Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/3137392e34332e35322e302f32322d3232203d3e20323730383732.roa
File: 3137392e34332e35322e302f32322d3232203d3e20323730383732.roa (raw, json)
Hash identifier: bB78ALzxbVeotbqJcQSA6X+JHNht7g56tZUfAuYZNQo=
Subject key identifier: CF:FD:01:B7:90:69:DC:65:C1:14:38:83:25:22:25:31:B9:C9:7D:36
Certificate issuer: /CN=49E4F4FD20AECD45BF68022E29E3B301F9B89DFB
Certificate serial: 30C8C25898ABC268467653CB4894441903E31610
Authority key identifier: 49:E4:F4:FD:20:AE:CD:45:BF:68:02:2E:29:E3:B3:01:F9:B8:9D:FB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49E4F4FD20AECD45BF68022E29E3B301F9B89DFB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/3137392e34332e35322e302f32322d3232203d3e20323730383732.roa
Signing time: Thu 25 May 2023 17:07:19 +0000
ROA not before: Thu 25 May 2023 17:02:19 +0000
ROA not after: Thu 23 May 2024 17:07:19 +0000
asID: 270872
IP address blocks: 179.43.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c8:c2:58:98:ab:c2:68:46:76:53:cb:48:94:44:19:03:e3:16:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49E4F4FD20AECD45BF68022E29E3B301F9B89DFB
Validity
Not Before: May 25 17:02:19 2023 GMT
Not After : May 23 17:07:19 2024 GMT
Subject: CN=CFFD01B79069DC65C114388325222531B9C97D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:0f:cb:6f:49:05:a2:78:a5:7e:e6:55:8a:
92:67:55:68:19:99:06:17:e3:bc:4e:e4:54:69:77:
ef:ea:5f:be:cd:7f:33:08:f5:83:91:ee:80:f2:67:
6c:8a:e7:06:df:47:85:d3:0a:72:f1:eb:94:22:d8:
84:e0:40:7b:bb:53:62:c6:24:f1:c3:d1:bb:5d:b7:
ac:ec:02:92:41:30:54:8f:ac:80:50:1a:81:65:34:
a9:44:7b:62:85:f4:8c:f3:a8:38:fc:3f:86:d0:72:
d3:8b:b3:f7:71:13:c8:65:00:c2:40:d6:fe:80:a9:
da:bb:3f:9e:60:cf:4e:9b:11:c8:6d:03:4f:8c:7d:
80:d1:ac:26:63:1d:7f:29:d4:bc:f4:33:05:4e:a9:
7f:79:58:81:18:a4:9c:a1:dc:3b:da:07:4e:48:7c:
7a:4b:c3:02:2b:4f:27:6c:74:b1:65:7e:15:7c:fe:
d0:b3:3e:9f:2f:65:79:1f:ea:f5:96:b4:44:17:95:
78:aa:a0:99:92:dc:22:1e:93:82:84:33:d5:a8:77:
6d:4e:f5:56:12:78:55:42:77:89:e7:0e:e2:1a:41:
73:2e:16:99:55:6a:b8:f5:d0:f3:e5:50:b8:7b:5a:
20:b9:63:1c:47:12:0e:96:7b:e1:e4:51:3b:99:fa:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FD:01:B7:90:69:DC:65:C1:14:38:83:25:22:25:31:B9:C9:7D:36
X509v3 Authority Key Identifier:
keyid:49:E4:F4:FD:20:AE:CD:45:BF:68:02:2E:29:E3:B3:01:F9:B8:9D:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/49E4F4FD20AECD45BF68022E29E3B301F9B89DFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49E4F4FD20AECD45BF68022E29E3B301F9B89DFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/3137392e34332e35322e302f32322d3232203d3e20323730383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.43.52.0/22
Signature Algorithm: sha256WithRSAEncryption
33:0f:26:d6:9d:0d:53:64:56:2c:42:4f:d6:33:45:b6:4f:2a:
df:76:64:7c:a5:5d:ff:f8:2b:3e:4a:97:85:47:1e:f7:c8:c9:
f9:e1:19:96:41:4b:20:81:68:8a:cf:a1:92:b6:bd:f1:82:23:
85:70:d9:c3:ba:51:94:93:1b:f3:78:32:22:e4:8e:19:78:a8:
8b:50:d1:07:e2:81:fb:15:f6:62:b0:4b:0b:45:29:45:4a:e7:
62:cf:1f:30:f1:9d:f5:23:71:6b:68:7a:3d:f1:74:f6:fa:0a:
ca:47:90:34:6b:28:77:36:1c:e9:bf:e6:dc:8a:7e:26:00:e1:
91:1a:cc:5e:c7:b0:d3:0f:7d:8c:05:8f:70:63:37:cc:33:d7:
48:68:3c:32:30:8e:15:35:07:24:db:c8:10:e5:53:ba:75:77:
c7:b5:d8:38:9f:72:3b:59:67:bc:f3:1b:80:d3:78:df:ea:ad:
4c:26:c2:2e:44:8a:1b:44:ea:d7:1b:22:87:07:7b:57:b4:81:
3f:92:74:dc:2b:af:17:e4:62:6a:62:20:26:7f:24:8f:18:06:
d6:54:f5:b3:6a:a3:51:86:2c:7c:aa:c3:97:3d:52:ec:e0:f7:
08:9e:77:1a:f3:08:9a:d6:3f:4b:ff:8c:ad:18:26:2a:48:25:
51:06:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:51:35 2025 by rpki-client