Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3137372e38342e35362e302f32322d3234203d3e203532373039.roa
File: 3137372e38342e35362e302f32322d3234203d3e203532373039.roa (raw, json)
Hash identifier: eSzgz7DHqObklJrjZAlUhm4c0OztmBpJbrcILBmlK/I=
Subject key identifier: 7D:39:BC:FA:89:25:D6:F1:DE:41:BF:A3:86:DF:BE:E6:EA:73:C6:7A
Certificate issuer: /CN=C99D0692688A31FA4DF8A88CB9408F0D25F15B49
Certificate serial: 64D7123DA8F4161CB2FEE1B08AE132DCD9FE76FE
Authority key identifier: C9:9D:06:92:68:8A:31:FA:4D:F8:A8:8C:B9:40:8F:0D:25:F1:5B:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C99D0692688A31FA4DF8A88CB9408F0D25F15B49.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3137372e38342e35362e302f32322d3234203d3e203532373039.roa
Signing time: Mon 13 Jan 2025 17:41:01 +0000
ROA not before: Mon 13 Jan 2025 17:36:01 +0000
ROA not after: Mon 12 Jan 2026 17:41:01 +0000
asID: 52709
IP address blocks: 177.84.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d7:12:3d:a8:f4:16:1c:b2:fe:e1:b0:8a:e1:32:dc:d9:fe:76:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C99D0692688A31FA4DF8A88CB9408F0D25F15B49
Validity
Not Before: Jan 13 17:36:01 2025 GMT
Not After : Jan 12 17:41:01 2026 GMT
Subject: CN=7D39BCFA8925D6F1DE41BFA386DFBEE6EA73C67A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:77:88:1d:6a:b2:c3:2c:b6:a5:71:c1:90:
f4:1c:32:d1:72:a9:b8:ad:d0:ff:15:a2:81:81:8f:
b0:ec:6d:dd:8c:00:ff:fb:b3:35:c5:4a:71:b8:71:
1a:fe:61:bd:46:e3:63:0b:a1:3f:00:df:4c:4f:f7:
07:27:f4:2f:8f:83:9a:dd:97:42:13:a1:38:c5:63:
80:bd:23:c7:4e:b2:6d:6f:7b:fb:87:28:ef:d7:9a:
06:ca:8e:dc:65:d9:08:00:24:db:25:d7:b3:39:4b:
2c:fe:f3:b7:fc:25:5d:d7:aa:f8:e3:bb:c5:98:8c:
3f:bd:39:3a:71:42:f7:eb:d1:d4:3a:75:5d:05:c7:
62:ef:37:a5:5d:9e:a4:f6:7b:37:d8:21:cb:97:f7:
be:f0:a1:a3:72:20:f9:aa:24:d2:27:00:7b:7f:4d:
35:e0:42:d8:49:8d:4c:fe:5b:aa:19:d6:21:0f:42:
31:4f:28:85:01:ba:7e:06:28:36:97:d9:be:3e:2f:
9d:85:fd:fd:56:c0:e4:4a:c5:5e:5e:41:0f:2b:4f:
b7:4d:f2:81:91:6b:ad:e3:00:42:69:dc:10:e8:0f:
75:ce:e6:3d:15:5b:37:69:6b:0e:73:1a:28:de:7f:
9c:73:8b:ec:6b:f0:ba:63:f4:90:a7:a2:1a:ad:9f:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:39:BC:FA:89:25:D6:F1:DE:41:BF:A3:86:DF:BE:E6:EA:73:C6:7A
X509v3 Authority Key Identifier:
keyid:C9:9D:06:92:68:8A:31:FA:4D:F8:A8:8C:B9:40:8F:0D:25:F1:5B:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/C99D0692688A31FA4DF8A88CB9408F0D25F15B49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C99D0692688A31FA4DF8A88CB9408F0D25F15B49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3137372e38342e35362e302f32322d3234203d3e203532373039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.84.56.0/22
Signature Algorithm: sha256WithRSAEncryption
27:f6:a6:df:1b:cb:ac:48:e4:ee:ca:61:be:2a:0d:c7:99:16:
0a:06:64:8c:86:39:9a:7a:bb:72:f9:cf:4e:1f:ed:3a:f3:42:
fc:d4:d3:63:ca:bc:da:ce:65:a0:5f:b3:38:2d:b1:c8:92:71:
da:df:68:47:a5:d2:e2:b6:da:26:39:ea:e4:00:f2:f2:6e:20:
0e:c9:81:6d:63:ca:37:41:87:bb:e9:90:4e:5e:7a:f6:74:8a:
c7:86:1e:c0:7b:5e:a9:14:85:46:d4:23:50:80:43:51:f8:77:
3b:d7:cf:23:72:d1:d3:c0:a4:03:aa:8e:e7:73:8b:ce:a1:ee:
3e:82:15:f7:fa:19:6b:41:77:7f:d5:73:0f:a9:97:39:41:fe:
ab:0b:08:2e:bc:38:35:20:5e:f6:e6:24:de:c0:14:b5:2f:3f:
4e:26:9d:a5:86:89:80:52:86:97:30:ff:fb:d1:d8:ba:88:01:
db:64:44:37:a1:fe:9d:0c:95:e9:b3:32:ec:4d:d3:f2:af:b8:
95:fe:0f:1c:7d:cb:b8:b8:1a:6c:bd:df:3a:0b:9a:7d:2f:68:
27:3e:03:da:26:dd:ba:6b:2c:54:e0:0b:e2:5b:31:a8:d7:5b:
c5:0f:fb:f7:47:38:06:ec:cf:ba:93:00:5f:0b:1f:b5:cb:30:
b0:2a:2a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:26:40 2025 by rpki-client