thu 05 Mar 2026 11:39:08 +0000
asID: 262868
IP address blocks: 177.20.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b2:d1:c9:50:5d:cf:4b:fa:2a:02:b7:7e:19:dd:03:92:45:a0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Validity
Not Before: Mar 6 11:34:08 2025 GMT
Not After : Mar 5 11:39:08 2026 GMT
Subject: CN=A8A5D1EEDD4ED6BF96CEB441FDDF132D15D6DF8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:ae:9d:de:0b:6b:54:ab:16:92:e9:ed:d0:
32:dd:cc:e3:5c:cf:19:a4:76:7b:7d:ab:6c:f4:47:
ee:53:cb:2f:bb:ee:95:03:f5:8c:75:4b:7a:86:00:
80:26:e1:74:20:5d:83:0b:18:02:fb:1c:fb:4b:ad:
62:ae:41:d5:3a:06:c0:1a:41:65:2b:01:df:94:e9:
64:e2:00:13:6e:2a:43:cc:5d:85:41:45:16:90:2e:
25:13:9b:c7:e2:11:11:67:98:3d:4d:f0:cb:75:f1:
60:67:9d:ab:bb:d3:e0:a7:54:5e:d9:24:d2:e7:75:
42:47:9a:59:92:5f:c6:52:49:1b:7d:ab:d6:0e:a7:
b0:2e:41:7f:2d:99:a9:20:1d:07:87:fe:ef:80:56:
98:1e:a4:9b:c4:6f:cf:04:82:69:d4:51:8c:7e:e1:
9b:86:43:df:87:4b:45:f3:26:79:af:ad:85:54:c6:
e1:e0:22:d2:d8:d3:b9:e3:d4:18:4f:56:c8:00:80:
11:31:6a:36:8d:06:02:43:94:b5:98:c8:8c:4a:be:
fd:06:80:1d:77:69:81:8a:0c:ba:93:4b:aa:a3:0f:
1a:6a:ff:cc:e7:ff:ea:6a:0c:4d:41:04:87:31:3d:
50:2a:c2:bb:ed:9f:85:d8:ee:94:26:c2:88:a3:51:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A5:D1:EE:DD:4E:D6:BF:96:CE:B4:41:FD:DF:13:2D:15:D6:DF:8C
X509v3 Authority Key Identifier:
keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32302d3230203d3e20323632383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.20.208.0/20
Signature Algorithm: sha256WithRSAEncryption
56:f3:ca:28:d1:cf:77:9f:04:ca:8f:28:cc:4e:8f:d9:3d:ff:
75:b3:09:dc:c8:a6:92:cf:48:64:43:eb:bd:0c:bb:ce:2e:3c:
b1:1d:55:7a:48:11:24:33:7e:33:c5:1f:99:58:56:2b:c5:d7:
82:3d:22:f8:fb:d8:d5:00:52:10:bd:56:10:2f:5c:9b:43:a8:
f0:5d:b2:2a:8b:7d:9c:03:e5:83:5b:03:22:68:5b:4b:b1:0c:
6e:44:31:22:de:0e:dc:54:67:24:43:67:44:8c:b1:04:ee:ab:
49:6b:03:f2:15:74:c7:71:b8:c7:84:48:d9:8a:a8:da:08:c5:
45:79:ad:d8:ba:ac:2d:52:0f:46:d0:51:b9:fc:8f:7c:7a:92:
26:70:6c:87:60:f2:52:45:28:93:91:e2:7c:4e:d4:d1:65:c1:
7b:a2:1f:6c:c2:6e:97:c8:49:9b:ce:aa:2b:c9:6e:b6:8d:52:
d7:bf:40:d9:dd:3e:c4:8d:5f:a1:17:c7:06:b2:65:c5:33:9b:
64:82:af:81:23:39:95:b9:24:84:06:f6:6c:83:a5:15:b0:e4:
34:eb:c3:5f:10:ce:76:27:8c:dd:39:56:88:41:b4:2b:bd:25:
c8:c4:91:8c:8d:8a:6d:cf:5f:6a:58:7d:7a:5d:0d:a8:be:6c:
94:0e:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:38:28 2025 by rpki-client