Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa
File: 3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa (raw, json)
Hash identifier: 3FOLHM8wY9q37qzX6OHO3koCOuajtlK9F3IDUduI7b4=
Subject key identifier: BB:7C:37:D4:E7:4B:15:EE:D3:03:08:E0:98:27:01:A9:78:C2:55:84
Certificate issuer: /CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
Certificate serial: 203651AE8B21C191757F1D5940D9417699B9CC9B
Authority key identifier: F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa
Signing time: Tue 25 Mar 2025 20:18:24 +0000
ROA not before: Tue 25 Mar 2025 20:13:24 +0000
ROA not after: Tue 24 Mar 2026 20:18:24 +0000
asID: 270630
IP address blocks: 177.70.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:36:51:ae:8b:21:c1:91:75:7f:1d:59:40:d9:41:76:99:b9:cc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
Validity
Not Before: Mar 25 20:13:24 2025 GMT
Not After : Mar 24 20:18:24 2026 GMT
Subject: CN=BB7C37D4E74B15EED30308E0982701A978C25584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:94:11:c9:83:f9:48:06:e0:78:8d:de:cb:
1f:72:fe:2f:b4:6b:cb:05:da:0c:df:44:ee:57:d6:
9a:83:91:ce:01:d1:4e:7b:95:e0:78:21:da:99:1d:
0b:df:f9:63:ff:a3:b0:12:8a:82:dd:57:ed:bd:f5:
47:3c:cb:00:47:9b:79:00:e7:a9:3e:d7:7a:df:b7:
86:bb:5b:9f:86:ac:12:37:91:0d:13:01:cb:70:ed:
55:4a:79:ab:44:2c:5b:a2:b4:3b:0b:14:39:29:be:
4f:77:78:2f:ab:a7:43:d9:70:00:22:8a:ed:e6:48:
b3:5a:a1:e9:f8:c6:04:3c:68:ed:0f:a2:8d:7a:05:
6b:6b:a7:5c:7c:70:7b:87:d9:a9:44:c4:99:4b:b4:
6a:81:33:80:39:49:1c:25:eb:3b:ca:2b:b3:b4:a3:
03:d4:6c:27:5f:08:78:08:21:84:f2:96:17:36:f1:
dc:6a:51:7e:32:f1:5f:a5:bd:33:2d:e5:ba:7b:80:
0b:13:65:67:56:62:ee:88:59:52:e4:fb:2f:2e:ad:
2f:50:26:c8:82:85:77:e6:c4:43:ff:31:67:ea:66:
d9:0b:c3:41:64:47:e2:25:5e:df:52:7f:ae:f6:e3:
5c:63:07:5a:3d:49:36:51:ec:77:44:aa:94:6d:47:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7C:37:D4:E7:4B:15:EE:D3:03:08:E0:98:27:01:A9:78:C2:55:84
X509v3 Authority Key Identifier:
keyid:F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.70.244.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f1:7a:6f:7e:8a:a8:1f:e1:5d:09:06:b4:75:d1:23:66:69:
16:0f:2b:a2:8c:a7:61:38:11:33:df:c3:c6:ea:2b:2d:d3:80:
0d:a6:bb:5f:9a:5c:4b:ee:60:ab:86:f5:3f:84:e8:66:f1:5a:
ed:31:0d:36:24:cf:e9:30:92:d0:00:79:29:1e:f3:a8:8b:65:
06:24:47:09:50:e3:2f:d5:ad:c7:8b:68:80:e5:9c:1d:d1:1e:
ee:14:d0:3e:d4:75:38:80:f6:d7:3c:b3:41:35:a5:93:91:be:
f2:85:98:58:c6:d1:23:96:32:2f:93:e7:fe:62:a0:60:50:d3:
76:70:95:53:4a:d0:33:d1:5a:f3:c7:40:b6:6d:88:62:32:c6:
45:e0:2a:b1:81:56:b5:e0:51:31:16:80:e0:bb:f8:3e:bb:09:
b5:93:80:c2:d0:f4:de:87:ef:83:77:11:81:05:01:c0:59:80:
32:04:cf:1e:97:0d:55:b1:ca:09:84:0b:31:ad:99:83:71:f6:
96:48:92:69:47:71:00:9c:b6:9f:8a:65:15:ad:ad:62:89:d9:
49:6e:68:4c:de:82:7c:f9:fd:fa:d7:d6:e0:b7:a7:a1:e5:c6:
65:f6:0c:a4:73:3b:d6:2e:40:51:3c:69:8b:c4:54:03:28:96:
0c:bd:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:14 2025 by rpki-client