Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
File: 3138362e3231312e39362e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier: qEN2CkGFGNdNGEfEaxlq1AAYSh7fWMekvNLX0KXEHT4=
Subject key identifier: 43:EA:D7:05:8A:B6:09:2C:F1:22:BF:9C:C0:E6:D5:20:CD:C5:74:6A
Certificate issuer: /CN=174E7897062398E9506F0862FA46597DF937825D
Certificate serial: 7E687BD0C9D0028D121A611F48D0459574264EE0
Authority key identifier: 17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
Signing time: Mon 10 Feb 2025 19:10:08 +0000
ROA not before: Mon 10 Feb 2025 19:05:08 +0000
ROA not after: Mon 09 Feb 2026 19:10:08 +0000
asID: 53062
IP address blocks: 186.211.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:68:7b:d0:c9:d0:02:8d:12:1a:61:1f:48:d0:45:95:74:26:4e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174E7897062398E9506F0862FA46597DF937825D
Validity
Not Before: Feb 10 19:05:08 2025 GMT
Not After : Feb 9 19:10:08 2026 GMT
Subject: CN=43EAD7058AB6092CF122BF9CC0E6D520CDC5746A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:66:d4:45:ed:02:fd:ea:b7:08:10:4a:96:
d8:31:ed:e4:8c:8d:b7:ca:7a:0f:5c:0c:5b:b5:10:
66:e3:38:a5:cc:e1:00:a9:b3:17:f4:f0:b0:f1:f4:
9d:79:9c:6a:f4:28:e3:ea:61:d8:a6:de:16:30:3b:
fd:5e:eb:fe:a4:02:4c:5b:80:90:41:f7:6c:9b:7f:
d7:94:65:7b:6c:95:4d:12:22:77:1c:78:cc:23:14:
80:32:5b:f0:c2:d7:60:87:67:d5:d8:1b:77:c7:ef:
a2:1b:c3:fc:fd:80:69:08:eb:e5:2d:77:8d:ad:08:
91:22:07:be:c5:dc:aa:05:e4:ae:c4:19:2f:b0:d8:
a8:88:9a:bb:f3:d8:24:d2:6d:4f:66:8c:e9:63:04:
1e:5f:54:30:53:bb:72:5d:27:7c:d7:7f:3a:72:7f:
5e:e4:10:a2:28:12:cb:bc:be:28:63:90:c5:ad:70:
e5:82:fb:a1:93:11:2e:db:1b:42:a6:00:ee:7d:c7:
14:e8:39:11:fa:fd:15:7b:15:a4:1b:97:0f:02:68:
38:e2:24:ff:fd:ee:d5:6d:5e:cc:1d:09:35:c3:00:
ad:b7:13:cf:38:eb:9a:3b:9d:31:c1:f4:06:15:71:
c9:78:ed:b2:3e:f9:de:16:ea:2e:ef:ad:ef:d7:0b:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EA:D7:05:8A:B6:09:2C:F1:22:BF:9C:C0:E6:D5:20:CD:C5:74:6A
X509v3 Authority Key Identifier:
keyid:17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/174E7897062398E9506F0862FA46597DF937825D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.211.96.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:bf:70:6a:b8:3f:30:a5:ab:22:3d:eb:fd:91:f3:bc:99:44:
c8:03:13:2b:93:7c:9a:af:0f:9f:04:94:dc:d3:22:b7:4c:6e:
8d:a2:6c:a9:1e:29:ce:76:d8:2a:ca:30:0c:17:fa:0b:07:37:
e5:5c:97:7f:58:25:03:b0:f9:2a:af:d1:d4:ca:3a:92:41:58:
eb:90:f9:2a:18:be:16:34:c7:80:78:14:3e:02:8d:00:42:46:
98:db:f2:f3:19:69:3f:32:b5:ca:39:df:d3:f3:1f:b6:f7:36:
5b:5e:f2:23:42:8f:bc:db:06:0d:4c:6a:84:9c:65:c9:40:7d:
25:55:1d:68:1d:cf:1f:c4:c0:b7:3e:c5:62:a2:6e:6b:25:6b:
2e:2d:00:87:a2:19:b8:7e:c9:c6:93:ef:5d:36:fa:20:38:35:
bc:83:7e:78:9e:8c:53:02:dd:bb:d3:1c:32:75:73:4e:34:25:
29:7a:2e:c7:9c:8f:44:e8:01:10:26:54:e4:b9:16:4d:53:f1:
59:df:67:a4:a6:9b:6a:9a:72:6b:7e:2e:b4:49:1f:0b:10:23:
9e:00:7f:8b:f9:8a:9d:d1:8c:eb:b1:c6:7a:4e:a4:a3:6f:25:
55:d1:5f:1f:51:68:95:e8:3b:f6:ea:22:03:8c:4d:6f:cf:15:
51:b4:3a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:22:35 2025 by rpki-client