Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e382e3230382e302f32312d3234203d3e203238363637.roa
File: 3137372e382e3230382e302f32312d3234203d3e203238363637.roa (raw, json)
Hash identifier: AtqzVNWVQUZnxrZriMWAP+7tVfaH+drmMu8ADFXfhSA=
Subject key identifier: 38:22:77:1A:EA:A1:7C:0D:33:F1:F2:FF:12:BF:0F:F6:52:C8:0B:DC
Certificate issuer: /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial: 124C5B83CB3445D481D55AE6A57907D19DE9A1A7
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e382e3230382e302f32312d3234203d3e203238363637.roa
Signing time: Fri 03 May 2024 20:09:17 +0000
ROA not before: Fri 03 May 2024 20:04:17 +0000
ROA not after: Fri 02 May 2025 20:09:17 +0000
asID: 28667
IP address blocks: 177.8.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4c:5b:83:cb:34:45:d4:81:d5:5a:e6:a5:79:07:d1:9d:e9:a1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Validity
Not Before: May 3 20:04:17 2024 GMT
Not After : May 2 20:09:17 2025 GMT
Subject: CN=3822771AEAA17C0D33F1F2FF12BF0FF652C80BDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:29:4a:16:76:00:47:34:b8:b5:d9:e2:c6:
f6:af:f1:75:fa:1a:c3:8e:2f:3b:c3:f5:e4:91:c7:
1e:a3:52:21:73:38:61:4e:89:67:29:8a:f2:e0:86:
a5:d3:cd:09:d8:4a:52:6c:7f:ca:0e:61:85:7a:63:
12:45:ae:28:04:43:21:c8:08:0d:c1:4a:af:3b:bd:
4a:06:58:75:8e:22:8b:ae:cc:ab:e6:86:3c:9f:f1:
1c:f4:6f:13:9b:52:04:dc:57:35:11:d6:66:82:bd:
22:4f:df:bc:14:fd:c2:2c:e4:23:c8:1b:6e:03:92:
1f:c4:e1:20:6b:e9:f3:f6:fc:c6:74:19:c5:6d:89:
ae:ae:de:89:8e:ef:4c:e5:d0:d0:ad:50:4c:6f:28:
31:98:2e:a3:a7:0c:07:6a:68:87:6a:e5:9b:ef:9c:
71:1e:85:5c:9f:63:c2:a3:d4:e5:b1:de:f9:d5:2c:
46:e1:59:a7:a1:ec:b9:27:48:0e:d5:86:58:a9:33:
67:c6:2a:a8:d5:7e:d4:a7:e9:c8:e6:ac:1b:06:67:
b1:ff:c1:d8:65:f4:63:06:e6:6e:68:55:dd:6f:90:
e0:33:f6:ad:2a:bf:59:89:47:dc:b6:3a:f5:3e:82:
7a:60:5d:ce:0e:b8:0a:75:98:22:b3:f0:6c:12:ee:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:77:1A:EA:A1:7C:0D:33:F1:F2:FF:12:BF:0F:F6:52:C8:0B:DC
X509v3 Authority Key Identifier:
keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e382e3230382e302f32312d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.208.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:1a:f0:be:ed:95:ea:42:bf:08:60:cc:c0:1e:e1:5d:bf:a8:
45:ab:30:e8:8f:02:a4:29:a5:1f:b9:23:1e:61:c9:c8:8e:9d:
e6:d3:2f:ec:de:59:e6:21:83:18:88:1a:f8:f3:ac:b1:b8:90:
0f:6c:97:c2:7c:23:d5:4e:6c:80:29:fe:94:a3:93:da:62:35:
28:5a:99:aa:c3:0f:ca:86:7b:43:a6:0e:85:87:33:5c:02:18:
7f:a5:ed:55:35:d5:f3:28:f5:c0:c3:b9:28:05:fd:05:3f:6a:
3c:ba:0f:09:17:09:7d:b6:59:50:d2:b3:50:56:0b:51:f7:b7:
b0:42:7e:8e:77:29:9e:9d:8b:a2:3c:af:c3:3b:46:46:3e:3f:
1d:6b:90:24:8c:44:d5:2f:33:23:59:50:ac:f5:6f:c3:ae:18:
4e:db:6c:ea:93:25:62:e9:65:5c:1e:b4:28:53:07:a4:77:81:
7c:30:e0:3d:bc:d2:74:a8:fa:1b:eb:39:23:4b:f6:90:8f:16:
54:c0:3a:0a:84:a4:70:1a:20:d5:da:98:25:d6:39:1b:84:24:
d3:d7:df:a5:76:61:08:95:aa:a9:c4:dd:48:7e:91:1c:9c:cd:
69:a4:c9:79:1d:7a:50:5d:cc:2f:dc:aa:5c:ce:37:52:29:92:
40:e8:da:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:47 2025 by rpki-client