Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3135322e302f32322d3330203d3e203238313838.roa
File: 3137372e31322e3135322e302f32322d3330203d3e203238313838.roa (raw, json)
Hash identifier: RjdqQD2tPcSnniwi7dFHpves3pRtaMmuIwVTCIc9u1U=
Subject key identifier: AC:D6:64:81:97:75:BF:93:8E:22:74:A0:A0:88:F6:39:39:25:43:9C
Certificate issuer: /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial: 2FDAF126DD69CD0CD550CB1F242D9E9979ADFA4D
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3135322e302f32322d3330203d3e203238313838.roa
Signing time: Wed 05 Feb 2025 22:58:43 +0000
ROA not before: Wed 05 Feb 2025 22:53:43 +0000
ROA not after: Wed 04 Feb 2026 22:58:43 +0000
asID: 28188
IP address blocks: 177.12.152.0/22 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:da:f1:26:dd:69:cd:0c:d5:50:cb:1f:24:2d:9e:99:79:ad:fa:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Validity
Not Before: Feb 5 22:53:43 2025 GMT
Not After : Feb 4 22:58:43 2026 GMT
Subject: CN=ACD664819775BF938E2274A0A088F6393925439C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:1e:f4:df:08:15:df:4f:f6:65:1f:e7:74:
30:70:89:e5:e8:09:d5:71:ba:1e:c5:cb:0d:39:70:
71:c7:a4:a0:79:61:13:94:db:64:fb:72:40:50:55:
81:b3:dd:53:7e:ac:8e:76:7e:d1:bb:99:bd:11:6f:
b7:1a:76:4f:cd:24:27:8e:e0:ea:32:5f:6c:69:45:
9a:0c:30:83:34:e1:f9:05:bf:c0:a3:57:87:01:fa:
11:34:d0:55:75:f1:92:db:de:f4:15:c4:ec:e6:c0:
47:83:79:c1:81:a0:98:02:4e:cc:a4:3e:5a:e8:60:
f8:50:24:d8:d4:f3:77:86:c0:f9:70:1a:c5:a2:09:
e7:a8:4a:1e:3a:0e:4a:07:66:c1:4d:8d:c4:99:41:
d4:44:a5:a3:da:bd:10:a0:6b:90:39:1b:83:75:d5:
9d:77:0b:3c:ce:a7:ce:68:d7:df:b7:91:b5:4f:57:
95:c5:71:8c:83:cf:50:a5:9a:8f:0b:c6:49:21:c2:
bb:57:a3:8e:9b:b4:47:3c:ae:cd:94:d0:c9:d5:13:
b7:b5:00:c0:a8:dc:5c:a2:db:b9:a6:7b:95:df:52:
f0:e5:50:05:7f:96:ee:54:5c:70:c1:95:64:1b:70:
2b:11:73:42:b6:ef:36:5d:4c:37:9b:3f:d5:2b:de:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:64:81:97:75:BF:93:8E:22:74:A0:A0:88:F6:39:39:25:43:9C
X509v3 Authority Key Identifier:
keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3135322e302f32322d3330203d3e203238313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.12.152.0/22
Signature Algorithm: sha256WithRSAEncryption
53:c3:9b:2a:9b:45:b1:60:af:96:1a:97:52:68:59:9b:1f:7f:
8a:81:05:c5:f5:08:99:5b:db:10:28:27:54:52:48:37:ff:52:
f2:82:b6:7e:a9:7d:26:2f:92:ac:e4:b8:71:4a:58:10:fb:7e:
1e:a7:0b:b7:0a:7d:8f:60:44:1b:18:6f:41:f7:53:c2:26:d0:
e5:e7:ac:95:88:73:d5:60:5c:c1:4b:ab:82:e7:f0:73:07:17:
4b:b4:f7:b0:36:54:a4:f4:85:59:22:f1:0c:5f:9e:f0:9b:f5:
be:28:b7:a9:aa:6e:f3:c8:e0:24:90:63:05:d9:32:a7:93:30:
9a:ca:88:cc:4b:00:e4:01:29:4f:e3:45:e5:67:ae:88:73:ca:
f8:b4:a5:6d:3c:27:98:b4:68:30:c1:6d:a0:2d:90:f2:a6:58:
d7:fc:ce:d8:0a:74:23:0e:4d:30:e6:af:24:95:d6:0f:8a:40:
b7:42:96:6c:5d:90:33:68:53:63:79:55:90:ef:a6:19:96:94:
45:6f:b9:27:4a:c9:ab:bd:98:d2:23:16:01:f6:d8:1a:34:90:
56:bb:f0:cf:b4:f7:a9:b9:b7:0f:e7:76:30:fb:54:d4:25:21:
25:66:ab:fe:8b:af:4b:32:fa:9b:10:50:a6:4a:22:81:cc:e8:
e8:88:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:03:20 2025 by rpki-client