Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9aqUC3tEEJV85ukKShYraRBkCjmjq46MXFSdyFKVwmzP/0/3137372e35322e32342e302f32312d3234203d3e20323632323832.roa
File: 3137372e35322e32342e302f32312d3234203d3e20323632323832.roa (raw, json)
Hash identifier: R7sn3AckaXEsT+LB53t8JPeQk5Ke8MCzbiRlEKoCXkk=
Subject key identifier: 88:26:04:2F:25:D4:D9:98:01:29:EB:2D:1D:18:A0:43:A6:FA:8D:5A
Certificate issuer: /CN=857722366BDAD6511C5D6EF9E409EF470CAF16BE
Certificate serial: 66E0AE6CE0BA38969B5B7E8C775DDEA239D8A633
Authority key identifier: 85:77:22:36:6B:DA:D6:51:1C:5D:6E:F9:E4:09:EF:47:0C:AF:16:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/857722366BDAD6511C5D6EF9E409EF470CAF16BE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9aqUC3tEEJV85ukKShYraRBkCjmjq46MXFSdyFKVwmzP/0/3137372e35322e32342e302f32312d3234203d3e20323632323832.roa
Signing time: Wed 10 Jan 2024 21:56:50 +0000
ROA not before: Wed 10 Jan 2024 21:51:50 +0000
ROA not after: Wed 08 Jan 2025 21:56:50 +0000
asID: 262282
IP address blocks: 177.52.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e0:ae:6c:e0:ba:38:96:9b:5b:7e:8c:77:5d:de:a2:39:d8:a6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857722366BDAD6511C5D6EF9E409EF470CAF16BE
Validity
Not Before: Jan 10 21:51:50 2024 GMT
Not After : Jan 8 21:56:50 2025 GMT
Subject: CN=8826042F25D4D9980129EB2D1D18A043A6FA8D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:7d:e0:14:a8:6f:83:ae:13:54:77:bb:3e:
65:fe:af:bd:8d:c6:af:1c:cb:2f:76:55:0f:c3:72:
c4:c4:0f:3e:28:ad:95:f3:9d:56:ee:9d:45:1d:37:
cf:de:57:71:7b:89:2e:78:50:a3:c2:02:a7:79:e3:
f3:9f:c5:b9:81:3a:23:88:9b:96:44:2c:b6:67:67:
03:f6:9b:b1:f5:93:e2:a8:f9:33:8e:3c:e6:ba:9b:
82:94:15:1a:d0:21:71:94:8b:3d:a8:12:cc:eb:b8:
fc:fc:35:ac:e0:01:fd:0e:25:72:88:a9:af:7a:01:
b0:fa:c0:47:c5:f5:b5:e7:b8:ec:a6:f3:27:f5:06:
c5:ed:d2:ec:a7:16:f1:ad:cc:8b:75:71:db:c6:83:
ea:13:c7:cb:b0:d2:a5:a0:29:d2:dc:77:b2:a9:19:
e1:04:c3:55:3a:50:60:06:78:0c:b8:e1:5c:1f:2d:
c2:6b:7d:5f:e4:c5:bb:e3:80:c0:cd:9d:4b:1f:bb:
ce:4b:b9:5e:08:27:ef:d8:89:9a:37:21:d3:8b:27:
fb:74:e3:9d:35:64:89:99:c8:8d:e1:1c:0e:7e:da:
89:08:d9:c3:85:52:b7:d5:be:f9:d5:ab:eb:71:53:
15:5d:fe:eb:16:14:dd:f9:d0:dc:fa:a1:c1:0e:ff:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:26:04:2F:25:D4:D9:98:01:29:EB:2D:1D:18:A0:43:A6:FA:8D:5A
X509v3 Authority Key Identifier:
keyid:85:77:22:36:6B:DA:D6:51:1C:5D:6E:F9:E4:09:EF:47:0C:AF:16:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9aqUC3tEEJV85ukKShYraRBkCjmjq46MXFSdyFKVwmzP/0/857722366BDAD6511C5D6EF9E409EF470CAF16BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/857722366BDAD6511C5D6EF9E409EF470CAF16BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9aqUC3tEEJV85ukKShYraRBkCjmjq46MXFSdyFKVwmzP/0/3137372e35322e32342e302f32312d3234203d3e20323632323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.52.24.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:9a:b5:c7:c9:f1:e8:f1:06:42:7a:e0:be:7a:89:64:25:ff:
79:3c:cf:af:0a:39:7b:88:c4:fe:f1:86:df:33:0b:1b:a4:36:
56:91:38:89:02:0e:4d:df:21:a4:2e:af:95:c6:a2:17:4b:7c:
91:6f:2e:f0:8c:64:10:62:fa:97:aa:9d:b8:c2:e0:63:20:ce:
22:f1:f9:37:84:96:2e:85:1b:1f:f7:8d:d0:92:40:12:18:3c:
a5:9f:f2:ee:d6:24:8b:20:8e:44:5c:4c:c4:ba:e3:a6:1b:49:
55:37:af:12:39:22:ea:2c:a5:cd:2f:d5:6c:4e:b9:8f:a4:6d:
ce:eb:c3:2e:38:5d:05:86:d2:af:bb:3f:99:b8:c9:d5:b4:17:
4f:d5:71:de:86:87:9f:ce:18:4d:91:bc:67:41:84:b2:8d:f7:
ce:c7:7a:c3:40:91:c5:1f:41:fa:b8:ce:8f:73:24:c7:6a:4a:
5d:07:c0:bd:18:8b:5c:18:5c:d6:26:7e:3e:93:17:60:f1:d4:
76:cc:09:a5:64:3c:f0:ea:ea:e8:e4:48:3a:dd:bd:3c:5c:cc:
84:e7:d5:49:34:b4:cf:93:3a:c6:3f:d3:b3:ff:12:5e:50:dc:
de:c5:e0:0e:c2:32:b1:c7:11:e0:fe:0b:26:77:2e:d3:20:69:
76:d6:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:48:54 2025 by rpki-client