Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS264569.roa
File: AS264569.roa (raw, json)
Hash identifier: r9Fi+dKgK9n0WTCvZ702dgA++QdUUH0umZRkZ5k2Pu0=
Subject key identifier: 19:C0:72:92:B8:88:DE:CA:3B:A9:38:BA:A7:E6:5C:DB:C5:99:A5:0E
Certificate issuer: /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial: 1E3BFF596FAE8181AC4F7FBD9594EE0E28CECFA0
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS264569.roa
Signing time: Mon 20 Jan 2025 16:28:47 +0000
ROA not before: Mon 20 Jan 2025 16:23:47 +0000
ROA not after: Mon 19 Jan 2026 16:28:47 +0000
asID: 264569
IP address blocks: 177.72.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3b:ff:59:6f:ae:81:81:ac:4f:7f:bd:95:94:ee:0e:28:ce:cf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Validity
Not Before: Jan 20 16:23:47 2025 GMT
Not After : Jan 19 16:28:47 2026 GMT
Subject: CN=19C07292B888DECA3BA938BAA7E65CDBC599A50E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:7c:80:de:79:e3:ae:bd:95:a0:db:37:a2:
b4:7a:47:98:5e:db:6c:97:98:48:5a:50:19:80:0a:
9a:c6:24:71:b5:02:9a:72:45:2f:e0:1a:9e:33:70:
1c:bc:4b:36:2c:56:59:5b:f8:83:01:b0:77:66:b2:
68:e4:c1:0b:b1:7b:42:1e:3a:a4:6b:8d:16:88:ed:
fb:8d:b2:fc:c4:df:e8:91:2a:10:48:f3:17:34:ec:
e2:d7:06:ee:ca:bd:e5:1d:2c:35:e9:f8:b9:99:52:
10:fb:d0:0a:66:46:89:0f:d6:25:0a:be:8d:85:d8:
e3:ed:5c:8f:c9:46:b8:25:ed:0e:3d:73:b9:ad:0a:
80:f2:e3:72:ef:42:fc:a5:23:bf:f4:92:2f:97:4d:
3b:33:0b:7c:34:4c:1f:dc:9c:ea:b0:5f:e8:e2:77:
20:fd:a4:1f:fb:ba:57:cf:89:39:7e:8f:78:70:44:
cd:76:38:c0:d9:29:8b:2c:eb:48:46:39:67:32:8a:
bb:5f:34:90:6d:c6:a7:2a:f0:e1:01:be:42:0a:8c:
6c:a9:60:e9:63:1e:42:d0:20:da:41:8b:e8:32:a8:
d3:22:83:c0:12:4c:79:3d:34:8e:12:ef:c7:9e:c1:
73:23:cc:3c:cd:92:7d:9e:c9:fe:53:de:59:8d:4a:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C0:72:92:B8:88:DE:CA:3B:A9:38:BA:A7:E6:5C:DB:C5:99:A5:0E
X509v3 Authority Key Identifier:
keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS264569.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.72.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c9:f9:61:8e:59:59:5c:dd:28:60:eb:a4:e7:40:17:4a:02:
5a:99:d9:94:a6:91:45:0a:bc:00:47:97:00:21:58:a3:61:fd:
cc:60:25:3c:b0:16:16:31:38:26:0b:51:e8:9d:86:79:54:9e:
5b:74:78:a6:22:f8:87:50:13:a4:7c:43:6b:72:d9:0a:c3:61:
21:2e:7e:a4:34:64:26:38:b5:2e:86:ab:95:7e:58:bd:d1:9f:
56:30:1c:01:8d:6b:0c:51:d4:5b:05:00:48:4d:80:d8:e6:96:
c4:81:18:c5:8a:fa:2e:ce:0c:12:d4:29:27:6a:61:1c:10:a3:
f7:0b:76:c5:b5:ca:af:ef:51:5e:48:40:d4:8e:0e:8d:82:08:
10:01:e0:2c:1e:80:bc:a5:e8:48:9c:c9:e3:70:0d:8a:bf:53:
1e:81:b6:8c:9a:5e:59:bf:42:c9:b0:02:b3:ef:94:ea:05:1d:
f1:de:aa:6b:52:92:14:30:f3:6c:36:f4:38:1d:79:4f:77:e2:
e2:8a:cb:2d:c8:94:4b:1a:11:82:dd:aa:54:47:0d:02:02:30:
36:c6:ac:b8:40:bd:0a:e9:b9:b7:14:58:77:ac:9c:08:66:d7:
94:3b:f8:f0:ea:4b:30:4b:e0:06:ab:79:98:ae:aa:57:04:b4:
d8:38:6a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:42:13 2025 by rpki-client