Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
File: 3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa (raw, json)
Hash identifier: J29GCjk4bRASszxSetx+354wvA2e6FZOmFIN5uD7jDk=
Subject key identifier: 1B:2E:66:94:5D:E4:B3:BD:84:3C:CA:15:A4:36:E4:63:E9:9B:FC:5E
Certificate issuer: /CN=4A518310DD6B72E134A4AFB53DBA5727F57D5D9E
Certificate serial: 35FE9ECF8B37B8F26FB594C9460AF8FFEDA3404B
Authority key identifier: 4A:51:83:10:DD:6B:72:E1:34:A4:AF:B5:3D:BA:57:27:F5:7D:5D:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
Signing time: Fri 14 Mar 2025 12:28:53 +0000
ROA not before: Fri 14 Mar 2025 12:23:53 +0000
ROA not after: Fri 13 Mar 2026 12:28:53 +0000
asID: 263444
IP address blocks: 177.91.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:fe:9e:cf:8b:37:b8:f2:6f:b5:94:c9:46:0a:f8:ff:ed:a3:40:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A518310DD6B72E134A4AFB53DBA5727F57D5D9E
Validity
Not Before: Mar 14 12:23:53 2025 GMT
Not After : Mar 13 12:28:53 2026 GMT
Subject: CN=1B2E66945DE4B3BD843CCA15A436E463E99BFC5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:9a:0a:51:a3:fe:ae:07:59:df:24:24:fd:
55:1d:65:ad:03:da:7f:30:c2:cf:c8:c5:66:f3:b0:
b9:97:4b:2f:cb:7e:6a:d8:9c:5a:b7:4f:b1:15:d6:
fc:8c:4c:30:81:51:a7:c0:b3:c5:59:80:0f:47:5b:
73:d8:d9:7f:11:68:ca:20:0a:81:62:b8:79:5d:b2:
a0:bb:68:7d:a7:8f:40:97:81:c2:94:4a:b0:6f:4f:
39:b4:30:14:f5:8b:51:9a:a4:32:09:9f:84:00:1f:
0b:6c:52:7c:fd:fc:76:ab:1c:0e:f4:1b:93:26:d0:
92:79:a5:77:7b:7e:51:5e:b1:1e:ca:67:6d:40:03:
fb:22:ad:c2:40:32:3d:a1:89:17:f9:bd:d6:4b:1e:
52:23:2f:01:32:c6:54:e8:71:3d:5a:2c:ff:ee:36:
10:d5:bd:8f:67:a8:19:02:5b:bf:0a:ce:de:38:f6:
d1:90:da:c9:b4:58:cb:2a:7f:ce:12:a6:7c:1b:17:
71:8f:09:62:55:b1:af:2b:05:38:97:94:a2:60:55:
09:e5:59:61:21:ca:dc:a5:5b:6e:66:6f:b3:c4:0e:
95:e7:a2:c3:fd:cf:39:71:7b:b6:8e:e2:fb:0b:0c:
28:81:1d:f1:87:f6:75:48:bf:08:87:c5:9d:f4:21:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:66:94:5D:E4:B3:BD:84:3C:CA:15:A4:36:E4:63:E9:9B:FC:5E
X509v3 Authority Key Identifier:
keyid:4A:51:83:10:DD:6B:72:E1:34:A4:AF:B5:3D:BA:57:27:F5:7D:5D:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.91.160.0/22
Signature Algorithm: sha256WithRSAEncryption
93:f7:b0:9b:72:2f:85:49:da:bb:92:b0:66:66:d4:1f:05:66:
74:1a:2f:41:21:74:98:76:be:d3:0c:e5:82:ce:15:97:fa:e4:
54:52:b0:9a:ca:4e:b5:94:15:dc:cd:73:b2:a3:f6:d5:4f:a7:
6d:00:03:19:42:85:c9:ab:7b:e0:05:d4:92:bb:91:6d:93:87:
d0:92:2e:04:2e:b4:ce:7f:8a:bb:93:93:bf:45:7b:e8:f9:0a:
ef:d6:0c:31:36:1a:62:ad:46:be:71:ba:15:a0:ed:7b:71:5c:
2d:e1:8b:8a:79:f2:c1:f9:11:74:bc:01:8b:f2:b0:2a:c2:e1:
f2:bb:b2:ea:07:eb:fa:a2:f4:7e:e5:e9:65:08:ea:b1:1e:44:
56:ad:96:26:75:8b:f0:42:ef:1e:9b:d2:98:de:b5:45:f6:88:
99:57:77:73:06:74:7f:e8:ff:1d:de:36:25:26:ea:fd:51:9f:
0a:55:d2:4b:15:86:a7:97:99:53:ff:27:55:d1:9d:42:c8:83:
08:b7:d0:04:43:c1:52:3e:90:a4:74:43:8b:a1:49:82:67:d0:
c8:62:a3:2c:61:68:7c:64:40:d7:cb:0e:73:a1:f7:d8:6f:0b:
1d:52:6d:86:1a:89:04:84:82:66:4d:73:88:34:c1:91:08:1d:
66:7c:8b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:38:16 2025 by rpki-client