Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa
File: 3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa (raw, json)
Hash identifier: IvMpdw39E7yHBfdNRqRjqhm3M4HxFQsnyvqHbu0ZRt4=
Subject key identifier: B6:85:E4:78:73:34:7C:C0:95:DD:8C:BE:67:F3:E4:B0:C5:E4:C1:EE
Certificate issuer: /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial: 654006AA2370D37EC6094940BE259C08CC83FA2E
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 262595
IP address blocks: 179.106.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:40:06:aa:23:70:d3:7e:c6:09:49:40:be:25:9c:08:cc:83:fa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=B685E47873347CC095DD8CBE67F3E4B0C5E4C1EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:fc:51:3f:df:1f:c0:03:b3:d4:39:e7:b8:
cd:77:4e:9b:b9:f8:4c:71:3e:5e:57:e6:5f:05:19:
a8:2e:5f:0a:44:9d:9d:b8:b5:0d:3e:c5:fe:4a:77:
d1:28:f9:92:c5:07:9a:ed:41:c3:f9:87:fb:54:e7:
9e:b3:f7:f7:b3:96:43:cb:2a:37:b7:6c:ce:59:2d:
a5:92:6b:16:93:0c:e1:e1:84:be:10:1b:2f:57:50:
1b:ab:3b:3f:a6:c8:7b:81:42:13:5b:8f:ae:49:51:
d2:0a:c5:0c:83:aa:13:72:cc:72:c5:21:57:48:0d:
07:c2:0d:73:e1:9c:90:47:d5:2e:0e:6d:da:e4:46:
ec:e3:af:7c:e0:b3:38:b9:9b:56:a5:72:2f:65:8e:
b8:e3:29:cf:04:f3:3f:66:30:41:74:5a:e8:70:58:
47:b0:66:13:87:91:f3:83:39:83:0a:c0:44:a8:e2:
23:ec:21:15:07:45:b8:3a:df:f9:0a:cf:a9:78:52:
29:25:2c:bf:aa:bd:ef:d6:69:41:f7:1f:e6:95:ea:
ec:a9:d3:7a:33:87:30:68:8f:2b:f9:2c:38:8b:42:
80:af:40:de:ae:c7:cc:6c:e9:ef:51:d2:05:91:9e:
c9:73:4c:ce:65:c8:81:88:96:83:be:5a:6e:8f:94:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:85:E4:78:73:34:7C:C0:95:DD:8C:BE:67:F3:E4:B0:C5:E4:C1:EE
X509v3 Authority Key Identifier:
keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.106.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:33:cc:72:4c:20:ba:01:a0:8f:8d:54:75:e1:af:8d:45:9b:
6f:cf:89:8f:2c:5c:84:8a:bd:22:13:17:ba:78:c2:1c:a7:ea:
c1:35:f6:8b:3b:06:ea:75:62:ff:b4:2a:0c:49:64:dc:29:dd:
7e:0a:98:8d:56:7d:58:d2:41:1c:77:f8:d5:92:22:7b:dc:0f:
52:a1:64:97:95:f2:79:73:3b:a5:66:c3:a2:4e:7f:fa:71:aa:
f9:46:8e:21:ba:1c:4c:ce:10:81:3e:1f:59:0f:9a:90:4f:60:
33:a9:39:de:f7:fd:c3:4f:ee:38:0b:50:be:dd:d0:f1:7e:49:
ce:11:3b:aa:8c:47:66:13:00:75:43:20:34:21:5f:42:3b:37:
1c:9a:c0:ff:dd:35:76:ec:fb:7d:e1:3b:77:89:5b:55:08:4c:
79:21:32:d4:d3:51:79:f1:90:aa:e0:ee:40:7f:86:46:4c:f9:
d2:39:ec:2b:74:e4:d5:62:4e:d3:9c:6c:eb:a7:1c:62:dc:da:
d6:86:64:d5:82:2c:1a:bc:fc:ed:90:30:6b:34:68:25:23:4c:
13:6a:a4:88:74:5e:dc:d1:b3:b3:22:28:0e:46:1e:79:30:bd:
6b:be:ad:76:f8:c0:3b:d5:3c:e1:bf:d5:5c:a8:54:5f:06:3a:
8e:2c:2c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:35:13 2025 by rpki-client