Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa
File: 3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier: DNykEfNS9cttOYom4sMHkRJNKilJJ8lIbsbzbA0LI04=
Subject key identifier: 57:D8:55:28:8A:F8:13:4D:B7:E3:C0:76:0D:9A:A6:89:84:A7:31:37
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 6AE1B42AD33ED6568CE05ADA1C9AC94358CA21A4
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa
Signing time: Thu 31 Oct 2024 17:24:34 +0000
ROA not before: Thu 31 Oct 2024 17:19:34 +0000
ROA not after: Thu 30 Oct 2025 17:24:34 +0000
asID: 262272
IP address blocks: 177.21.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e1:b4:2a:d3:3e:d6:56:8c:e0:5a:da:1c:9a:c9:43:58:ca:21:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:19:34 2024 GMT
Not After : Oct 30 17:24:34 2025 GMT
Subject: CN=57D855288AF8134DB7E3C0760D9AA68984A73137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:c6:22:46:c1:bf:a4:cc:35:f3:67:1d:0d:
61:06:a8:15:c2:36:b2:9f:56:ff:c9:d4:b8:e0:06:
a2:37:66:bb:c0:78:48:2d:50:4e:39:f1:7d:f3:8b:
0b:47:e2:33:13:82:e9:55:18:81:0c:88:ec:06:4b:
9c:15:ac:63:03:07:61:be:9f:1e:07:10:bb:10:67:
95:64:fb:f4:74:73:ff:00:62:5f:22:13:2b:17:e8:
53:cb:f5:98:3a:ad:c9:23:cd:fd:7a:51:f1:7b:d5:
c2:25:c6:11:31:8b:b9:75:05:22:cf:3a:9b:d1:92:
29:72:f3:1b:f1:a4:e5:f7:cb:29:0e:89:2c:35:4f:
42:e7:50:08:81:3f:21:66:e2:be:42:84:81:99:0e:
8e:da:c6:7a:fb:64:0f:f0:82:ca:b0:a0:96:e8:f8:
81:24:fb:76:2d:17:24:2f:3b:c1:97:50:9a:ad:52:
0e:fe:cb:49:ab:8f:fe:eb:17:f1:d8:4c:c5:49:e4:
77:93:d7:b4:b8:d6:92:88:b3:53:4d:05:07:76:7c:
3a:ea:c8:53:a0:b7:33:85:44:ec:6f:9b:74:f5:84:
af:f2:d6:e8:be:cb:93:22:c1:b6:78:17:50:08:9c:
fc:b0:66:fa:0b:1e:d7:c6:d4:21:d1:a0:0a:84:f1:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D8:55:28:8A:F8:13:4D:B7:E3:C0:76:0D:9A:A6:89:84:A7:31:37
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.21.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:ae:e9:4b:02:a1:a2:b6:d5:c4:2e:b7:25:70:70:14:bc:51:
76:1e:79:c0:db:5c:47:72:25:d0:98:14:88:50:53:9b:81:d0:
52:10:07:4c:3d:4e:b9:39:4f:39:da:8f:05:29:fb:ec:29:e0:
7a:64:b3:b5:ae:91:c1:31:c1:09:60:15:68:98:f0:85:f1:7c:
7d:d5:06:67:dc:89:ee:8e:31:05:b6:3f:d9:a5:44:f3:73:88:
15:e1:6e:17:69:93:64:c4:d3:63:7b:0b:6e:64:b1:ed:7d:d1:
47:bf:bd:b2:5e:4e:aa:b8:a3:44:95:22:c7:ab:c8:0a:5b:de:
e0:6b:85:e2:bf:70:4c:f4:b2:ce:e3:24:06:ad:58:5d:0f:0c:
61:10:1b:91:b0:be:6a:04:28:1e:2c:d5:2f:ce:1a:7b:50:ad:
52:d6:45:2c:a4:f0:fb:db:39:21:9a:3c:f3:f2:45:7c:0b:cf:
f6:60:57:17:e2:55:3d:91:94:f7:c9:d2:99:42:03:85:46:51:
b4:07:d4:05:f0:31:3a:77:49:5e:c0:98:3f:6d:e0:0a:e8:c9:
bc:a8:fb:e1:b8:c9:7f:03:34:bd:3c:d2:ef:a7:89:5c:af:93:
f8:d1:7c:70:1d:f8:39:3b:a5:f8:b0:44:0c:f3:36:15:8a:a7:
9f:44:02:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:50 2025 by rpki-client