Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32312d3234203d3e20323632343630.roa
File: 3137372e35332e37322e302f32312d3234203d3e20323632343630.roa (raw, json)
Hash identifier: zE0JAayqooOrnDmi1mA+Ara4jZS6bzP9L4RoSo/R79A=
Subject key identifier: 3A:B5:FA:83:88:06:A0:66:49:DA:D6:B7:93:6A:15:44:EB:BE:6C:58
Certificate issuer: /CN=324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E
Certificate serial: 1AC73A0ECB358719CC1ED8B9EE9BCE38C65A1B1C
Authority key identifier: 32:4A:8D:C3:B7:8A:5D:18:1C:0D:AC:3F:C7:D5:A5:F1:48:E0:23:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32312d3234203d3e20323632343630.roa
Signing time: Tue 07 Jan 2025 20:04:06 +0000
ROA not before: Tue 07 Jan 2025 19:59:06 +0000
ROA not after: Tue 06 Jan 2026 20:04:06 +0000
asID: 262460
IP address blocks: 177.53.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c7:3a:0e:cb:35:87:19:cc:1e:d8:b9:ee:9b:ce:38:c6:5a:1b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E
Validity
Not Before: Jan 7 19:59:06 2025 GMT
Not After : Jan 6 20:04:06 2026 GMT
Subject: CN=3AB5FA838806A06649DAD6B7936A1544EBBE6C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:70:b3:08:f4:d5:95:1e:c0:5d:28:4b:6d:
80:fe:98:93:d3:96:8d:81:09:55:d5:d4:b1:b3:db:
77:c9:b3:77:ce:02:6f:2f:3d:a3:35:c5:a8:f4:0a:
88:5f:6e:66:ee:f7:ed:a2:7e:ef:bf:ad:67:c8:b5:
16:1c:3c:8a:19:ef:39:5f:04:a3:19:d7:b0:d1:20:
a8:f2:7b:b7:d1:68:16:9e:99:14:35:cc:42:77:54:
5a:e7:6c:ae:9a:07:ac:03:df:02:7a:40:19:df:44:
3b:67:bb:1e:1a:a9:3e:69:f3:a5:09:5c:22:df:13:
ee:ec:91:91:48:9e:41:b3:1e:24:64:4a:1d:8a:b9:
3e:bf:6c:fe:91:69:af:da:97:3c:34:5d:ad:fe:93:
88:8b:22:ea:27:47:25:3e:95:22:6b:4e:21:7e:93:
3f:4d:a8:3c:ea:54:2e:91:76:df:b0:4f:47:e0:ed:
af:4b:18:d1:08:61:d9:d2:ab:b6:b4:21:0a:83:58:
00:01:3b:ef:a2:33:4e:d9:f2:31:1c:d4:b7:fd:a0:
cf:9b:e1:2e:7b:da:40:01:70:35:8a:45:63:b9:bf:
27:cb:f7:a7:bf:50:25:e3:97:79:71:a4:e3:d9:e0:
cf:4c:79:30:f3:6b:a0:9e:ed:41:a2:9e:01:c9:4c:
96:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B5:FA:83:88:06:A0:66:49:DA:D6:B7:93:6A:15:44:EB:BE:6C:58
X509v3 Authority Key Identifier:
keyid:32:4A:8D:C3:B7:8A:5D:18:1C:0D:AC:3F:C7:D5:A5:F1:48:E0:23:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32312d3234203d3e20323632343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.53.72.0/21
Signature Algorithm: sha256WithRSAEncryption
64:42:2c:dc:01:cf:b9:d8:f7:56:03:31:d5:a8:6c:7f:12:88:
1c:be:7b:35:22:1c:6e:bf:72:0a:1b:c0:1a:9a:1e:b1:4e:98:
22:b1:cd:6b:0e:35:56:93:93:9c:fd:64:de:f0:af:a1:38:1a:
a5:c7:85:dc:3b:47:22:b7:e4:17:12:3c:cf:ac:42:44:4f:5c:
b7:70:e0:55:5d:71:97:00:0a:07:f9:db:0c:98:50:6a:e2:15:
09:f2:51:f4:a3:49:42:c3:ef:39:61:96:ce:e8:99:f8:3b:c4:
94:58:09:8a:bc:1f:48:28:68:7a:59:6e:7a:e8:7e:d6:27:e9:
6e:64:89:e6:d1:4e:d7:d4:19:7f:7b:14:7d:21:65:5e:c1:43:
61:ff:3f:72:55:1a:dc:f3:d2:b0:ab:1b:82:c2:7d:2a:ec:a3:
bb:11:16:59:5e:d9:87:cb:98:35:87:c2:52:dd:c4:41:10:8b:
61:78:e4:c6:66:e8:13:4f:68:19:8a:19:e9:cb:ae:67:b2:d2:
a7:ef:33:e0:52:a2:92:af:f2:0c:56:3c:78:1e:ac:f3:39:96:
3d:d5:6b:e0:37:0d:13:57:3f:9d:42:f9:3a:1a:6d:ea:a0:a6:
90:9b:23:e4:33:fa:70:94:b4:38:bb:05:41:fa:6b:a4:2a:f2:
9f:8b:89:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:34:23 2025 by rpki-client