Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa
File: 3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa (raw, json)
Hash identifier: QaUisAYcGWEGNKZg2OPxL8wXc6aV7RiUXTW6ZfWr47I=
Subject key identifier: EF:16:CD:0A:0C:98:B5:60:FD:87:08:44:AB:9F:61:54:FF:70:64:54
Certificate issuer: /CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
Certificate serial: 64F3D48B41062E7B424E00DE6C4403A58E4AB6C5
Authority key identifier: 27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa
Signing time: Thu 20 Feb 2025 13:41:55 +0000
ROA not before: Thu 20 Feb 2025 13:36:55 +0000
ROA not after: Thu 19 Feb 2026 13:41:55 +0000
asID: 270544
IP address blocks: 187.95.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f3:d4:8b:41:06:2e:7b:42:4e:00:de:6c:44:03:a5:8e:4a:b6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
Validity
Not Before: Feb 20 13:36:55 2025 GMT
Not After : Feb 19 13:41:55 2026 GMT
Subject: CN=EF16CD0A0C98B560FD870844AB9F6154FF706454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:0a:4a:0c:10:e3:f7:ed:39:10:6d:55:73:
32:51:cd:c9:8d:fc:cd:d7:43:cf:21:c7:2e:44:eb:
e5:9d:9c:8b:00:5d:34:f7:a9:6d:79:ec:bc:88:53:
3e:e7:cb:31:6b:64:2e:96:ca:0b:e9:6e:a9:cb:44:
fd:02:a4:5a:29:d5:ed:a3:13:90:09:a3:b8:8e:6c:
86:34:07:6a:78:30:45:ff:01:71:08:00:ad:90:32:
a0:c4:55:a6:f5:3f:30:8c:59:c3:98:7d:04:0b:cc:
6c:9f:61:f3:c5:60:a9:35:eb:a5:54:70:23:f0:8a:
ad:7f:74:63:c3:9d:d6:40:cf:1c:f4:d0:bf:ba:c9:
77:2a:f3:5a:2d:0c:48:d3:de:e9:f6:9a:5b:a2:1f:
e8:52:94:da:05:a4:91:05:b9:4e:37:53:06:0f:45:
59:bd:ac:ab:d4:8a:d8:9a:b5:50:82:c2:ac:28:a3:
a6:23:96:9c:fc:97:c3:d8:38:c2:d1:f7:88:4c:40:
70:ae:cd:1e:4d:6a:93:db:ae:9c:6b:af:03:f3:45:
05:07:d3:ab:aa:31:a3:ab:15:a3:ef:ce:8e:bc:51:
20:a6:59:0f:ff:f8:0d:3d:2e:9d:38:f3:b2:a4:77:
c1:0d:1b:6c:bf:a9:b1:94:c9:f4:b1:12:1c:0f:60:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:16:CD:0A:0C:98:B5:60:FD:87:08:44:AB:9F:61:54:FF:70:64:54
X509v3 Authority Key Identifier:
keyid:27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.95.208.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:85:8a:91:6f:d3:d6:9a:d3:a4:66:08:76:b3:76:25:1d:e4:
7e:30:a7:36:97:f3:87:73:ae:38:02:fe:14:c9:af:10:cc:5c:
c8:3b:90:9c:50:ce:98:0b:6f:2c:aa:04:09:d1:77:d9:46:c9:
e3:25:16:0b:bb:98:78:f3:39:2c:3d:ab:f9:39:4c:25:18:21:
d7:aa:9a:ed:64:12:69:27:55:8d:b8:88:e2:8e:d6:25:2a:31:
61:2a:56:e8:54:1d:ea:eb:86:76:8e:f9:d8:ed:35:03:17:e1:
78:73:87:1d:22:20:34:ca:4e:85:8f:42:b9:8a:e9:62:09:5d:
4f:a1:6e:4f:26:26:3a:89:65:00:93:be:fd:ac:9b:a5:e3:73:
b6:30:fd:b7:27:42:dd:db:42:36:ea:5d:0e:50:6a:c5:93:39:
ac:66:51:db:27:ce:08:4a:cd:8c:91:a3:49:b9:49:8d:c0:03:
83:6a:02:a9:71:7e:d2:16:71:e7:9a:84:aa:4a:df:79:cd:e6:
fd:06:85:ab:00:09:b3:35:5a:0f:f1:66:e0:43:9e:46:b6:5a:
0c:8a:52:6c:df:fb:50:9d:e6:b4:81:ad:ec:b6:89:17:09:ef:
bd:e6:c3:e1:be:07:10:29:55:85:74:26:fd:98:2b:96:c1:9d:
2e:86:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:28:58 2025 by rpki-client