Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa
File: 3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier: KulwAv9XSxSM6I1DUgvBq5qssAOFhC5gru5q+s4vhRI=
Subject key identifier: A9:9E:6C:5B:2C:25:1F:4B:B0:14:1F:5A:D8:91:10:F0:EC:F7:94:A3
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 5204AD89F42A0EA7B9878D6CE8BF24773476D238
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 262509
IP address blocks: 170.247.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:04:ad:89:f4:2a:0e:a7:b9:87:8d:6c:e8:bf:24:77:34:76:d2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=A99E6C5B2C251F4BB0141F5AD89110F0ECF794A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:40:f9:e5:fb:48:f9:e6:2d:b5:31:90:df:
d7:06:75:ac:ff:9e:8a:e8:08:a5:27:52:c0:cc:cf:
00:30:ad:0e:70:c2:1c:a5:98:55:a0:ac:09:3d:98:
3c:7f:7a:4a:aa:ce:d7:07:ac:8b:4c:78:ea:24:3d:
7c:ed:1c:4b:6f:d4:cd:21:df:29:5d:91:d0:0c:1e:
41:6b:d0:87:e8:79:b1:0f:3b:04:46:bd:e7:7c:dc:
3b:9d:94:dd:fc:d2:32:31:9b:5e:f1:c2:e3:e5:32:
77:0a:c2:a9:53:cc:8d:87:69:64:02:9d:09:4a:3e:
29:e7:57:fe:21:e3:50:1d:10:f5:fc:86:03:da:3f:
11:ff:bb:71:f4:9d:5a:6e:c7:59:7c:aa:2d:b4:70:
29:2c:3f:eb:37:d9:8d:c7:52:06:5f:d3:6b:a6:15:
0b:77:a5:1c:e0:e5:09:8b:fd:50:ae:41:71:00:ca:
22:40:ef:f5:66:38:a7:fc:4e:a1:87:14:83:39:c0:
86:ae:af:d3:cc:35:58:7e:27:24:07:dd:5a:df:0b:
8c:99:c9:6d:86:20:07:20:01:4a:a4:49:d0:0a:ae:
3c:09:5a:a9:a1:41:78:b2:45:e3:29:3d:99:29:26:
85:9c:bd:26:2a:ae:bb:bd:3a:c4:8f:a7:25:eb:d0:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9E:6C:5B:2C:25:1F:4B:B0:14:1F:5A:D8:91:10:F0:EC:F7:94:A3
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.52.0/22
Signature Algorithm: sha256WithRSAEncryption
37:16:b3:49:b0:03:61:b6:49:42:30:87:00:56:99:f9:74:89:
74:39:92:9d:b1:5f:b0:de:c3:f1:2d:40:0e:24:93:8b:01:ec:
75:dd:66:a0:d4:9a:ca:6f:94:5f:eb:89:cb:1d:6a:40:f3:f3:
fa:5c:72:3a:40:1a:f9:21:19:ca:3e:5c:30:2d:46:1b:86:42:
c3:ff:73:38:b3:4d:fa:20:d5:36:65:9e:68:56:0c:bc:a7:53:
a1:68:8f:21:fc:9d:e6:95:65:a4:e1:17:a2:2a:06:20:49:83:
8a:d6:0c:09:eb:c4:34:ed:0d:7c:74:d3:cf:5d:4e:3d:8f:ab:
f3:56:91:dd:b9:7e:06:23:3b:5f:22:d3:31:eb:2d:cb:42:4a:
eb:8c:0c:0c:c7:eb:09:a7:60:22:8a:05:9e:2e:32:a4:9b:e0:
56:01:a4:14:52:74:36:a6:11:80:2a:8d:2f:88:5a:fc:d6:53:
9c:a0:03:70:2f:b9:69:0c:a4:c7:ea:d1:b5:ab:64:87:99:80:
89:9c:29:c2:fe:0f:5a:5a:d4:ad:0b:7e:5b:13:69:91:dd:a3:
53:bf:7d:6d:58:05:84:7d:8d:24:4a:af:60:97:36:5c:91:a9:
f1:db:28:36:ee:85:36:88:a9:5f:56:28:a2:48:ea:4c:ea:df:
6f:3d:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:46:03 2025 by rpki-client