Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32382e302f32322d3234203d3e20323632393038.roa
File: 3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (raw, json)
Hash identifier: HJFC7iXGTFPZDU8AX26DfYJHqA8ZIk/nP70vX6+jQo4=
Subject key identifier: 57:A9:BE:B9:EA:61:89:75:84:FE:E5:8C:63:50:AD:82:DE:68:17:7E
Certificate issuer: /CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Certificate serial: 7FD2995CFDA0A1EA47A2B654EBC529BB69154679
Authority key identifier: B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32382e302f32322d3234203d3e20323632393038.roa
Signing time: Tue 04 Feb 2025 18:26:09 +0000
ROA not before: Tue 04 Feb 2025 18:21:09 +0000
ROA not after: Tue 03 Feb 2026 18:26:09 +0000
asID: 262908
IP address blocks: 177.38.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d2:99:5c:fd:a0:a1:ea:47:a2:b6:54:eb:c5:29:bb:69:15:46:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Validity
Not Before: Feb 4 18:21:09 2025 GMT
Not After : Feb 3 18:26:09 2026 GMT
Subject: CN=57A9BEB9EA61897584FEE58C6350AD82DE68177E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:8f:2a:e6:93:11:5e:0b:16:d9:d7:7f:75:
02:69:1a:d1:fe:fc:2a:d8:e0:0d:1b:70:f4:69:9d:
c6:81:c0:30:5c:28:21:5a:63:58:2e:74:ee:d2:0e:
86:b9:b5:75:95:da:15:b8:38:cb:a9:8c:3c:6a:1c:
aa:2a:4b:5c:3a:0d:a9:4e:6b:75:5a:53:59:8e:fe:
f0:e0:20:11:b9:b5:89:c6:f3:de:6f:4e:da:b6:6e:
f9:f6:96:78:bf:aa:be:8b:21:2c:e0:10:97:04:9a:
1c:8b:40:ef:dd:dc:9f:e2:ef:34:2c:31:6f:24:cd:
ed:af:ad:59:3e:e4:ef:e8:62:91:61:9d:d4:37:1c:
59:ac:6b:89:ac:15:a7:14:e6:40:7f:b0:48:d2:3b:
2f:87:b5:b5:a4:93:c5:0e:db:ef:5a:3c:83:29:81:
da:78:55:8a:2f:97:38:91:a5:d3:b0:3d:9a:e6:5e:
3d:d9:ed:60:a8:55:a8:3c:9c:e9:3b:f6:b9:10:b6:
7a:5f:ce:cf:1a:0b:cf:2e:4d:e1:bc:79:51:74:2d:
58:1c:dc:46:cf:d0:16:b7:9f:59:1b:00:61:4c:e1:
2a:bd:7c:13:09:67:e7:97:5c:79:b5:c8:69:f3:b7:
11:f7:42:d4:61:f9:05:6e:8c:6d:29:63:36:f2:d6:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A9:BE:B9:EA:61:89:75:84:FE:E5:8C:63:50:AD:82:DE:68:17:7E
X509v3 Authority Key Identifier:
keyid:B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32382e302f32322d3234203d3e20323632393038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.38.28.0/22
Signature Algorithm: sha256WithRSAEncryption
67:4e:4e:f0:cb:d0:e1:74:e6:d8:87:7e:5e:01:aa:28:e0:fd:
e0:b3:e6:4f:00:79:2f:6e:fe:f1:13:5c:d4:b8:3b:5d:7b:27:
0e:72:22:6c:a6:86:87:bf:90:eb:00:c5:0a:7e:04:09:39:5e:
f2:57:74:db:dd:04:13:d5:a3:71:d1:68:92:cb:ff:97:92:db:
43:cc:b9:f8:cc:15:02:7e:5c:6b:98:3c:0c:9b:a7:b5:96:84:
42:d5:2b:08:79:2e:87:5d:57:f5:dd:7f:f4:b7:13:69:56:c7:
e8:95:45:dc:0a:bb:39:2a:dd:d3:8f:72:e0:5a:8f:27:33:e9:
06:1b:46:bc:12:f5:0a:44:9f:a3:27:49:11:44:81:69:88:2a:
bb:66:b4:5f:af:56:d3:55:c2:10:ff:25:c5:a3:0b:b7:a1:de:
d4:d6:c9:c6:1b:57:c3:76:14:f9:7a:50:ce:12:89:8e:d7:f3:
44:62:3f:a8:25:b0:c4:ee:05:c8:07:50:e4:84:1f:d8:c3:79:
c7:2b:e7:c4:f2:10:a0:c1:d2:3b:cc:f0:81:b9:81:31:98:cd:
78:72:7d:e1:7c:43:5b:90:62:70:ce:3d:55:92:6e:46:69:01:
87:81:9a:f5:e0:28:33:a4:b6:c1:bc:90:ad:8b:74:41:fa:6e:
3e:01:0e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:51:23 2025 by rpki-client