Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e32382e302f32322d3332203d3e203532373632.roa
File: 3137372e32332e32382e302f32322d3332203d3e203532373632.roa (raw, json)
Hash identifier: Msxcjpq1ML9h/1podlKlyX1pwQNyXzDlIK3gLyg5Z7w=
Subject key identifier: AE:05:D5:BF:7F:B9:AD:B7:5F:C9:A8:5B:FB:38:1B:C6:49:7C:4B:75
Certificate issuer: /CN=876F8C1F6C6405B966A93B542B578351FABA5EB0
Certificate serial: 63C609215B8167854E8B92E4EE3CA5624D2D73E3
Authority key identifier: 87:6F:8C:1F:6C:64:05:B9:66:A9:3B:54:2B:57:83:51:FA:BA:5E:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/876F8C1F6C6405B966A93B542B578351FABA5EB0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e32382e302f32322d3332203d3e203532373632.roa
Signing time: Fri 09 Feb 2024 20:32:10 +0000
ROA not before: Fri 09 Feb 2024 20:27:10 +0000
ROA not after: Fri 07 Feb 2025 20:32:10 +0000
asID: 52762
IP address blocks: 177.23.28.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:c6:09:21:5b:81:67:85:4e:8b:92:e4:ee:3c:a5:62:4d:2d:73:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=876F8C1F6C6405B966A93B542B578351FABA5EB0
Validity
Not Before: Feb 9 20:27:10 2024 GMT
Not After : Feb 7 20:32:10 2025 GMT
Subject: CN=AE05D5BF7FB9ADB75FC9A85BFB381BC6497C4B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:51:0e:bf:81:94:08:b4:fa:b2:5a:29:b7:
e9:48:6f:6b:29:42:00:a5:1f:69:b0:59:e8:d9:8b:
58:66:99:e8:02:e5:b7:00:3c:8c:f2:55:42:57:07:
70:81:ea:07:ec:8b:dd:bc:2a:fd:0c:00:d0:aa:95:
e6:5a:11:49:40:ee:63:6a:b2:1d:21:aa:71:09:b8:
9e:f5:03:aa:d4:49:c9:90:ee:27:41:8a:fd:86:00:
cc:d6:ff:ca:2e:02:ed:59:5e:30:7c:ba:de:02:ec:
6a:e9:04:03:6a:5a:5d:23:eb:03:e0:27:7c:30:d3:
b0:83:50:16:f1:3f:3e:e1:89:44:27:44:20:da:b1:
c4:88:38:15:7c:42:15:1f:8b:e0:78:43:16:8b:5f:
af:58:ce:83:d5:0c:b4:f1:f8:92:50:01:74:3f:20:
1c:05:e1:c5:97:88:cf:27:79:a5:17:ca:fc:b9:8a:
93:a9:9d:ca:df:20:3c:9c:89:1e:94:38:26:0d:2d:
8f:08:2c:89:a7:6a:ff:4a:86:99:ff:31:0b:b9:97:
44:d5:76:26:63:1c:16:fa:1b:05:d4:ca:29:90:74:
61:ad:98:5a:f3:00:28:fc:bb:9b:21:82:d1:b9:3b:
3b:1e:0d:41:d9:f7:9e:79:b4:45:74:bb:6d:a1:50:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:05:D5:BF:7F:B9:AD:B7:5F:C9:A8:5B:FB:38:1B:C6:49:7C:4B:75
X509v3 Authority Key Identifier:
keyid:87:6F:8C:1F:6C:64:05:B9:66:A9:3B:54:2B:57:83:51:FA:BA:5E:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/876F8C1F6C6405B966A93B542B578351FABA5EB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/876F8C1F6C6405B966A93B542B578351FABA5EB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e32382e302f32322d3332203d3e203532373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.23.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:aa:2f:6d:5c:e6:d5:c9:31:cf:bd:43:d7:00:6b:0c:fc:f2:
4b:0f:1f:10:c2:da:46:22:45:c2:0f:62:85:db:b3:a9:cb:8f:
97:64:d2:59:ea:ea:c8:28:1d:10:ca:97:e5:84:2a:c6:0b:d7:
8e:bc:c2:b4:d4:a1:5e:69:5e:c5:dc:cf:f7:34:28:4c:08:64:
a3:68:92:b5:ee:c2:a3:18:4f:89:a0:74:d2:e3:be:9d:e3:91:
e2:79:b5:84:08:08:34:5a:3b:82:30:90:51:57:8d:18:f3:e1:
3e:3d:6f:21:44:92:de:87:e4:40:41:04:d0:9c:d9:40:2b:e5:
18:c9:07:c3:89:67:78:1b:b4:6f:a2:97:22:d6:1c:a8:d6:1c:
81:a0:a0:78:e8:9c:b5:7d:c5:e7:89:1a:05:3c:3d:60:78:37:
47:f7:11:f2:05:63:f1:25:b7:82:6b:01:9d:ae:84:dd:fd:07:
4d:46:9c:ef:db:0d:83:94:2f:73:f2:5c:42:f7:d2:62:4d:a2:
d6:e0:94:27:bb:c6:ad:f9:ea:13:df:13:7c:5b:19:b3:b0:14:
b8:cd:44:53:3d:7e:84:ef:bd:56:b8:dc:31:89:a7:76:23:9a:
61:aa:e5:4f:0c:9d:f6:6b:53:95:20:6e:06:e2:29:d6:09:f7:
03:5d:b6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:19 2025 by rpki-client