Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa
File: 3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa (raw, json)
Hash identifier: zrMfllHbOzXHIqcpAGduR1OeXICvsRsaqToy/FF3Rtc=
Subject key identifier: 44:56:3E:D3:39:01:22:76:DD:1D:DB:3A:71:4E:4C:FC:1E:D6:50:B1
Certificate issuer: /CN=52519D71351C02D14D4BE69A71D2C09F76A4F333
Certificate serial: 6DD34C841B45C1EF10C077CE4D844923996C1390
Authority key identifier: 52:51:9D:71:35:1C:02:D1:4D:4B:E6:9A:71:D2:C0:9F:76:A4:F3:33
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52519D71351C02D14D4BE69A71D2C09F76A4F333.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa
Signing time: Mon 27 Jan 2025 19:21:16 +0000
ROA not before: Mon 27 Jan 2025 19:16:16 +0000
ROA not after: Mon 26 Jan 2026 19:21:16 +0000
asID: 266327
IP address blocks: 170.238.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d3:4c:84:1b:45:c1:ef:10:c0:77:ce:4d:84:49:23:99:6c:13:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52519D71351C02D14D4BE69A71D2C09F76A4F333
Validity
Not Before: Jan 27 19:16:16 2025 GMT
Not After : Jan 26 19:21:16 2026 GMT
Subject: CN=44563ED339012276DD1DDB3A714E4CFC1ED650B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:22:00:36:f0:68:00:d5:ad:ae:ff:54:6a:
73:7f:e3:81:05:d5:fc:87:86:01:36:bc:ce:f9:08:
39:ad:3e:7a:86:a3:45:84:e4:09:4f:2d:55:7a:b3:
de:24:00:10:08:3d:4c:f4:e1:62:5b:cd:61:4d:1c:
b8:a4:99:ed:0a:0e:61:47:cd:7d:ca:70:86:bf:3f:
df:36:8d:e4:18:ad:d6:f1:82:a7:68:f1:48:ba:3a:
9f:b5:f8:f9:54:6a:2b:b7:69:6b:66:56:31:e7:ca:
cf:39:74:47:95:91:50:f1:81:f8:32:c3:23:a6:92:
1b:4e:f8:b3:96:40:61:46:84:0c:82:a7:9a:61:b8:
59:8b:7d:c9:9e:2c:eb:95:b3:90:22:9e:9a:69:0a:
69:ba:fc:ec:e5:74:5f:50:91:9b:4d:44:42:4b:7a:
fe:53:f1:8b:0f:99:21:83:2a:fa:7f:35:57:88:9d:
62:aa:03:47:a4:d1:71:9d:1b:8b:5a:59:e6:19:db:
44:65:5e:86:7b:48:18:3b:48:3e:7a:4f:3f:96:57:
64:a8:9c:e1:d4:88:6c:c2:cf:74:3e:a8:9c:08:9b:
92:57:ed:7a:f1:69:73:c4:2f:8a:57:b9:cc:83:1e:
87:c5:55:80:ac:d6:2a:23:08:5a:f4:e6:ff:f8:f8:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:56:3E:D3:39:01:22:76:DD:1D:DB:3A:71:4E:4C:FC:1E:D6:50:B1
X509v3 Authority Key Identifier:
keyid:52:51:9D:71:35:1C:02:D1:4D:4B:E6:9A:71:D2:C0:9F:76:A4:F3:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/52519D71351C02D14D4BE69A71D2C09F76A4F333.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52519D71351C02D14D4BE69A71D2C09F76A4F333.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.160.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:e9:a5:2e:df:6c:96:22:38:6c:c0:cf:09:36:8e:a7:c6:88:
a1:aa:53:63:a6:5f:97:1b:14:0d:75:7f:4b:0b:9c:cb:c9:9f:
f8:d1:7e:65:18:bf:33:ac:1d:06:e1:a6:73:5b:b6:46:af:c1:
9c:56:79:62:59:9e:f5:6b:82:09:7c:b3:5f:7c:28:10:ed:90:
54:7b:e2:b6:f7:0d:f3:27:8c:4c:92:69:c4:92:fd:50:32:e4:
3b:bb:fa:b1:bf:7a:b8:82:c6:9f:9d:3c:24:93:ae:2a:54:e1:
86:7a:a9:bf:f3:8a:75:d9:dc:fc:b5:3e:65:33:28:be:e4:01:
f5:6a:0b:77:bf:60:e3:4f:06:02:16:59:46:70:19:76:7c:9b:
9f:0e:ac:39:28:94:b3:f3:c6:25:b1:45:e9:55:2b:b5:b6:a0:
a7:02:33:48:0e:bc:f3:40:fc:82:18:7a:42:49:aa:c5:b6:5a:
f8:8c:4f:26:9b:29:a8:d1:63:54:d9:a8:96:27:a4:fb:23:69:
28:49:92:d0:6c:8a:09:c1:37:fe:32:48:6c:cf:b7:d7:55:3f:
84:d2:2b:60:e6:f3:22:6f:df:2d:dc:ff:5a:0d:a0:68:04:f0:
db:ac:9b:28:a3:28:15:45:f3:93:1e:67:11:69:b6:2e:57:7b:
4d:d6:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:38:17 2025 by rpki-client