Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3137372e31302e32302e302f32332d3233203d3e203532393136.roa
File: 3137372e31302e32302e302f32332d3233203d3e203532393136.roa (raw, json)
Hash identifier: Kh9iZY79tOa2U2qgCEg9eBKIciHiBR0y0U13aCjUmLw=
Subject key identifier: AE:74:FF:C0:52:E8:14:13:72:B2:74:B1:26:A3:F7:BE:D8:F5:07:A4
Certificate issuer: /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial: 354A6FDB733201F72F06EE085292D41B4D5354D1
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3137372e31302e32302e302f32332d3233203d3e203532393136.roa
Signing time: Tue 28 Nov 2023 12:39:53 +0000
ROA not before: Tue 28 Nov 2023 12:34:53 +0000
ROA not after: Tue 26 Nov 2024 12:39:53 +0000
asID: 52916
IP address blocks: 177.10.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4a:6f:db:73:32:01:f7:2f:06:ee:08:52:92:d4:1b:4d:53:54:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Validity
Not Before: Nov 28 12:34:53 2023 GMT
Not After : Nov 26 12:39:53 2024 GMT
Subject: CN=AE74FFC052E8141372B274B126A3F7BED8F507A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:18:b3:e6:70:dd:0e:ce:6e:4e:0e:9f:a7:
3c:85:0f:16:27:32:b3:27:fc:04:3e:70:77:54:62:
b2:34:ae:3d:d5:ca:67:30:b2:17:c2:99:54:49:ae:
bc:20:d6:bc:3f:5a:8a:0a:50:89:bd:30:92:3d:aa:
e7:7a:73:1f:8d:ae:f7:8a:83:d6:0f:f7:c2:98:38:
af:53:5f:ec:07:4a:da:0f:ec:20:d5:40:56:08:7a:
6c:6e:70:05:cb:5e:92:f3:a7:c2:d6:24:71:dd:a6:
8e:f5:aa:b9:03:a2:d9:73:22:e8:cb:3e:ea:5c:a1:
99:d0:24:9d:d0:c5:74:28:b8:ef:2a:c5:a0:4d:db:
6e:4a:ab:8d:78:6d:1d:49:aa:17:a3:34:0e:e8:e3:
3c:fc:08:b2:5e:67:bd:b6:83:0e:cf:57:40:06:74:
08:3b:0d:7e:a2:fe:2c:c6:20:64:db:02:f3:ef:70:
b2:53:3c:d7:b6:85:09:b5:e8:42:b0:65:23:ac:53:
c9:7b:c6:1b:be:e2:33:f2:9f:51:c4:ff:28:cf:58:
ab:10:3e:9b:71:98:23:bc:ae:49:02:58:53:16:2d:
aa:5d:71:70:45:69:7b:91:63:b3:50:50:f7:94:3a:
53:bf:28:b9:9f:33:a4:d1:d1:75:20:fd:70:6a:89:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:74:FF:C0:52:E8:14:13:72:B2:74:B1:26:A3:F7:BE:D8:F5:07:A4
X509v3 Authority Key Identifier:
keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3137372e31302e32302e302f32332d3233203d3e203532393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.10.20.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:0f:51:fa:17:84:dc:d2:ee:02:6b:2c:39:6c:40:74:25:84:
03:86:92:94:0a:d7:b8:32:55:d0:7c:b5:5e:fe:1e:b2:0a:7e:
36:72:28:01:32:0d:e1:e6:52:46:fa:18:4b:af:fb:ab:b6:86:
bc:0e:67:9d:bc:24:29:b7:58:fe:5a:d3:6c:2d:31:11:4a:6d:
4e:fd:53:c1:7a:ba:97:1e:2b:0d:f8:bc:5d:4b:04:3d:04:22:
42:d4:03:a1:32:23:82:cf:06:5a:af:5d:c2:3b:84:13:6c:b6:
ad:bd:6c:c4:c0:fb:9f:c8:88:68:2b:cd:ef:5a:cd:83:5a:e7:
8a:d2:14:24:d7:7d:37:7a:62:9d:8b:da:e7:c8:cc:b6:dd:ba:
21:3a:79:76:e9:ae:80:fc:0e:31:b5:5f:c2:10:09:42:48:95:
20:61:c9:12:7a:b0:35:bd:79:c3:d0:43:6a:aa:5a:2e:2a:61:
e9:2f:d3:d7:41:96:68:58:a6:e2:b7:df:a8:1f:56:16:0d:52:
fb:21:6d:dd:74:66:61:30:79:61:b0:7a:d8:bb:ee:01:85:b5:
b1:01:f0:a4:01:c7:66:73:26:15:5a:15:58:39:19:9d:a9:ce:
dc:d4:d9:0b:77:64:a9:7e:34:d5:a8:fa:1b:b7:66:33:3b:09:
09:a4:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:15:01 2025 by rpki-client