Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa
File: 3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa (raw, json)
Hash identifier: 6EotP9RyGs6g/BR63lIOHe3Ct4kjTAiprzrk8K5hlmA=
Subject key identifier: 3A:A2:DA:6A:5D:9A:EC:39:1A:87:AD:B6:61:95:3F:93:F4:12:4B:76
Certificate issuer: /CN=A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA
Certificate serial: 1D2E1C3054B278CBDD1171FA0F4E75D4D264E944
Authority key identifier: A0:C8:F9:AB:C5:5A:6B:F1:28:36:EC:23:29:88:FD:9A:1A:C6:AE:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa
Signing time: Mon 28 Jul 2025 14:49:56 +0000
ROA not before: Mon 28 Jul 2025 14:44:56 +0000
ROA not after: Mon 27 Jul 2026 14:49:56 +0000
asID: 270541
IP address blocks: 177.124.152.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2e:1c:30:54:b2:78:cb:dd:11:71:fa:0f:4e:75:d4:d2:64:e9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA
Validity
Not Before: Jul 28 14:44:56 2025 GMT
Not After : Jul 27 14:49:56 2026 GMT
Subject: CN=3AA2DA6A5D9AEC391A87ADB661953F93F4124B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:ca:96:b3:9c:26:dc:4d:c1:d3:ea:68:61:
ae:f5:f9:7b:35:fc:46:09:df:34:db:d1:35:bd:44:
70:17:42:9c:d4:48:27:25:48:01:5a:51:69:bd:95:
9f:3f:55:60:8e:03:f7:f9:76:bf:98:bc:6c:f4:8a:
f7:6e:91:99:6c:b5:79:8b:7e:75:c6:19:90:72:b4:
71:0b:de:f9:df:d5:38:4b:4e:6f:26:24:88:6c:9e:
ed:3b:06:95:44:9a:80:9e:98:5f:43:06:2b:e3:a4:
02:d8:ac:61:4e:12:e3:0a:5e:5f:f4:6f:11:18:45:
12:6f:d4:16:08:ab:2a:9e:26:b1:e3:f5:c2:0e:02:
fc:86:70:26:5c:63:b6:d1:77:dc:c2:35:a6:93:e9:
34:e0:12:95:de:33:4d:e2:1a:82:1a:c0:65:25:62:
5e:9b:24:7d:44:4e:06:71:f7:27:84:b8:99:e2:3a:
6a:c5:6e:ae:e1:21:ad:e2:bb:ef:90:54:21:23:1f:
93:34:c1:e7:d3:26:71:9a:20:96:8a:db:0a:3d:b0:
e0:b8:be:f8:94:e9:e4:59:9c:86:cb:c1:b6:7d:c5:
a2:dd:e4:0d:32:f4:3e:91:88:f6:2d:85:60:cc:d2:
66:47:8a:0a:07:e9:71:9d:0c:46:fa:d6:76:ac:aa:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A2:DA:6A:5D:9A:EC:39:1A:87:AD:B6:61:95:3F:93:F4:12:4B:76
X509v3 Authority Key Identifier:
keyid:A0:C8:F9:AB:C5:5A:6B:F1:28:36:EC:23:29:88:FD:9A:1A:C6:AE:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.124.152.0/22
Signature Algorithm: sha256WithRSAEncryption
36:f8:96:7f:a0:4f:5c:e4:6a:de:0a:5a:66:d0:b8:9f:5d:83:
af:08:7d:20:b8:23:43:a4:ca:d7:9e:41:8c:06:6e:00:dc:d7:
c8:30:dd:5c:58:6b:ff:92:7d:0b:93:2a:c6:12:b9:39:0a:e1:
58:c6:5b:54:ad:2c:cb:2b:3a:d6:76:b1:b7:d2:c7:4f:38:45:
a2:da:ee:f1:f5:88:0c:a7:fb:ed:ea:6e:df:3a:fc:45:bc:7d:
12:da:c8:d4:9e:72:9b:02:f9:53:cc:80:ab:d7:1c:68:d6:2d:
61:91:06:7f:85:55:72:ea:1a:c4:f8:22:91:d4:13:93:3d:c8:
56:54:11:7a:83:7d:24:7b:4e:e2:ca:82:5f:7f:e7:81:74:c7:
74:ab:f0:5c:52:db:0d:0b:50:48:ce:ab:ef:7a:35:95:2a:7d:
bf:39:0d:f5:bb:8a:d9:73:80:3f:b0:bf:8b:98:4f:27:f9:3a:
c2:c5:0a:a8:33:3e:0c:87:0f:13:b3:70:13:8d:3c:f1:a6:a7:
1e:2f:4d:c5:d1:73:2b:59:bb:96:29:7c:c0:ca:ea:c1:37:82:
c6:ba:23:b1:68:bd:91:98:b4:72:42:67:42:97:cb:1b:a3:70:
77:0a:fd:62:b8:d0:64:97:a0:bd:9c:f8:95:47:82:c8:6e:38:
51:dc:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:26:29 2025 by rpki-client