Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/3137372e33382e34302e302f32312d3332203d3e203532393431.roa
File: 3137372e33382e34302e302f32312d3332203d3e203532393431.roa (raw, json)
Hash identifier: Yt1U9AkCO7Vc55BQveF6wrXgNPBVNPnN/A4wQD3dAXI=
Subject key identifier: D4:55:A1:42:52:C7:22:76:39:F1:25:9F:18:90:C4:61:95:36:A5:5F
Certificate issuer: /CN=9D103AA204540DE0058FABD735474D7C4AE2DC8F
Certificate serial: 6BDBBD0469E9529727F7D55B46E643C2B7D22F79
Authority key identifier: 9D:10:3A:A2:04:54:0D:E0:05:8F:AB:D7:35:47:4D:7C:4A:E2:DC:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D103AA204540DE0058FABD735474D7C4AE2DC8F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/3137372e33382e34302e302f32312d3332203d3e203532393431.roa
Signing time: Fri 01 Nov 2024 19:11:17 +0000
ROA not before: Fri 01 Nov 2024 19:06:17 +0000
ROA not after: Fri 31 Oct 2025 19:11:17 +0000
asID: 52941
IP address blocks: 177.38.40.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:db:bd:04:69:e9:52:97:27:f7:d5:5b:46:e6:43:c2:b7:d2:2f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D103AA204540DE0058FABD735474D7C4AE2DC8F
Validity
Not Before: Nov 1 19:06:17 2024 GMT
Not After : Oct 31 19:11:17 2025 GMT
Subject: CN=D455A14252C7227639F1259F1890C4619536A55F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:27:66:04:89:69:b5:0f:d5:03:80:e4:3a:
57:71:3e:02:18:94:d2:c0:76:a4:f2:9b:f6:8b:ae:
13:9d:4d:8e:a6:d1:b7:97:aa:8c:60:c9:a6:e6:38:
60:12:5b:5e:d8:1d:9d:6d:9a:17:bb:51:b5:d5:9e:
6e:b2:17:85:3a:0b:0c:ce:fc:88:2c:5d:ac:8c:0c:
f3:5d:92:f3:2f:25:63:57:fe:38:c9:6a:28:36:e2:
b2:44:6d:72:1c:5c:cd:cc:16:23:70:11:41:40:e0:
75:ca:70:bd:2a:44:4a:64:25:b1:f1:b2:0f:aa:15:
7b:47:de:68:3f:52:29:36:7e:83:6c:f2:2d:6f:8a:
66:03:a5:a7:42:c3:09:c0:d8:7d:8f:3b:64:85:d1:
1b:47:7d:1b:20:b3:f1:fd:34:8d:ce:b7:01:d3:fe:
3d:9c:8a:3e:1d:52:aa:d2:99:12:23:9c:ae:f3:18:
e6:cb:c9:05:45:bd:7e:f7:18:b4:59:ba:7b:21:6d:
1a:7f:f8:17:8a:16:52:be:06:90:78:07:d8:89:4c:
59:49:f4:9f:48:69:c7:16:45:00:8b:e0:ca:cf:47:
3e:35:3f:e8:06:89:74:aa:f7:c2:2b:35:e7:c8:38:
77:50:bb:a3:52:c6:0d:92:e1:a5:77:ec:11:dc:93:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:55:A1:42:52:C7:22:76:39:F1:25:9F:18:90:C4:61:95:36:A5:5F
X509v3 Authority Key Identifier:
keyid:9D:10:3A:A2:04:54:0D:E0:05:8F:AB:D7:35:47:4D:7C:4A:E2:DC:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/9D103AA204540DE0058FABD735474D7C4AE2DC8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D103AA204540DE0058FABD735474D7C4AE2DC8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/3137372e33382e34302e302f32312d3332203d3e203532393431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.38.40.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:4a:80:70:b4:17:30:b8:24:9c:5b:fb:92:c3:22:4c:e1:5c:
1a:12:d8:13:9a:0c:2e:2b:47:82:0b:48:53:36:96:62:45:20:
ac:2c:28:7d:0d:bc:86:f4:91:74:9b:cd:fa:58:ee:4a:a0:7a:
8c:6b:5d:df:68:ee:95:da:b3:1e:32:6d:17:56:e3:a5:e9:a9:
3c:b8:bd:34:5f:9c:a1:f1:65:1d:d0:24:dc:dd:56:90:fd:d1:
0d:72:9f:fb:ee:26:08:0c:a9:84:97:3c:36:d0:b3:09:51:3c:
99:95:30:1b:ae:95:2e:57:48:9c:37:f8:75:39:38:81:82:70:
93:f3:4d:ad:c9:15:38:13:8b:bb:dc:f5:95:ac:30:06:e4:03:
9b:d1:d1:5f:80:5e:26:a9:fe:19:0d:19:82:9d:1a:a9:c6:aa:
2a:72:95:6c:98:3b:b0:dd:7d:fe:02:ee:63:c2:2f:0e:aa:a9:
d0:3f:2f:8f:3e:8b:6a:49:f3:fc:89:96:c0:15:07:34:7e:e7:
2b:75:65:d6:d5:70:80:b8:d2:f2:e5:88:ef:73:db:e1:1a:31:
62:c8:fa:54:8c:fb:00:3c:10:09:65:bf:e5:59:02:bf:da:70:
17:f2:8e:4d:70:41:10:f1:02:c1:fc:8f:75:b9:a8:e6:a5:f1:
cc:06:84:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:36:27 2025 by rpki-client