Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e38342e302f32322d3234203d3e203238363436.roa
File: 3230312e37372e38342e302f32322d3234203d3e203238363436.roa (raw, json)
Hash identifier: wX+JSRwncr7g0ZoRrvin1JFuDTvthpgfyPhD4X9GPzw=
Subject key identifier: 30:03:34:92:93:E6:1A:F2:3A:F7:70:43:2B:04:06:CD:46:D5:88:89
Certificate issuer: /CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Certificate serial: 38E71924F8A9734D535F7FDE060F8B335AF8F192
Authority key identifier: 8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e38342e302f32322d3234203d3e203238363436.roa
Signing time: Thu 06 Mar 2025 11:33:11 +0000
ROA not before: Thu 06 Mar 2025 11:28:11 +0000
ROA not after: Thu 05 Mar 2026 11:33:11 +0000
asID: 28646
IP address blocks: 201.77.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e7:19:24:f8:a9:73:4d:53:5f:7f:de:06:0f:8b:33:5a:f8:f1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Validity
Not Before: Mar 6 11:28:11 2025 GMT
Not After : Mar 5 11:33:11 2026 GMT
Subject: CN=3003349293E61AF23AF770432B0406CD46D58889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:9a:c6:63:ab:a8:4d:76:29:77:c8:dc:f7:
62:bd:2f:63:e6:f1:72:33:6c:15:e2:e0:05:85:7b:
bb:fd:bf:20:9d:9a:97:e3:cb:39:0e:9d:40:1c:31:
94:01:24:90:ea:64:a7:8c:54:9d:de:ff:0b:86:1b:
c9:31:0f:5f:05:f3:ee:4e:ee:ae:f1:9f:62:bc:6a:
c4:b4:3c:53:bd:ec:d6:ac:dc:f9:3b:7f:2e:a2:a1:
7e:48:55:e3:48:cf:f5:7d:0a:af:ed:84:61:c9:a7:
52:08:29:a4:3a:e3:71:86:16:16:44:6f:c6:1b:70:
03:48:5b:5d:cf:44:9c:32:36:c5:2b:91:7b:99:1c:
24:38:98:65:6f:70:ed:22:14:5c:64:78:fd:e1:54:
d8:a2:56:d3:da:34:21:cb:0a:15:63:70:10:93:9b:
5e:fd:cc:c6:1d:21:a8:f7:51:4d:7f:bb:70:39:6d:
67:ec:b2:6a:8a:d2:6a:1a:82:f3:a5:4d:7b:25:cb:
a2:fe:da:7c:9b:44:26:d4:88:ac:f7:ae:50:7f:76:
48:96:52:5a:99:0f:c4:4b:25:56:df:9a:23:a1:a6:
c3:80:1d:1b:8a:45:aa:cc:63:f9:bd:15:ac:85:24:
e0:c2:42:91:17:43:cd:53:3b:74:42:2b:23:e4:fa:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:03:34:92:93:E6:1A:F2:3A:F7:70:43:2B:04:06:CD:46:D5:88:89
X509v3 Authority Key Identifier:
keyid:8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e38342e302f32322d3234203d3e203238363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.84.0/22
Signature Algorithm: sha256WithRSAEncryption
84:64:a3:6b:f6:01:8e:f4:f3:77:2a:1a:5b:7c:bc:bb:d0:16:
28:4f:1c:28:f2:3b:f6:19:59:03:22:98:b1:0b:98:35:e7:e3:
f5:73:64:ca:ea:4e:11:db:b8:40:3c:0e:a3:d9:dd:ca:d5:43:
bc:eb:43:3d:3b:c8:ff:19:e0:0e:04:6f:73:7d:47:ac:42:a8:
81:d8:be:90:19:11:4f:10:aa:20:8d:0a:62:df:35:3a:de:8e:
de:9b:a5:71:fb:b9:a7:0f:bb:c0:18:a3:d8:d4:36:ed:b4:fe:
50:d4:c3:50:3a:3c:45:04:80:d0:c5:08:a2:55:05:42:35:6d:
a6:f3:a6:f3:64:80:e0:2e:9b:c9:c1:b0:60:8b:a9:a5:f0:ce:
14:c6:7d:16:63:90:d5:76:f3:0a:fb:f3:13:d8:dd:d4:a3:99:
c8:3c:b7:b3:c8:9a:9e:cd:f9:cf:3a:00:8a:d7:86:05:7f:99:
f1:b4:83:47:c2:99:9d:dd:fb:09:88:78:bc:25:63:f5:b5:62:
c0:99:84:ba:83:0a:1f:da:97:b5:ee:37:2f:3c:3c:a3:a5:65:
87:3f:f8:d2:b1:e5:c1:cc:53:fb:5c:b1:63:d3:d7:c9:28:b0:
0e:bc:1c:50:5d:85:86:ca:0e:56:8d:df:68:fc:f6:d5:36:17:
89:63:df:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:44:49 2025 by rpki-client