Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa
File: 3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa (raw, json)
Hash identifier: hwD/PhnzQ64ABGMT9rU474h50V1RWyVPfDfHYw1UaDU=
Subject key identifier: CC:D1:E1:0E:C9:76:A9:C9:0B:FC:E0:C1:DA:2C:6D:40:61:C8:00:BE
Certificate issuer: /CN=68235CC657BB7DC560D9EA8315F9350D9821462A
Certificate serial: 0CC0E2937D577353E5438DE64BD34D810A7F6499
Authority key identifier: 68:23:5C:C6:57:BB:7D:C5:60:D9:EA:83:15:F9:35:0D:98:21:46:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68235CC657BB7DC560D9EA8315F9350D9821462A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa
Signing time: Wed 13 Mar 2024 12:46:01 +0000
ROA not before: Wed 13 Mar 2024 12:41:01 +0000
ROA not after: Wed 12 Mar 2025 12:46:01 +0000
asID: 271477
IP address blocks: 177.152.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c0:e2:93:7d:57:73:53:e5:43:8d:e6:4b:d3:4d:81:0a:7f:64:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68235CC657BB7DC560D9EA8315F9350D9821462A
Validity
Not Before: Mar 13 12:41:01 2024 GMT
Not After : Mar 12 12:46:01 2025 GMT
Subject: CN=CCD1E10EC976A9C90BFCE0C1DA2C6D4061C800BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:39:e7:d0:0a:4b:0e:69:5a:60:7d:16:a0:
ca:55:70:d2:a0:98:31:f9:c4:97:b9:ba:99:74:78:
7d:3f:13:0c:7b:a3:7e:2a:3c:53:4b:37:ae:c0:6d:
14:02:67:42:94:aa:84:51:d6:07:b7:22:fb:fa:38:
fe:27:9c:f6:0b:b7:11:8f:70:ac:92:62:95:91:92:
47:2e:ab:5c:92:72:ef:2e:29:6c:76:5e:fb:4f:85:
4b:e9:8d:47:a4:50:a7:ef:f7:b3:b2:a5:2f:ac:af:
58:79:ea:27:da:e0:98:ca:8b:55:ff:c9:95:0b:b2:
da:f1:4a:0b:89:39:53:76:3d:43:dd:20:80:fa:74:
c8:d6:70:19:46:05:fb:b3:36:15:28:a7:61:1d:49:
7b:77:e5:92:87:15:fe:3b:90:1e:7a:d4:3f:ce:0f:
8c:46:df:ec:08:2b:b5:2f:2f:ab:2f:12:2f:2d:a1:
5b:80:58:6e:07:c0:9b:f9:67:f9:c5:bd:1e:5d:be:
c9:2b:47:01:70:f3:b8:a3:ed:16:7a:6d:75:c0:3c:
44:05:03:4b:2b:1a:a2:cc:2f:bd:b9:55:ac:96:f2:
bd:ff:43:ea:d1:da:2d:85:77:a6:70:54:3e:39:92:
0e:9d:af:0d:c5:46:55:06:4c:80:53:12:79:23:a3:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D1:E1:0E:C9:76:A9:C9:0B:FC:E0:C1:DA:2C:6D:40:61:C8:00:BE
X509v3 Authority Key Identifier:
keyid:68:23:5C:C6:57:BB:7D:C5:60:D9:EA:83:15:F9:35:0D:98:21:46:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/68235CC657BB7DC560D9EA8315F9350D9821462A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68235CC657BB7DC560D9EA8315F9350D9821462A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.152.124.0/22
Signature Algorithm: sha256WithRSAEncryption
39:41:8b:95:d6:8d:31:63:5c:90:95:0f:83:a6:30:9c:6c:02:
42:f1:ae:77:7d:62:6f:40:07:a1:20:07:be:f5:77:c0:89:cc:
9c:bc:72:15:72:68:f5:47:e3:f2:45:a0:61:f5:82:32:27:0f:
c3:49:26:3e:97:6f:c8:87:e3:b7:d5:90:65:af:f4:d8:ee:c7:
e0:81:41:5d:1a:61:95:91:d1:d3:a2:94:b3:27:fd:6c:cc:ab:
0d:a5:b9:64:a0:76:f5:1d:53:45:03:c0:8f:25:c7:9c:d8:9b:
17:3d:51:f1:ed:aa:c4:71:b5:50:29:d9:e9:ed:82:36:b8:82:
0d:79:47:cf:48:9a:0d:1c:ed:84:a6:da:c8:a1:4e:72:a8:d1:
e9:4e:5a:9a:17:20:d1:93:d6:40:f8:5d:d5:47:48:12:11:a7:
6b:ee:91:c6:35:55:7d:2d:e2:76:79:b3:84:54:dd:d2:5e:33:
71:87:dc:c2:8e:1b:87:3f:98:d9:23:61:44:5f:84:84:0a:4c:
28:db:98:bc:0b:7a:72:ac:0d:b2:4a:0c:7b:fa:64:b6:c2:9f:
be:47:b2:8e:53:63:29:f6:c7:0d:8a:14:66:02:77:9a:d6:12:
ff:4a:99:e0:47:bf:4f:6a:02:22:7f:ad:dd:6b:96:a6:c2:5e:
5b:07:b1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:46 2025 by rpki-client