Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/0/3137372e36362e34302e302f32312d3234203d3e203532383433.roa
File: 3137372e36362e34302e302f32312d3234203d3e203532383433.roa (raw, json)
Hash identifier: f1mZtkKpnxzU5g7br8Hc0V4/FSuKJ33Ts/Q/5Zzivss=
Subject key identifier: 9D:D0:C3:4A:DC:AE:08:08:D8:2B:F9:F0:BA:7E:1D:DF:DB:FE:F8:F1
Certificate issuer: /CN=7E63E43C07F54EA8AFD92D34644DBFCE5AC12F2D
Certificate serial: 02A92A665627B7CD67FB3D8AD0B2A332A52CA260
Authority key identifier: 7E:63:E4:3C:07:F5:4E:A8:AF:D9:2D:34:64:4D:BF:CE:5A:C1:2F:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E63E43C07F54EA8AFD92D34644DBFCE5AC12F2D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/0/3137372e36362e34302e302f32312d3234203d3e203532383433.roa
Signing time: Wed 07 Feb 2024 19:00:00 +0000
ROA not before: Wed 07 Feb 2024 18:55:00 +0000
ROA not after: Wed 05 Feb 2025 19:00:00 +0000
asID: 52843
IP address blocks: 177.66.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a9:2a:66:56:27:b7:cd:67:fb:3d:8a:d0:b2:a3:32:a5:2c:a2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E63E43C07F54EA8AFD92D34644DBFCE5AC12F2D
Validity
Not Before: Feb 7 18:55:00 2024 GMT
Not After : Feb 5 19:00:00 2025 GMT
Subject: CN=9DD0C34ADCAE0808D82BF9F0BA7E1DDFDBFEF8F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:33:3b:84:11:68:e4:e5:49:ff:db:16:37:
90:18:91:51:03:55:88:8b:45:e4:cb:65:42:06:5f:
17:0d:68:1f:c4:40:43:9c:f0:89:01:5f:0f:61:26:
48:1d:de:ab:f1:4a:3b:75:b1:42:4d:d6:0d:1a:05:
cf:f5:8b:b4:08:ec:60:02:83:fc:d3:92:f5:a6:b2:
e6:16:b4:12:ff:b8:16:01:35:d0:72:f8:dd:41:25:
d5:d0:8c:5a:82:09:2c:cb:42:ff:65:63:0e:3c:5b:
60:bb:24:78:2f:8f:36:a7:5c:88:48:ee:6b:8d:4e:
75:55:a0:b8:70:71:66:7f:12:61:78:36:fe:96:17:
0b:25:a7:20:1b:df:3e:d1:36:9f:42:70:ce:95:87:
53:2a:4c:42:98:23:fb:e8:50:7e:e8:ca:b4:15:ed:
bf:8c:b3:d8:0d:31:48:f8:bf:d9:65:4f:e8:80:a3:
0d:b1:67:e8:7f:30:4f:c9:67:e3:d0:44:90:d6:a5:
79:fe:a2:ca:33:c0:95:1d:5d:29:a6:22:7c:e0:c9:
2d:1f:8c:4c:9c:bb:9b:eb:53:0e:6a:b9:00:50:9e:
f6:93:b6:01:9a:cf:23:1c:5c:5e:9c:18:6d:bd:ef:
a2:0b:a8:2a:23:50:c0:a1:20:35:62:ec:b0:f4:f0:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D0:C3:4A:DC:AE:08:08:D8:2B:F9:F0:BA:7E:1D:DF:DB:FE:F8:F1
X509v3 Authority Key Identifier:
keyid:7E:63:E4:3C:07:F5:4E:A8:AF:D9:2D:34:64:4D:BF:CE:5A:C1:2F:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/0/7E63E43C07F54EA8AFD92D34644DBFCE5AC12F2D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E63E43C07F54EA8AFD92D34644DBFCE5AC12F2D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/0/3137372e36362e34302e302f32312d3234203d3e203532383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.66.40.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:05:9f:e1:63:15:d3:fc:f7:ea:ea:a9:b7:d6:47:65:12:0d:
a0:57:03:af:c5:f9:59:84:06:d4:88:d7:20:13:77:a0:de:d2:
da:28:91:11:44:66:7e:2b:e1:98:0f:dc:12:53:6a:c8:38:f7:
a7:0f:c2:c0:a1:1d:de:64:c8:62:2d:a5:6e:8c:9e:66:37:9b:
5f:96:ec:45:d1:18:57:a4:e9:33:cf:ae:90:e5:8a:0a:d0:dc:
a8:d1:b5:63:fe:66:97:be:2e:cf:f5:de:56:75:57:62:a6:29:
ed:28:55:89:75:5b:95:eb:e9:cc:f3:47:f8:5b:f7:4f:fb:10:
87:8f:30:e9:3a:10:ca:cf:bf:7d:49:70:15:c3:2e:af:5b:06:
8d:e6:07:fc:f5:51:7f:1c:94:e9:ea:a4:04:70:a3:e9:a8:3c:
a8:35:ae:9e:73:93:cc:9e:9a:06:74:3c:00:ad:c5:09:62:f9:
57:e8:28:6e:11:ae:4c:16:0b:c1:30:3e:1f:1d:69:c4:ff:54:
08:9b:51:af:06:cb:94:e0:12:46:66:2d:3f:5a:c5:11:c7:7a:
8b:0d:2c:ca:73:c6:26:fc:31:62:5c:0b:03:d6:d9:ed:e9:79:
22:0a:ba:a7:04:d9:15:44:18:8b:a1:e1:fa:e8:c4:0b:15:1a:
d9:df:95:3b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAqkqZlYnt81n+z2K0LKjMqUsomAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U2M0U0M0MwN0Y1NEVBOEFGRDkyRDM0NjQ0REJGQ0U1
QUMxMkYyRDAeFw0yNDAyMDcxODU1MDBaFw0yNTAyMDUxOTAwMDBaMDMxMTAvBgNV
BAMTKDlERDBDMzRBRENBRTA4MDhEODJCRjlGMEJBN0UxRERGREJGRUY4RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHzM7hBFo5OVJ/9sWN5AYkVED
VYiLReTLZUIGXxcNaB/EQEOc8IkBXw9hJkgd3qvxSjt1sUJN1g0aBc/1i7QI7GAC
g/zTkvWmsuYWtBL/uBYBNdBy+N1BJdXQjFqCCSzLQv9lYw48W2C7JHgvjzanXIhI
7muNTnVVoLhwcWZ/EmF4Nv6WFwslpyAb3z7RNp9CcM6Vh1MqTEKYI/voUH7oyrQV
7b+Ms9gNMUj4v9llT+iAow2xZ+h/ME/JZ+PQRJDWpXn+osozwJUdXSmmInzgyS0f
jEycu5vrUw5quQBQnvaTtgGazyMcXF6cGG2976ILqCojUMChIDVi7LD08MvbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUndDDStyuCAjYK/nwun4d39v++PEwHwYDVR0j
BBgwFoAUfmPkPAf1Tqiv2S00ZE2/zlrBLy0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXg1aDZhR2l6Z0p5alI1R1VVR2ZZVGtHeXlSNzI5ajgyTnVFdWZNMjgx
ZFovMC83RTYzRTQzQzA3RjU0RUE4QUZEOTJEMzQ2NDREQkZDRTVBQzEyRjJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFNjNFNDNDMDdGNTRFQThB
RkQ5MkQzNDY0NERCRkNFNUFDMTJGMkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl4NWg2YUdpemdKeWpSNUdVVUdmWVRrR3l5UjcyOWo4Mk51RXVmTTI4MWRaLzAv
MzEzNzM3MmUzNjM2MmUzNDMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjM4
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7FCKDANBgkqhkiG9w0BAQsFAAOCAQEAwQWf4WMV0/z3
6uqpt9ZHZRINoFcDr8X5WYQG1IjXIBN3oN7S2iiREURmfivhmA/cElNqyDj3pw/C
wKEd3mTIYi2lboyeZjebX5bsRdEYV6TpM8+ukOWKCtDcqNG1Y/5ml74uz/XeVnVX
YqYp7ShViXVblevpzPNH+Fv3T/sQh48w6ToQys+/fUlwFcMur1sGjeYH/PVRfxyU
6eqkBHCj6ag8qDWunnOTzJ6aBnQ8AK3FCWL5V+gobhGuTBYLwTA+Hx1pxP9UCJtR
rwbLlOASRmYtP1rFEcd6iw0synPGJvwxYlwLA9bZ7el5Igq6pwTZFUQYi6Hh+ujE
CxUa2d+VOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org