Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137372e31312e37362e302f32332d3233203d3e20323633363033.roa
File: 3137372e31312e37362e302f32332d3233203d3e20323633363033.roa (raw, json)
Hash identifier: a+JJjTlscntacV8QPlS8iR5T5lREOWg8ulycX50LwGI=
Subject key identifier: 57:AE:1E:BF:4A:6B:FC:61:49:B9:C7:4F:F1:63:00:35:C3:6F:DB:28
Certificate issuer: /CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Certificate serial: 2AF662FD0ED0832095D586D03CE475614CA419E6
Authority key identifier: 39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137372e31312e37362e302f32332d3233203d3e20323633363033.roa
Signing time: Thu 20 Feb 2025 17:53:37 +0000
ROA not before: Thu 20 Feb 2025 17:48:37 +0000
ROA not after: Thu 19 Feb 2026 17:53:37 +0000
asID: 263603
IP address blocks: 177.11.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f6:62:fd:0e:d0:83:20:95:d5:86:d0:3c:e4:75:61:4c:a4:19:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Validity
Not Before: Feb 20 17:48:37 2025 GMT
Not After : Feb 19 17:53:37 2026 GMT
Subject: CN=57AE1EBF4A6BFC6149B9C74FF1630035C36FDB28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:7f:ec:bd:9f:a1:89:55:80:eb:18:f8:88:
79:6c:09:a3:51:88:d8:eb:73:b0:63:6e:e5:c0:7f:
30:8a:44:86:77:91:2e:53:51:aa:15:35:9a:dc:be:
9c:c3:61:2b:30:52:8b:3f:44:f5:9d:ec:5f:74:1b:
6a:03:99:65:66:9d:ff:67:49:ee:91:51:ed:06:38:
f3:a4:ce:38:7c:d1:60:cd:fc:52:17:9a:69:6d:e6:
4f:c6:a5:c6:d5:fa:1d:ae:a2:7a:e3:5a:0d:c7:ae:
7c:78:5a:5c:e8:9c:da:6a:da:43:0b:1c:da:7b:22:
9a:5c:e4:b8:74:01:1f:cf:0a:84:02:2d:c3:5d:fb:
02:47:6e:7d:5a:b7:45:cf:43:c2:97:3e:e6:a7:dc:
e0:61:22:f8:c0:78:87:57:dd:4b:4c:ec:de:7c:07:
17:88:4e:b3:52:f0:4d:4b:e8:15:30:b7:bf:b9:99:
5c:00:45:b5:63:a5:03:92:0e:00:49:3b:d4:09:dc:
e9:2c:03:3e:c9:66:49:49:66:1e:3e:72:84:c1:7a:
61:88:98:fe:17:b9:00:02:39:1d:be:10:6c:0b:f1:
6d:8a:3b:e7:68:ef:07:15:69:33:44:60:08:9c:6b:
30:e1:83:27:81:6c:26:03:c6:8b:70:43:71:b6:66:
02:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AE:1E:BF:4A:6B:FC:61:49:B9:C7:4F:F1:63:00:35:C3:6F:DB:28
X509v3 Authority Key Identifier:
keyid:39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3925EED4443902E12DF7A9A139E25CB34974D01A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137372e31312e37362e302f32332d3233203d3e20323633363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.11.76.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:66:b1:b8:0d:0e:8e:28:3e:81:99:c8:cd:95:7b:b6:be:b3:
f9:c0:1a:27:b6:24:68:ac:64:71:55:21:49:f3:ba:cf:f7:26:
d6:9f:c5:5f:5d:0b:d3:b5:66:c9:c3:e7:f7:4c:91:09:f3:bd:
ee:cc:f7:5d:23:c8:f7:11:63:6a:f5:00:57:a1:cf:68:7e:e9:
8e:06:26:fa:95:64:bc:1b:5b:b7:46:30:e7:1f:b7:43:c1:0e:
2b:62:e0:70:25:bb:4a:72:61:a9:ba:58:49:2f:36:dd:69:90:
c3:ad:4e:1b:d3:ae:cf:6b:58:62:21:49:43:7f:1d:f7:76:aa:
08:3a:cc:7b:7a:17:9a:fc:b0:f1:99:51:44:29:23:de:b9:f2:
61:15:ef:87:c2:ae:f0:d0:7a:5a:a2:62:a1:55:ba:d9:18:0b:
b9:4a:c8:66:11:f5:04:b5:9f:45:73:d1:61:24:70:0e:27:b7:
8c:36:c3:20:0c:4d:11:aa:12:6d:e5:dc:3a:57:33:1b:79:d4:
36:7c:5d:14:0f:45:65:6c:7b:4d:c3:50:f1:c0:2e:69:bc:f0:
7b:0b:8e:4c:b4:91:c1:2a:14:1b:1e:be:32:42:3d:f1:9e:f5:
d6:e8:88:bf:d0:74:28:d6:e5:d8:fe:de:e2:89:d3:de:27:67:
90:51:82:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:57:54 2025 by rpki-client