Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137372e31312e37362e302f32322d3234203d3e20323633363033.roa
File: 3137372e31312e37362e302f32322d3234203d3e20323633363033.roa (raw, json)
Hash identifier: yV5bPZGgIXJ54G5uEEVu+EsmwUK3BpwUePZqRDbNs/E=
Subject key identifier: 1D:91:8C:DB:37:0A:6D:81:04:C2:E5:38:64:9A:2D:BF:A9:9D:B0:E2
Certificate issuer: /CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Certificate serial: 19A4C03E35C536906E8D770F5864A6C108F9618F
Authority key identifier: 39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137372e31312e37362e302f32322d3234203d3e20323633363033.roa
Signing time: Fri 17 Jan 2025 14:06:12 +0000
ROA not before: Fri 17 Jan 2025 14:01:12 +0000
ROA not after: Fri 16 Jan 2026 14:06:12 +0000
asID: 263603
IP address blocks: 177.11.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a4:c0:3e:35:c5:36:90:6e:8d:77:0f:58:64:a6:c1:08:f9:61:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Validity
Not Before: Jan 17 14:01:12 2025 GMT
Not After : Jan 16 14:06:12 2026 GMT
Subject: CN=1D918CDB370A6D8104C2E538649A2DBFA99DB0E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:06:2a:c3:15:83:99:b1:70:6e:72:54:ca:
f4:3b:c1:33:52:89:17:54:07:fa:69:a8:44:d9:51:
aa:e9:8a:10:2b:70:54:8c:d3:a7:61:62:68:8b:e9:
2b:8c:02:91:14:22:76:56:99:54:34:4c:5f:fe:ef:
e9:5c:a3:f3:76:f6:c9:4d:0f:47:6c:b0:93:f3:81:
d3:1e:d1:59:63:1d:70:08:17:e6:4d:19:b8:67:93:
a0:0c:bb:48:80:89:c3:37:6f:19:d8:b1:c4:c5:23:
ce:7a:7a:97:20:02:02:82:ae:41:8b:c7:8d:28:c9:
95:ac:25:ef:68:92:16:19:30:ce:76:be:13:ff:ef:
8f:22:c5:65:c2:5a:47:79:ba:cb:b7:81:db:54:e6:
79:ac:b4:b8:1d:bd:9f:4c:88:6c:72:25:4a:44:ce:
fa:0a:a8:0d:8b:1a:42:d6:5a:3d:93:53:d8:ff:91:
44:20:f6:ac:c5:12:df:e4:fd:3a:c0:c7:84:92:64:
64:5c:66:d6:4a:34:32:d6:66:d9:47:03:09:05:55:
38:e0:fd:8d:3e:0f:85:99:08:f6:64:1c:27:cc:11:
2f:1d:51:d7:1b:cd:f0:b8:5d:04:66:c6:36:a5:fa:
b4:b4:2a:d9:07:42:90:61:04:a1:2a:c3:de:31:61:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:91:8C:DB:37:0A:6D:81:04:C2:E5:38:64:9A:2D:BF:A9:9D:B0:E2
X509v3 Authority Key Identifier:
keyid:39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3925EED4443902E12DF7A9A139E25CB34974D01A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137372e31312e37362e302f32322d3234203d3e20323633363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.11.76.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:8a:7a:0c:c2:55:b9:09:4b:56:4f:30:04:40:f8:73:f4:98:
3c:5d:60:97:7f:88:68:22:0a:53:06:1d:eb:cd:2e:5e:6d:ad:
c5:60:89:1e:d9:d9:f1:f9:eb:9b:bf:3d:b4:e2:f9:b1:8f:59:
dc:8e:81:8a:9c:be:76:34:78:e6:c5:01:7d:65:f3:47:f0:fa:
b2:c7:34:d1:43:22:85:a6:34:a5:ad:f0:ea:ac:97:f1:64:04:
e7:f7:4e:33:95:68:4f:5a:b4:06:a6:74:0f:1e:a3:43:0d:9d:
1f:46:0f:7c:46:d6:ed:57:e8:df:a6:97:09:96:b0:0f:fc:c0:
88:36:f9:13:ea:4e:46:07:bf:2e:75:27:1b:bb:ae:71:eb:b1:
ab:ba:c9:79:65:43:11:a0:05:be:4d:15:48:0a:ff:d7:a8:55:
1b:b2:4b:77:4b:82:d1:98:2a:0d:b4:fd:96:ac:a4:e9:ea:9d:
61:f4:8d:2d:3e:1a:27:bf:8d:fb:85:3a:ac:58:f6:e0:50:4a:
b6:91:6e:06:56:7a:1b:21:d4:c7:e9:ff:2f:44:55:4c:37:03:
1b:2d:8a:88:32:a4:4c:5b:c5:f4:80:e4:49:54:2e:03:36:29:
6a:55:5c:11:38:8b:e4:3b:75:40:fc:fe:73:a9:87:42:73:78:
7a:7f:bc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:07:45 2025 by rpki-client