Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa
File: 3137302e3234372e35322e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: kwHG7w1w5u2DxjFY0tKwec85GaCXS+XtkdCiUhv1+ww=
Subject key identifier: 55:27:97:C1:E4:3D:E8:EC:CF:E5:05:1B:06:35:75:D6:E9:6F:71:22
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 4F59B376F4FFFD13E2D1021A6B283A3FC790202B
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 28270
IP address blocks: 170.247.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:59:b3:76:f4:ff:fd:13:e2:d1:02:1a:6b:28:3a:3f:c7:90:20:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=552797C1E43DE8ECCFE5051B063575D6E96F7122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:3d:42:3b:4a:e0:4d:0c:da:38:7d:70:20:
fd:9b:26:98:0d:55:61:2f:21:08:58:22:97:ec:32:
96:39:5c:37:02:5a:41:15:26:e9:92:0e:0f:7c:a5:
69:a8:0d:8b:90:9f:db:8b:16:96:9e:59:6e:cb:4c:
9a:25:ad:56:fd:08:c0:0e:a6:9e:b1:7c:98:02:c5:
a6:ef:72:99:b0:0b:f2:c5:3a:1c:d7:a3:82:e1:51:
3a:61:f5:32:13:ee:eb:5b:3f:b9:bc:2e:ee:21:8f:
fb:9d:9b:ef:f2:4d:0d:ce:56:8f:fe:cd:4b:31:68:
2a:a2:e1:cf:4a:c5:72:9c:13:64:d2:bf:25:c3:44:
cb:8f:71:8a:41:37:e8:77:b4:44:64:ba:11:9b:e8:
ee:92:3f:c2:ea:ab:2c:b1:ca:49:93:7e:a8:40:ac:
43:73:ed:64:3b:12:d7:27:98:b9:ca:d7:6b:b8:25:
0d:76:30:5d:c3:86:1d:cc:63:8a:46:de:f2:c5:48:
a8:23:0d:21:3a:85:d7:19:b9:44:03:9d:ce:20:90:
9d:95:08:be:e3:23:1c:22:7c:b3:0d:93:c5:42:d6:
9e:c5:b8:b1:aa:60:fd:e0:c0:5b:0a:4f:71:43:b7:
82:5c:98:e1:a3:e9:2d:76:ba:db:50:b0:41:90:08:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:27:97:C1:E4:3D:E8:EC:CF:E5:05:1B:06:35:75:D6:E9:6F:71:22
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.52.0/22
Signature Algorithm: sha256WithRSAEncryption
63:aa:ab:b3:a1:30:11:83:94:36:bb:a7:f2:5c:f5:24:c3:75:
cb:ac:ea:10:ba:60:d6:17:6e:d7:31:57:01:f8:9e:ca:d4:6a:
e1:2e:10:43:76:f2:cc:dd:df:83:12:db:3a:a2:55:da:1a:cc:
89:5e:09:b8:2f:81:b7:b6:44:bb:6d:9a:08:ce:6f:58:90:a8:
fa:83:a6:dd:48:01:b1:a9:55:f0:49:7d:41:da:9e:7f:1e:fc:
20:77:af:55:5e:46:3a:29:84:15:56:9b:40:8a:7d:86:22:43:
55:74:36:31:83:7b:4c:05:bc:47:95:33:14:90:b5:09:0b:45:
b6:30:40:87:79:07:f3:5f:bf:df:c4:d2:89:3f:a9:3c:0e:8a:
a2:89:d8:08:8c:17:3b:d7:f7:73:4f:27:57:25:f0:84:bd:16:
89:cb:70:07:93:ac:49:06:e8:ee:b0:1a:8a:66:8c:88:74:54:
12:5a:3d:12:83:33:7c:b9:95:c2:a2:be:9e:d2:5b:c5:2d:66:
51:bc:f1:19:f2:42:56:c0:df:ce:fe:90:b3:d7:f4:d5:b3:1e:
36:bd:70:ac:3f:ad:f9:9b:f7:c1:6e:2d:50:97:d9:6f:98:b7:
b5:ae:c6:1a:71:bb:41:6c:2b:b5:42:86:09:c8:86:99:36:f4:
a0:35:86:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:44:53 2025 by rpki-client