Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa
File: 3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa (raw, json)
Hash identifier: 1LDXv0zBhcADxYmwHZeK8ERsIuED0HuQvyOfe+AVLKQ=
Subject key identifier: C5:2C:2B:80:2C:18:38:63:91:2A:B4:91:28:24:CF:75:DD:11:F9:DA
Certificate issuer: /CN=4ABC2853483C8D55A291610B3C655D5FD053740E
Certificate serial: 5CE250760E68997B6D0F1564AE28F448F2CD4493
Authority key identifier: 4A:BC:28:53:48:3C:8D:55:A2:91:61:0B:3C:65:5D:5F:D0:53:74:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa
Signing time: Wed 03 Apr 2024 22:56:19 +0000
ROA not before: Wed 03 Apr 2024 22:51:19 +0000
ROA not after: Wed 02 Apr 2025 22:56:19 +0000
asID: 271477
IP address blocks: 177.152.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e2:50:76:0e:68:99:7b:6d:0f:15:64:ae:28:f4:48:f2:cd:44:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ABC2853483C8D55A291610B3C655D5FD053740E
Validity
Not Before: Apr 3 22:51:19 2024 GMT
Not After : Apr 2 22:56:19 2025 GMT
Subject: CN=C52C2B802C183863912AB4912824CF75DD11F9DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:70:e1:d9:06:db:7a:3f:7f:29:fb:32:69:
6c:9c:13:01:bf:7f:d3:27:77:21:1b:88:0e:c3:41:
9a:23:8f:8a:94:3b:d1:cc:dd:de:34:98:4c:98:df:
82:f3:df:18:e2:97:71:52:07:89:bb:3c:de:74:95:
8f:db:cf:df:28:0c:ca:4e:0c:54:96:9c:17:37:94:
79:21:0a:97:2a:f2:f7:54:2b:a2:3f:af:f8:d7:5c:
bb:20:fb:b6:63:79:ce:dd:f0:e9:98:aa:49:a8:2f:
3a:34:ce:74:68:f8:85:75:9e:09:ad:bf:14:69:20:
de:f9:cd:04:bd:7d:53:e0:09:3d:ac:94:7e:c6:44:
3d:44:14:82:8b:30:88:6f:f5:96:57:00:29:95:60:
6c:32:3f:6f:05:b9:ed:5c:62:38:09:c4:8e:9f:ee:
29:70:66:5e:f4:54:d8:63:86:51:7f:47:47:b4:ea:
aa:26:0d:73:c9:0c:de:b1:0d:33:13:a2:c3:ac:ac:
64:b7:82:8d:54:6e:ba:45:f6:53:80:5f:15:09:c3:
1f:5d:cb:64:4b:1b:ee:05:5b:ca:4f:a6:58:6e:d2:
1b:6c:04:ec:44:ea:fe:f4:f2:83:92:ca:c3:6e:85:
b8:8f:41:a2:68:9d:f7:3c:7c:75:95:d9:50:21:25:
dc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2C:2B:80:2C:18:38:63:91:2A:B4:91:28:24:CF:75:DD:11:F9:DA
X509v3 Authority Key Identifier:
keyid:4A:BC:28:53:48:3C:8D:55:A2:91:61:0B:3C:65:5D:5F:D0:53:74:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.152.124.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:c8:b3:c3:14:3b:a9:3b:86:11:fa:6d:fd:37:91:53:49:fb:
01:f3:58:7e:85:c6:f7:f4:3f:d9:d6:96:02:93:5a:7c:fc:ac:
03:1b:61:89:72:4c:53:51:ac:83:cf:c7:77:a7:46:a1:f9:70:
02:e9:18:f6:ab:1d:35:e2:72:a9:a4:89:5a:ec:fd:66:ed:2a:
75:ab:7f:40:dd:d2:c4:7b:7b:a7:10:1a:c6:ca:fa:5a:85:5f:
55:fe:ec:da:5f:9a:51:d4:fb:1b:6c:25:ad:2d:92:7a:c9:5c:
1f:1d:4b:fa:f6:b8:c6:78:fb:63:d7:ee:60:51:8a:b8:56:95:
fa:9c:c1:49:3f:3c:5f:8a:bb:e6:b8:85:b7:57:07:6c:86:27:
c6:91:85:c0:f1:a4:f8:58:a5:af:61:f4:97:81:98:f0:5e:63:
37:10:77:38:62:71:17:e6:cc:39:4d:25:9e:30:f1:d9:25:58:
c7:75:1f:f7:0a:fb:86:2f:da:13:41:28:09:6e:d3:be:98:50:
7a:a3:73:61:01:07:a0:9f:ce:f8:64:63:01:1d:c2:68:4d:7e:
c1:2b:fd:7f:88:42:62:37:cf:18:79:ad:72:f9:9c:fc:50:e7:
f3:71:a1:c4:53:1a:6e:04:14:43:1a:6b:c3:f6:e6:d6:32:8c:
4a:0e:f0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:18:29 2025 by rpki-client