Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3137372e38362e32342e302f32322d3234203d3e203532353636.roa
File: 3137372e38362e32342e302f32322d3234203d3e203532353636.roa (raw, json)
Hash identifier: +FgSgV5OBgLohO4pGsQjsRRvG3aQvusjDzqhhyWcpzE=
Subject key identifier: 3A:8B:10:24:82:55:34:CB:59:C0:BE:FC:76:E6:B0:BA:EB:5E:44:60
Certificate issuer: /CN=3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258
Certificate serial: 3AEB4B5D2F4D5E7B691B490BEE007F13DF1D9488
Authority key identifier: 30:30:AC:9F:D9:E2:F2:BC:6E:0B:31:2F:D7:C5:5E:8E:AA:58:42:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3137372e38362e32342e302f32322d3234203d3e203532353636.roa
Signing time: Tue 26 Nov 2024 18:40:33 +0000
ROA not before: Tue 26 Nov 2024 18:35:33 +0000
ROA not after: Tue 25 Nov 2025 18:40:33 +0000
asID: 52566
IP address blocks: 177.86.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:eb:4b:5d:2f:4d:5e:7b:69:1b:49:0b:ee:00:7f:13:df:1d:94:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258
Validity
Not Before: Nov 26 18:35:33 2024 GMT
Not After : Nov 25 18:40:33 2025 GMT
Subject: CN=3A8B1024825534CB59C0BEFC76E6B0BAEB5E4460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:75:83:03:89:bd:0f:6c:e7:39:fa:f6:9f:
b6:a3:dd:0c:2d:69:3d:18:77:3a:5d:ed:94:e4:25:
34:a5:05:0e:7a:3d:11:20:b2:93:30:be:91:78:1b:
c1:3c:2b:db:4e:e7:bf:3b:dc:15:1f:39:b1:85:a6:
45:f6:cb:ea:31:d8:f7:df:46:4f:61:3f:dd:34:5d:
bd:eb:74:ae:34:84:11:9f:59:9e:fa:f6:ef:33:68:
21:68:43:9d:e4:4b:d4:0d:cd:2c:f8:b6:bd:97:5e:
08:99:17:d1:d4:ff:ec:60:a0:97:50:5c:fd:6f:3a:
92:f8:32:ac:a1:5e:69:16:17:93:8e:63:95:45:b7:
75:b1:19:64:f4:2e:8f:28:36:42:2e:6f:b1:df:58:
6b:27:a5:8c:fe:a0:1d:fc:a1:70:56:db:8e:74:66:
52:a4:32:1c:98:52:e5:28:08:32:11:eb:df:1f:13:
9e:77:06:ed:d7:f2:54:23:c3:13:f7:be:87:f4:6c:
60:14:2b:c8:95:77:d4:31:1c:c3:8e:f9:d5:b8:dd:
7f:c4:24:19:ce:4f:cb:b1:51:1b:cc:db:5c:60:f6:
5a:5d:7f:b9:b9:b8:a8:5e:8b:28:c2:79:e2:aa:2f:
56:39:68:bd:08:8a:e6:2d:6f:4c:a9:08:ff:ca:b5:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8B:10:24:82:55:34:CB:59:C0:BE:FC:76:E6:B0:BA:EB:5E:44:60
X509v3 Authority Key Identifier:
keyid:30:30:AC:9F:D9:E2:F2:BC:6E:0B:31:2F:D7:C5:5E:8E:AA:58:42:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3137372e38362e32342e302f32322d3234203d3e203532353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.86.24.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:69:ac:98:09:91:94:ba:b4:ec:11:8a:fa:d1:22:91:6a:dd:
5e:d5:f7:d6:ec:5a:5b:d3:af:0e:69:b9:e1:1c:a2:23:39:63:
63:6d:27:51:de:67:76:b9:81:d0:60:ac:4f:df:c3:da:6a:be:
af:a2:a5:72:86:1c:a0:a6:40:0f:78:38:bd:8c:06:12:96:6d:
81:76:aa:62:d3:95:a1:bb:2b:7b:2b:85:ef:0d:d8:7a:ec:82:
28:84:a0:3d:a3:aa:65:71:7a:c6:b8:f6:a3:24:a0:ec:4b:ed:
c9:5c:97:69:55:a3:61:1e:ae:39:b6:92:11:ab:ab:1e:c6:b2:
8c:c0:d6:f1:5a:3a:41:2a:87:2c:76:b1:0b:e4:a5:aa:88:d9:
48:8f:7f:a8:57:c8:99:60:d6:02:3a:90:a2:42:60:50:4c:b7:
4a:9e:87:b0:6c:5e:6f:11:26:94:3b:77:10:63:56:70:fd:39:
8e:78:f6:df:23:fd:df:9b:95:4c:77:dc:14:cc:3d:68:77:9f:
a8:55:b2:10:49:0b:10:0c:5f:22:6a:c8:5e:0e:b0:47:2a:7f:
72:9e:e8:10:d9:60:3b:9e:53:15:4c:46:2f:76:ad:49:9d:35:
8c:59:44:4b:fb:e6:7c:15:00:22:7a:fa:f6:7c:d8:a5:82:c2:
fe:a7:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:30:04 2025 by rpki-client