Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3138372e31372e3230382e302f32302d3234203d3e20323632363434.roa
File: 3138372e31372e3230382e302f32302d3234203d3e20323632363434.roa (raw, json)
Hash identifier: u5G+qMAisEC7adETMATM8kr8nlnY7hRaxdGGK+LYhTc=
Subject key identifier: BC:AB:F0:9C:C8:02:AC:6E:89:C4:36:55:52:32:3C:E4:D3:CD:FB:42
Certificate issuer: /CN=22AD0711A25E9E0FB275ABC71A280702BD666A35
Certificate serial: 4E0532F688D2A575CF6EABE17802C421129B51D7
Authority key identifier: 22:AD:07:11:A2:5E:9E:0F:B2:75:AB:C7:1A:28:07:02:BD:66:6A:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AD0711A25E9E0FB275ABC71A280702BD666A35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3138372e31372e3230382e302f32302d3234203d3e20323632363434.roa
Signing time: Wed 22 Jan 2025 13:42:18 +0000
ROA not before: Wed 22 Jan 2025 13:37:18 +0000
ROA not after: Wed 21 Jan 2026 13:42:18 +0000
asID: 262644
IP address blocks: 187.17.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:05:32:f6:88:d2:a5:75:cf:6e:ab:e1:78:02:c4:21:12:9b:51:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22AD0711A25E9E0FB275ABC71A280702BD666A35
Validity
Not Before: Jan 22 13:37:18 2025 GMT
Not After : Jan 21 13:42:18 2026 GMT
Subject: CN=BCABF09CC802AC6E89C4365552323CE4D3CDFB42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:0e:9a:50:53:53:2e:13:f4:5c:7e:8a:f1:
b6:d4:30:2f:30:87:30:4b:dd:d7:13:be:ed:0a:27:
9e:de:2f:c1:bb:cd:02:cb:09:88:37:77:eb:68:70:
15:68:ca:70:0c:79:ac:50:49:23:d1:3e:11:f9:2c:
36:06:b6:8a:c4:72:d3:af:ea:2f:f7:d5:26:e4:fc:
fa:d2:a9:7f:d7:91:35:c5:bd:76:f8:37:43:0a:d0:
8b:25:79:26:65:50:bb:b2:9a:1a:d7:06:3d:ca:cc:
00:af:05:69:70:fc:b3:86:19:2a:62:41:c1:bf:b8:
78:4e:63:8b:4a:e7:e3:49:bd:24:a2:e6:d1:5e:a3:
de:e1:2a:30:1a:6c:ec:a3:b5:10:ec:7b:3f:ee:6f:
f6:ac:44:7e:1d:86:e3:dd:a4:1c:9e:fa:b8:09:d0:
fd:97:12:80:72:53:ed:a3:e0:46:6d:69:02:50:1c:
53:aa:fc:17:42:e7:39:36:27:d3:c3:c5:b1:03:e0:
9a:5f:03:a4:9a:40:2a:eb:a3:35:63:a3:1f:f1:63:
92:5d:45:b6:a4:8d:b0:9c:2f:24:fd:24:da:b6:d9:
7e:db:31:f1:10:2d:56:23:12:ee:b1:c1:68:34:ba:
b6:06:9f:69:ef:3d:cb:9e:c7:6b:4d:80:5e:a6:9d:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:F0:9C:C8:02:AC:6E:89:C4:36:55:52:32:3C:E4:D3:CD:FB:42
X509v3 Authority Key Identifier:
keyid:22:AD:07:11:A2:5E:9E:0F:B2:75:AB:C7:1A:28:07:02:BD:66:6A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/22AD0711A25E9E0FB275ABC71A280702BD666A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AD0711A25E9E0FB275ABC71A280702BD666A35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3138372e31372e3230382e302f32302d3234203d3e20323632363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.17.208.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:cf:df:67:21:2d:db:5c:9a:3c:48:8e:ef:ce:a8:82:33:a0:
7d:85:62:f6:53:6e:31:c0:b0:70:ec:b8:f9:f3:54:12:41:54:
f0:7e:dd:16:5f:b8:1c:5e:1f:0e:a1:dd:c7:d5:d3:6d:35:05:
94:98:11:91:39:62:d4:24:25:5f:26:94:95:aa:7c:c9:e5:4f:
10:fc:3b:6c:14:d8:1e:45:70:95:23:eb:55:26:69:e3:6c:c7:
36:34:e9:83:ae:65:45:e1:9f:11:a3:c3:72:d9:42:0e:83:58:
be:fc:bd:18:2c:a0:ea:e2:64:ff:69:84:ec:c0:0f:e0:77:e8:
a1:a1:68:46:55:64:7e:17:34:fa:b9:79:18:29:8f:75:7d:66:
62:fb:af:e8:25:d3:91:80:35:be:37:6c:9a:5e:2e:5b:04:c6:
4c:ca:ac:00:69:a0:99:6e:74:7f:37:5e:8f:b6:c2:c5:cd:ad:
74:a6:3b:81:13:44:a9:3d:70:8f:2e:92:ec:49:a6:b8:e4:4b:
a6:55:4a:54:d1:89:b2:02:fd:02:d7:2a:79:2f:e0:53:58:24:
d0:c6:86:26:95:55:66:67:ea:4c:d5:b4:79:c9:96:81:f0:a9:
cc:8f:79:8e:b8:89:d8:3e:38:cc:3b:e4:16:2b:96:e3:0d:50:
e8:7e:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:40:41 2025 by rpki-client