Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e31312e39322e302f32322d3234203d3e203532393430.roa
File: 3137372e31312e39322e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier: vOYTi3jChj4Nr/yT+dPyVq2r2m4L/zCimd4I9zwNKDY=
Subject key identifier: 4B:39:C5:D7:43:F8:EE:74:99:A0:5D:2B:14:7D:35:C8:E2:85:B7:AB
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 650F519FC0A4B3CEB6AAB76E5DA320B37F3C4A43
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e31312e39322e302f32322d3234203d3e203532393430.roa
Signing time: Mon 25 Nov 2024 17:04:12 +0000
ROA not before: Mon 25 Nov 2024 16:59:12 +0000
ROA not after: Mon 24 Nov 2025 17:04:12 +0000
asID: 52940
IP address blocks: 177.11.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0f:51:9f:c0:a4:b3:ce:b6:aa:b7:6e:5d:a3:20:b3:7f:3c:4a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:59:12 2024 GMT
Not After : Nov 24 17:04:12 2025 GMT
Subject: CN=4B39C5D743F8EE7499A05D2B147D35C8E285B7AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:57:a9:4c:cb:16:29:f8:dc:b7:f8:dd:e8:
3b:fe:a1:8f:29:23:2b:a8:03:67:f5:ee:8c:a2:b3:
96:c8:ab:89:47:74:df:ee:b0:d2:6a:a7:11:4d:8d:
7f:bd:a5:66:62:05:e8:f9:c9:90:89:ce:54:2e:61:
5c:24:57:e7:9b:07:33:84:5a:37:e9:cc:ad:51:03:
a5:c0:15:b6:41:5f:38:2f:72:8a:e2:86:8b:aa:90:
fd:0c:59:bd:e0:a3:52:68:79:b3:52:f0:f1:ef:c4:
0e:9b:48:78:d9:03:45:f0:68:c0:a5:69:4c:32:e9:
b0:e7:23:96:22:8f:5e:f6:e6:2f:3c:cc:bc:1b:2a:
22:69:ea:d4:9a:a1:a0:a9:0e:f0:5d:6b:69:c8:0b:
a7:64:0c:52:00:dd:e5:3f:50:47:1f:57:1e:5f:00:
86:5b:3a:7b:82:b6:fd:dc:9f:b2:04:13:76:bf:fa:
0b:ce:75:c3:ed:6b:05:00:22:42:e2:d8:c5:25:b0:
93:37:23:f4:a0:44:88:50:82:8e:47:8b:98:cf:41:
96:d9:24:42:53:4e:d1:d0:9d:08:10:e1:d3:ef:be:
bd:15:63:cc:f4:78:e4:5f:5a:bd:dc:4f:7b:3e:e7:
4f:d3:4d:73:d6:0a:ec:14:24:8f:ba:27:0e:5e:21:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:39:C5:D7:43:F8:EE:74:99:A0:5D:2B:14:7D:35:C8:E2:85:B7:AB
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137372e31312e39322e302f32322d3234203d3e203532393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.11.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:83:86:0d:e1:9f:0f:4a:58:4f:81:94:45:e8:fa:3b:7d:a7:
7e:dd:49:11:ee:cf:5b:44:51:83:8f:67:7c:29:c0:69:83:34:
19:07:1e:f6:e1:b8:52:0a:93:2d:b2:5f:ae:29:2b:2d:24:f1:
7b:95:93:32:ed:85:a7:7c:0b:fa:18:28:35:26:0c:b6:dd:6e:
10:b5:a2:0c:99:2c:c0:b4:17:88:54:a5:7e:29:d3:b2:46:d8:
0d:8c:e5:f6:4b:9c:43:c0:1f:fe:31:ec:00:37:e0:b2:48:2c:
fc:07:c4:8e:2d:f0:94:39:42:84:fc:53:75:4e:3a:32:c5:a4:
0a:54:17:d3:01:46:84:99:42:b5:e3:78:0c:19:a5:b9:c1:26:
3c:54:7a:69:f6:e3:68:5f:b1:cd:84:aa:ef:cf:05:0c:3d:2b:
6d:b4:f5:72:33:83:60:ea:56:b8:ea:be:0b:15:ba:e1:fa:fd:
0f:64:72:af:6c:7f:45:9e:bf:51:a8:c1:7e:93:a2:9b:90:d6:
fc:d8:76:ab:2a:fe:2f:71:4a:45:be:63:a6:9c:86:cf:c8:5a:
5f:55:b1:cc:45:58:fc:ac:ee:a9:68:11:21:24:59:ce:a3:54:
3b:ac:90:8b:ba:38:e1:a8:9c:c2:9d:96:17:6a:05:ea:cf:5e:
02:a2:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:29 2025 by rpki-client