Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3134342e302f32312d3330203d3e203238313838.roa
File: 3137372e31322e3134342e302f32312d3330203d3e203238313838.roa (raw, json)
Hash identifier: MHcfgi7lMEgxf2M72r8JKXNnZFp05op7RJOMa9t2zFY=
Subject key identifier: 50:53:BE:A8:F4:EF:7B:C5:3E:B4:34:57:54:9C:E4:14:80:58:E7:90
Certificate issuer: /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial: 362B41B1489CED2D77F427AC3125C9728931F56E
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3134342e302f32312d3330203d3e203238313838.roa
Signing time: Wed 05 Feb 2025 22:58:36 +0000
ROA not before: Wed 05 Feb 2025 22:53:36 +0000
ROA not after: Wed 04 Feb 2026 22:58:36 +0000
asID: 28188
IP address blocks: 177.12.144.0/21 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:2b:41:b1:48:9c:ed:2d:77:f4:27:ac:31:25:c9:72:89:31:f5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Validity
Not Before: Feb 5 22:53:36 2025 GMT
Not After : Feb 4 22:58:36 2026 GMT
Subject: CN=5053BEA8F4EF7BC53EB43457549CE4148058E790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:c2:61:7f:20:af:3c:34:34:d4:a8:43:a3:
29:93:82:41:c4:70:7d:cd:58:f2:a9:a0:7b:0e:40:
02:db:89:51:7b:7a:db:62:3a:cb:e7:b2:1c:02:ad:
c9:77:89:39:93:0c:e1:75:81:d7:b1:45:95:b1:b7:
c7:8c:19:51:22:dc:a6:7e:97:5c:63:ab:be:eb:93:
77:da:32:d4:18:fb:f1:82:2c:c3:83:f2:6a:24:4f:
88:54:25:72:4c:68:7b:1d:4f:47:e1:2a:2d:6f:3f:
d6:5e:25:e6:48:f2:e2:60:8e:7e:a1:c5:85:3c:c0:
49:13:29:07:02:79:c4:ac:0e:e6:23:c3:7b:fa:04:
c8:2f:ae:53:56:01:59:84:6a:18:37:64:07:35:43:
79:6b:1e:b2:c5:ea:b9:08:14:ba:f8:b5:b8:05:e5:
e6:29:9f:e7:6a:da:a1:14:65:cd:cd:fe:6c:e3:dc:
d1:b6:9e:f6:c0:81:e8:a9:09:28:06:f2:66:de:74:
27:87:84:69:b9:01:ce:92:87:84:8c:cf:27:92:47:
54:5d:63:fd:d5:fd:b0:3e:e8:c8:bf:c2:7d:c2:9b:
91:4e:b3:39:b8:d9:53:f0:26:42:df:e1:ac:ef:0f:
54:21:a1:94:a1:cd:34:14:d6:e1:6d:d3:44:e2:15:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:53:BE:A8:F4:EF:7B:C5:3E:B4:34:57:54:9C:E4:14:80:58:E7:90
X509v3 Authority Key Identifier:
keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3134342e302f32312d3330203d3e203238313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.12.144.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:ae:27:a7:30:ad:fa:e4:5a:07:3f:e8:05:43:bb:34:8b:5b:
ac:9d:9f:f5:4f:04:a8:b1:c2:09:68:4d:4e:78:c2:d4:e0:fb:
4c:30:3a:0d:30:a9:ab:ac:78:73:d3:33:98:5d:36:5f:8e:a2:
f7:3c:c0:aa:8f:2f:7e:07:02:54:36:1c:57:23:60:c5:e4:e0:
37:cf:fc:4a:49:bd:57:66:08:7b:05:94:0c:08:82:f5:9b:5b:
e0:25:46:c5:fe:17:3a:3f:04:d7:39:b5:1c:ed:d2:ae:40:33:
ea:09:0c:24:a0:81:2f:4a:68:e6:02:d3:8f:15:ae:97:30:09:
b4:85:f2:28:46:f5:af:58:6f:8c:7e:74:7f:34:a7:61:d4:e2:
54:8b:55:84:78:bd:79:aa:38:ce:a5:94:49:8f:ab:1d:72:a2:
26:5b:04:d7:4c:6f:fc:65:fe:fd:00:22:6e:8b:cd:b5:33:89:
35:30:c8:17:da:93:86:26:18:48:38:b9:b5:e6:f1:03:01:b4:
cc:4f:b8:04:04:97:5b:10:d1:a4:cf:8d:ee:bb:0d:70:eb:fe:
81:88:4e:02:b1:2b:85:7f:fc:47:31:d7:9d:2d:90:ba:db:8c:
eb:eb:be:31:14:45:42:53:83:44:bb:fd:be:31:c0:30:14:86:
69:28:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:54:04 2025 by rpki-client