Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3137372e38342e34302e302f32322d3232203d3e203532373038.roa
File: 3137372e38342e34302e302f32322d3232203d3e203532373038.roa (raw, json)
Hash identifier: IkVCM5LMKRqQApzg/8993CGDn/tkLyA0CFyEsO8IeTc=
Subject key identifier: 9A:AD:84:76:03:23:87:5B:8D:DC:12:90:25:7E:4A:E5:EC:C5:E3:49
Certificate issuer: /CN=5B5B5CB9EEF23947370DA03E71D6B051CB5C7641
Certificate serial: 2CCA3F0B71E5F5F582D9C60F02E2E3897EF03EBB
Authority key identifier: 5B:5B:5C:B9:EE:F2:39:47:37:0D:A0:3E:71:D6:B0:51:CB:5C:76:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3137372e38342e34302e302f32322d3232203d3e203532373038.roa
Signing time: Tue 04 Jul 2023 20:16:48 +0000
ROA not before: Tue 04 Jul 2023 20:11:48 +0000
ROA not after: Tue 02 Jul 2024 20:16:48 +0000
asID: 52708
IP address blocks: 177.84.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ca:3f:0b:71:e5:f5:f5:82:d9:c6:0f:02:e2:e3:89:7e:f0:3e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B5B5CB9EEF23947370DA03E71D6B051CB5C7641
Validity
Not Before: Jul 4 20:11:48 2023 GMT
Not After : Jul 2 20:16:48 2024 GMT
Subject: CN=9AAD84760323875B8DDC1290257E4AE5ECC5E349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:f5:f5:1b:cb:94:22:1e:7a:86:cf:be:3c:
27:32:6b:b5:87:41:ad:1c:c1:ed:57:36:b8:8f:e4:
b6:73:4d:d2:0e:56:81:b9:57:cf:f2:7a:b0:5d:5f:
d2:4d:d0:ad:c5:ab:c9:b0:e8:df:c7:9c:a7:49:2c:
e2:4d:f5:f8:ec:f4:bf:e9:39:57:53:94:e5:02:1e:
d3:ab:94:81:08:31:2e:5b:99:2a:97:01:63:a8:67:
11:16:48:e3:5c:0a:93:34:c3:81:0e:66:52:69:1e:
c2:50:f0:2e:ad:49:e6:80:4f:be:e2:ba:c5:e1:8f:
c9:b8:94:95:24:e1:1c:ac:c3:08:31:e0:62:8c:9d:
72:43:37:89:4e:95:9a:81:18:51:20:cb:ea:18:dd:
65:1c:87:b7:2f:19:41:15:3f:8d:ea:f1:a8:01:de:
d1:ca:40:fb:3a:7b:a2:84:ae:88:8b:c7:e1:c4:44:
e3:16:14:30:5c:68:94:99:f1:31:5f:5b:7d:c4:b5:
65:b7:a8:43:c2:45:13:48:36:c0:6b:c0:e5:8f:cb:
93:5d:08:4e:47:06:71:79:f0:a3:94:48:a5:60:44:
dc:7e:22:9e:7f:26:f4:e3:c1:22:e2:76:c1:24:1b:
72:b5:91:28:62:be:1a:2f:4b:54:62:17:6a:96:f8:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AD:84:76:03:23:87:5B:8D:DC:12:90:25:7E:4A:E5:EC:C5:E3:49
X509v3 Authority Key Identifier:
keyid:5B:5B:5C:B9:EE:F2:39:47:37:0D:A0:3E:71:D6:B0:51:CB:5C:76:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3137372e38342e34302e302f32322d3232203d3e203532373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.84.40.0/22
Signature Algorithm: sha256WithRSAEncryption
02:98:a7:ba:d3:25:10:3c:8b:57:fe:7f:63:54:dc:8f:ef:b3:
3c:38:87:86:b9:a5:d0:bd:00:72:1f:9a:8b:65:7e:0f:e2:f6:
66:3d:af:1c:28:46:99:f0:54:19:d4:dc:76:22:67:e6:59:a3:
f9:95:02:eb:c2:4b:9e:71:9f:9c:46:6f:de:47:e1:2b:e2:ad:
97:e3:2d:54:51:c1:3a:c5:52:b4:c4:af:53:f4:ef:10:d0:a4:
54:09:c0:0b:26:0a:4e:96:b3:b8:cb:96:ee:a3:1d:1a:4f:95:
bc:bb:f9:b3:27:bf:b1:7d:6d:e6:d6:1e:f1:23:08:8a:62:fc:
0f:81:c1:04:1b:4e:f5:5a:e5:d2:5c:3e:c1:77:f2:29:81:8a:
51:9b:a6:21:cc:fd:f5:15:a1:b6:8b:ee:e0:c5:f6:1a:68:39:
a1:48:91:cc:b8:26:b5:f3:e8:6e:46:20:08:a3:18:9e:20:d2:
f1:d1:c6:60:d5:fc:b0:6b:c4:87:1d:4f:89:9d:80:64:42:eb:
64:7c:de:37:8d:d9:27:52:37:77:93:c2:1d:98:6f:c0:c7:b0:
3e:10:0b:e5:5c:14:56:30:dd:be:69:2c:8a:c7:72:14:39:03:
72:fc:a8:2f:18:bd:15:ca:28:86:3d:45:2d:06:63:bd:cc:1c:
b0:9b:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:52:13 2025 by rpki-client