Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3232322e3234382e302f32312d3234203d3e20323633343035.roa
File: 3137372e3232322e3234382e302f32312d3234203d3e20323633343035.roa (raw, json)
Hash identifier: 7Hp54qGn+Kdi3CF+GdVefrZ297BFv5Nfzrw4xAr4008=
Subject key identifier: 70:AE:E9:D0:D5:B5:E5:30:9B:78:DD:D7:8F:1C:3C:4A:7D:E5:15:02
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 28D82BA194164BFDD830DD68F207F50BAAEAAF59
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3232322e3234382e302f32312d3234203d3e20323633343035.roa
Signing time: Fri 03 May 2024 21:54:01 +0000
ROA not before: Fri 03 May 2024 21:49:01 +0000
ROA not after: Fri 02 May 2025 21:54:01 +0000
asID: 263405
IP address blocks: 177.222.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d8:2b:a1:94:16:4b:fd:d8:30:dd:68:f2:07:f5:0b:aa:ea:af:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:49:01 2024 GMT
Not After : May 2 21:54:01 2025 GMT
Subject: CN=70AEE9D0D5B5E5309B78DDD78F1C3C4A7DE51502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:c2:1b:88:1a:07:58:68:0c:c1:81:52:9b:
4e:75:ac:44:00:85:2a:f9:79:df:d0:c8:2e:31:e9:
bc:48:f5:ca:7f:47:49:9e:ef:9a:f5:95:58:00:48:
db:18:40:86:2f:2d:9d:12:92:96:78:2c:be:9e:05:
1f:d0:f0:1a:37:0d:8d:5f:4d:ee:da:0f:63:db:59:
e8:1f:9b:ff:63:80:6e:d5:88:b6:33:4d:97:b7:26:
c4:c0:71:8a:de:6f:be:4e:60:1e:31:a7:85:09:ac:
15:30:fb:98:54:b8:6e:4e:37:11:24:de:22:11:72:
81:9c:1a:00:75:6a:61:f4:1a:be:ac:88:31:25:4d:
1d:6b:b4:53:6d:f5:87:45:23:7b:01:48:88:56:32:
11:80:dc:3d:0c:d6:8d:58:ab:5b:e3:a9:28:ea:d1:
96:45:1b:18:9e:42:2a:3a:33:c8:ee:d2:84:90:03:
b9:95:ea:06:35:6f:4c:42:2c:04:af:2e:75:55:6a:
46:b7:e3:51:b7:08:c5:a5:83:42:ee:76:ce:6a:a5:
1b:2f:26:23:3a:97:37:bd:68:15:12:1d:84:18:12:
56:92:e4:49:e7:79:eb:68:57:ce:75:fa:a2:d1:e7:
87:9a:f9:6d:0f:43:e8:ed:94:f8:3d:ec:d7:0f:9e:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AE:E9:D0:D5:B5:E5:30:9B:78:DD:D7:8F:1C:3C:4A:7D:E5:15:02
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e3232322e3234382e302f32312d3234203d3e20323633343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.222.248.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:1c:4e:68:8a:a9:f0:df:f5:ce:0e:df:57:36:73:29:e6:42:
22:90:27:f3:7c:52:d5:64:91:ce:67:a9:1c:39:f0:b8:b0:c4:
a5:53:8a:2e:4f:ae:35:a9:57:89:a9:de:df:16:da:ed:5d:66:
dd:a1:5f:94:26:28:39:f7:11:67:c9:2c:6b:59:1a:60:e9:50:
80:6f:8a:09:82:f7:68:87:cb:2b:07:2b:93:d7:dd:56:98:5a:
d0:dd:03:9c:49:54:97:c2:74:83:3b:42:ba:88:c2:34:1d:d5:
cf:4e:f5:f6:17:f2:b9:8e:59:04:d9:e8:61:24:90:2c:f3:91:
17:0e:19:03:87:27:a3:f6:29:8c:91:53:00:30:b0:c4:69:05:
60:f3:70:c6:36:74:ae:68:20:74:49:3f:58:62:bd:ad:ac:18:
3c:4b:43:ef:89:0c:65:4b:71:9a:b2:0a:3b:d6:1c:aa:44:f5:
48:7c:79:a5:60:dd:0b:f5:ad:50:04:87:dd:68:67:0e:e3:9b:
40:41:d4:07:9b:0f:06:a3:a2:06:6c:1c:53:58:af:25:70:df:
da:19:40:e5:4c:ed:a3:2f:f4:7b:4b:7f:ab:4f:1e:6f:f6:85:
29:bb:e6:0e:e8:23:79:8f:83:ce:59:ee:06:50:a8:4d:cb:95:
dd:e0:28:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:38:06 2025 by rpki-client