Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3135362e302f32322d3330203d3e203238313838.roa
File: 3137372e31322e3135362e302f32322d3330203d3e203238313838.roa (raw, json)
Hash identifier: StetRywZrXC54iw22c5ozO6I/vjf/CuaweDVhYlS0ww=
Subject key identifier: 0D:37:FD:8A:65:E9:57:5A:2D:B6:AD:13:CB:D3:74:57:A4:18:01:33
Certificate issuer: /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial: 443F06AF2121E6161DB65391D35BF53EFF7529C1
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3135362e302f32322d3330203d3e203238313838.roa
Signing time: Wed 05 Feb 2025 22:58:50 +0000
ROA not before: Wed 05 Feb 2025 22:53:50 +0000
ROA not after: Wed 04 Feb 2026 22:58:50 +0000
asID: 28188
IP address blocks: 177.12.156.0/22 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3f:06:af:21:21:e6:16:1d:b6:53:91:d3:5b:f5:3e:ff:75:29:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Validity
Not Before: Feb 5 22:53:50 2025 GMT
Not After : Feb 4 22:58:50 2026 GMT
Subject: CN=0D37FD8A65E9575A2DB6AD13CBD37457A4180133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8c:36:55:f0:14:25:67:de:81:bd:2e:e6:06:
e2:97:50:fb:8d:73:9e:b5:00:0f:b8:c4:b8:ca:c1:
94:be:24:cd:55:b5:0e:ea:4b:4c:f1:d9:ab:95:f2:
6c:8a:8d:21:70:a8:fc:86:eb:7f:da:67:62:e6:38:
2b:28:60:a9:61:d8:ea:98:a8:bd:c2:9c:c4:58:6b:
b8:99:b9:27:ad:23:6d:f0:e4:99:fe:d7:2b:29:ca:
98:fe:ca:06:13:6e:ae:31:ed:d2:36:8d:32:40:f2:
ce:0c:13:68:3b:d4:9d:99:0e:69:55:9b:ce:96:16:
26:ed:d8:49:5c:c1:cb:a6:27:e9:97:2f:79:54:69:
35:a1:2b:e5:66:c0:3a:ba:62:67:4e:39:3d:2e:1b:
a8:af:fc:3c:6e:57:b4:d1:96:e8:fd:a8:4c:72:56:
2c:eb:1f:21:30:40:b1:08:9f:10:8f:3c:d3:fd:f6:
e2:de:2d:f5:4c:5d:da:5f:f3:7f:7d:2c:9a:51:b3:
c6:85:6d:ed:68:6c:fe:a0:ea:86:06:b5:0d:96:50:
32:1a:c3:ed:4d:f2:87:12:97:25:69:ef:1d:6b:59:
d3:8b:8c:c8:9a:66:c3:98:84:8c:57:f5:6e:f2:44:
4e:0f:de:99:e1:5d:ce:ea:f7:e8:a3:74:9c:0f:63:
aa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:37:FD:8A:65:E9:57:5A:2D:B6:AD:13:CB:D3:74:57:A4:18:01:33
X509v3 Authority Key Identifier:
keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3135362e302f32322d3330203d3e203238313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.12.156.0/22
Signature Algorithm: sha256WithRSAEncryption
82:d3:14:df:14:58:9c:31:d7:44:03:17:31:66:7c:b4:6b:8b:
6c:7e:e1:1d:11:ce:5e:a3:28:fc:4a:51:27:29:f8:87:6e:2b:
8a:0e:12:e3:6a:4d:fc:74:2f:3c:30:70:f3:91:60:c1:04:17:
52:8c:a5:eb:60:1d:84:17:ae:5a:f3:9b:ee:d0:46:8f:b7:21:
82:b0:8e:6b:d7:4f:bf:5d:4d:98:7c:b9:db:7e:0a:01:b7:18:
d4:04:ba:bf:08:a4:81:84:cf:42:8a:d2:f9:9b:ac:ad:fb:37:
52:c2:49:11:32:64:2b:d3:84:76:c8:b3:7f:39:32:88:dd:5d:
80:a5:71:74:0a:a2:27:f9:23:f9:ae:2c:38:30:71:53:fe:cb:
b0:b8:6b:1d:9a:60:7e:39:9f:ad:94:0e:4f:4a:8a:1d:f2:ce:
fe:b0:15:61:f0:87:74:4b:c9:16:e9:6d:ab:aa:56:82:f6:30:
5c:20:a8:96:2e:82:7f:66:fe:88:bb:fb:78:15:f9:82:dc:ed:
16:29:a8:13:f0:d1:7a:b3:f2:95:62:bd:3d:4e:a8:6f:0b:d4:
e8:60:3a:df:f0:2c:19:06:9a:a3:c0:f6:04:80:fc:0a:28:54:
23:d2:f1:51:2d:69:1d:d9:b3:29:2e:7f:16:52:a2:34:b7:e7:
ab:e2:d9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:17:34 2025 by rpki-client