Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137362e302f32342d3234203d3e203533303338.roa
File: 3137372e3135342e3137362e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier: xwFAdgG+rlnYTORi9+7fUma/zxmQREo708RKVMZ6ptE=
Subject key identifier: 70:44:6A:50:1A:9E:0D:89:40:B3:AF:F1:1A:16:22:8C:1D:20:BC:39
Certificate issuer: /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial: 55CFA4411C2D2FEFC04BE4E1F0F46291BD154343
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137362e302f32342d3234203d3e203533303338.roa
Signing time: Mon 02 Dec 2024 04:42:36 +0000
ROA not before: Mon 02 Dec 2024 04:37:36 +0000
ROA not after: Mon 01 Dec 2025 04:42:36 +0000
asID: 53038
IP address blocks: 177.154.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:cf:a4:41:1c:2d:2f:ef:c0:4b:e4:e1:f0:f4:62:91:bd:15:43:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Validity
Not Before: Dec 2 04:37:36 2024 GMT
Not After : Dec 1 04:42:36 2025 GMT
Subject: CN=70446A501A9E0D8940B3AFF11A16228C1D20BC39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:1e:63:2c:b6:d1:e1:c2:b1:0c:a0:e8:cc:
17:42:15:58:a0:d3:2e:ae:59:b3:2c:78:4a:58:46:
5c:db:c1:32:9b:97:4b:1b:2c:96:05:d7:6d:d1:ba:
de:9d:45:5f:91:68:ac:65:7c:78:3a:21:ef:69:45:
87:86:ad:7d:2d:84:b6:fa:6a:5f:33:25:ff:18:ab:
b4:6d:00:37:34:44:a9:2b:3f:46:5c:05:44:65:2d:
24:89:bf:30:72:66:16:5c:f5:2b:93:29:cb:50:bf:
24:76:d9:7b:2b:7d:b7:b9:d8:f9:c4:63:2b:e6:a1:
10:0a:0c:94:20:2c:13:f1:dc:a4:a2:f1:d5:28:3d:
6a:66:22:45:a7:07:d2:f2:ac:c4:02:29:60:06:9f:
fa:a7:a9:ad:ff:89:53:1c:9b:91:62:d9:f2:23:cc:
ea:d0:ee:6a:d0:f6:92:0c:1a:5d:b3:a4:f2:ad:c2:
67:a4:be:3c:84:1c:02:77:27:8f:37:d6:8c:97:35:
a3:b7:90:36:5f:0e:2c:3a:1d:5f:e9:4b:32:8a:41:
90:d7:0c:ab:73:70:64:a3:48:2c:c3:1d:0f:c4:0e:
88:05:2f:56:c2:61:48:14:dd:0f:12:a8:3c:99:ef:
70:ec:43:d3:2b:3e:16:ff:44:d7:aa:a7:d9:bd:6f:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:6A:50:1A:9E:0D:89:40:B3:AF:F1:1A:16:22:8C:1D:20:BC:39
X509v3 Authority Key Identifier:
keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137362e302f32342d3234203d3e203533303338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.154.176.0/24
Signature Algorithm: sha256WithRSAEncryption
72:bb:9e:d5:ab:c8:ec:52:ff:78:42:de:93:8d:78:52:96:94:
fd:29:ae:22:bb:9e:29:2c:4d:e3:48:d7:85:38:18:22:67:65:
9e:46:26:37:2b:da:f4:fe:4e:50:13:f1:ad:c1:b1:e7:7e:6e:
ff:05:9e:46:e9:8d:94:61:57:d3:c6:a2:51:2d:4a:78:22:5d:
28:62:22:c7:7f:a6:33:48:e4:aa:5f:6c:0f:ea:25:17:9a:2a:
49:b7:51:b7:a7:8e:df:8c:38:0b:fc:32:11:58:d3:ee:93:e9:
e7:f1:72:4f:2e:b5:b7:34:8a:fd:ee:43:97:6d:56:4a:ee:20:
7a:54:7f:b3:5c:ac:50:2d:08:8d:f0:ab:a2:8e:87:35:3b:95:
3a:4c:4a:39:59:88:10:98:b2:96:09:98:65:b8:03:65:d8:75:
eb:dd:36:c7:c1:cb:24:db:da:1e:4e:d9:b0:d4:dd:d8:f8:a2:
87:92:bc:04:12:b3:93:0a:eb:83:6d:e3:5a:6c:95:3b:6a:d5:
04:4a:fa:a2:fb:c7:df:0f:0f:5c:90:a7:e6:68:d6:d3:ba:13:
0b:74:55:12:e7:e3:8c:25:e4:07:68:46:6f:56:8c:5f:21:2d:
34:e6:6b:f6:44:8f:b2:e5:d1:d1:b8:09:82:55:80:f6:6d:bc:
b4:8e:13:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:25 2025 by rpki-client