Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/0/3137372e33392e3230382e302f32312d3234203d3e20323632343333.roa
File: 3137372e33392e3230382e302f32312d3234203d3e20323632343333.roa (raw, json)
Hash identifier: 58Qxx5shVJ4FsKYi+z7/12Ab7gjpIxVL9Si6Ah149kw=
Subject key identifier: D7:FE:FD:8D:6B:99:C0:F0:BB:81:AE:1F:C3:0D:04:ED:2C:D2:BE:87
Certificate issuer: /CN=A8A221B1EF3CEEBAB46E7ED8BE2E167FA721C65B
Certificate serial: 69CF8BE2A6769350C930010BC150E174F28537B6
Authority key identifier: A8:A2:21:B1:EF:3C:EE:BA:B4:6E:7E:D8:BE:2E:16:7F:A7:21:C6:5B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8A221B1EF3CEEBAB46E7ED8BE2E167FA721C65B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/0/3137372e33392e3230382e302f32312d3234203d3e20323632343333.roa
Signing time: Thu 30 Nov 2023 13:28:06 +0000
ROA not before: Thu 30 Nov 2023 13:23:06 +0000
ROA not after: Thu 28 Nov 2024 13:28:06 +0000
asID: 262433
IP address blocks: 177.39.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:cf:8b:e2:a6:76:93:50:c9:30:01:0b:c1:50:e1:74:f2:85:37:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8A221B1EF3CEEBAB46E7ED8BE2E167FA721C65B
Validity
Not Before: Nov 30 13:23:06 2023 GMT
Not After : Nov 28 13:28:06 2024 GMT
Subject: CN=D7FEFD8D6B99C0F0BB81AE1FC30D04ED2CD2BE87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:0e:01:9f:16:1a:0b:8e:0d:20:5d:fd:3b:
61:4e:ef:cf:ca:c6:8b:3d:48:a0:35:d3:d0:15:a1:
9c:b3:5c:70:e7:c8:83:c5:88:aa:21:45:8e:ca:07:
e1:ff:fa:71:64:da:5f:57:2c:07:86:57:50:1b:f3:
de:94:66:e5:c5:6e:f4:40:b3:62:ab:b0:5e:cc:33:
d9:fa:9e:e2:58:b7:db:df:64:b7:36:21:76:e5:a1:
cb:34:56:1a:7b:2c:cc:29:5d:9c:33:7a:36:0c:80:
c8:5d:a7:a2:49:dc:3f:47:db:a2:9c:65:ba:a7:c3:
41:6d:49:e2:56:70:33:2f:5f:a1:dc:dc:f1:1a:ad:
a1:55:72:82:be:d5:9e:c4:45:da:3a:bb:41:25:38:
36:16:90:03:58:cb:3d:f8:96:37:dd:cb:79:21:c2:
22:2c:b6:c6:69:d7:fe:da:d1:1f:af:ec:eb:1f:48:
a6:21:d2:76:65:4f:d9:e8:7e:5e:15:95:e5:8d:d5:
e1:72:36:d2:e9:41:61:d0:d2:4f:cd:08:a3:22:ad:
04:7b:ee:f1:c6:d2:c9:59:64:43:3e:ae:a4:e3:f1:
c6:0f:b4:f8:ed:dd:65:07:ab:b4:45:4f:ca:42:c0:
5d:09:db:f0:c5:80:d3:ab:38:90:51:44:78:f4:6c:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FE:FD:8D:6B:99:C0:F0:BB:81:AE:1F:C3:0D:04:ED:2C:D2:BE:87
X509v3 Authority Key Identifier:
keyid:A8:A2:21:B1:EF:3C:EE:BA:B4:6E:7E:D8:BE:2E:16:7F:A7:21:C6:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/0/A8A221B1EF3CEEBAB46E7ED8BE2E167FA721C65B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8A221B1EF3CEEBAB46E7ED8BE2E167FA721C65B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/0/3137372e33392e3230382e302f32312d3234203d3e20323632343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.39.208.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:d5:11:1d:00:67:d0:17:0a:6b:31:25:a6:d3:85:11:58:6c:
37:d5:9f:c8:ec:ff:64:cf:81:c5:2d:02:ae:0e:ad:6a:1d:88:
5e:3f:6a:44:15:c0:5b:06:07:81:9a:74:ae:2b:26:71:c6:5e:
f2:7f:bc:f2:a1:0b:98:5b:f9:40:5c:84:25:56:03:78:12:b1:
55:23:74:cf:51:09:e1:b0:c1:44:b5:2d:04:54:cf:fb:40:1b:
13:3a:a5:25:67:3e:6c:fa:1a:fe:70:9f:43:5b:dd:a4:64:10:
69:0f:08:b7:1d:c4:ac:5c:f0:99:a8:c0:0f:67:12:04:39:66:
b8:fd:83:3b:8a:b0:0a:a9:20:2a:81:42:9b:ab:c4:a8:59:84:
66:84:f4:c9:13:2e:76:84:f8:ad:9a:3a:49:08:35:cd:93:e6:
25:a9:cd:56:b6:97:e2:7f:44:6c:7d:ee:51:7f:8c:47:c1:d8:
1d:c7:b5:0a:98:d3:db:b4:c5:57:41:51:f5:55:49:93:6c:02:
0e:0d:84:e3:a8:78:86:cd:86:c6:d4:1f:e2:0a:a2:2b:aa:d5:
c0:59:b5:8f:00:5e:f8:68:6d:b1:18:01:37:07:03:d4:b5:0b:
45:65:92:b2:58:c2:ef:91:13:c0:86:4e:c3:c5:e6:d3:fd:45:
ac:f4:5b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:18:35 2025 by rpki-client