Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e20323731373234.roa
File: 3137372e37352e3139322e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier: tA1N4QXxg8ebh2CoUEv6bVf7QB0nr2ISlDcnp41MlUo=
Subject key identifier: B4:28:8A:91:58:B2:5A:C4:32:35:97:A1:B4:88:5A:DE:B1:7C:D6:9E
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 502255311C0383EDEFE9B6B870379715EDEE4728
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e20323731373234.roa
Signing time: Thu 07 Nov 2024 20:40:15 +0000
ROA not before: Thu 07 Nov 2024 20:35:15 +0000
ROA not after: Thu 06 Nov 2025 20:40:15 +0000
asID: 271724
IP address blocks: 177.75.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:22:55:31:1c:03:83:ed:ef:e9:b6:b8:70:37:97:15:ed:ee:47:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:15 2024 GMT
Not After : Nov 6 20:40:15 2025 GMT
Subject: CN=B4288A9158B25AC4323597A1B4885ADEB17CD69E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:c9:47:5e:f6:28:14:dd:29:61:3e:e9:83:
ce:39:6f:0a:df:eb:d3:d5:8c:f7:95:85:98:13:16:
5f:d4:25:f2:92:42:39:2d:c0:77:06:88:2e:4d:f9:
7b:35:5a:a3:bd:63:3b:da:32:74:cd:80:6e:22:80:
8e:0c:08:66:36:d1:59:52:de:3f:ec:34:4d:f6:fc:
f9:a6:14:d1:ef:9d:d0:97:d8:bf:66:13:40:fa:40:
1e:c1:70:61:25:89:67:56:5b:2a:bb:35:97:f5:ed:
a1:41:72:32:a8:a9:11:29:ab:f9:c2:7c:10:eb:9b:
7e:bb:ad:97:5a:c4:52:60:06:3c:fb:fb:91:cf:12:
cf:22:de:cf:7c:07:89:8c:b4:dc:8e:22:a9:96:a3:
88:6e:18:fe:07:45:e9:6d:2d:99:0b:14:cd:5c:70:
a6:cf:1e:84:3f:3e:ad:49:f0:dd:3c:0e:2b:1b:bd:
61:48:47:e2:ff:19:76:4e:0c:6a:e2:c4:6c:67:4a:
dc:94:b5:93:82:c4:a2:31:b6:ce:b8:ea:0f:59:c8:
cd:ab:53:25:e9:fb:78:d7:d8:76:f6:c4:22:06:9b:
d6:d4:a8:7c:a1:64:75:25:41:f1:29:f4:92:52:e7:
92:48:4f:f6:5c:b8:7d:82:36:3b:88:be:f6:86:6b:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:28:8A:91:58:B2:5A:C4:32:35:97:A1:B4:88:5A:DE:B1:7C:D6:9E
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.75.192.0/20
Signature Algorithm: sha256WithRSAEncryption
15:8f:c8:03:5b:6a:3b:c4:d9:d2:64:3e:b7:64:10:13:b2:93:
84:6a:4d:15:78:cd:c2:68:29:c2:fe:94:6b:cd:52:52:ad:df:
11:c1:ad:7f:da:39:cd:48:ec:14:b7:8b:ea:af:9c:b0:44:89:
67:42:a3:d0:d5:73:1e:fb:88:ef:ea:11:65:af:dd:f4:c6:29:
24:b0:30:9b:e9:42:8d:15:6c:1b:24:f5:7e:4d:ab:87:e6:37:
47:b6:72:e2:6c:7a:c6:f5:c1:36:36:13:40:40:a8:93:e1:53:
98:b4:01:4d:7d:02:5f:1a:1d:e5:12:db:4b:45:47:2f:ea:91:
d6:86:a9:18:97:d7:da:31:57:3b:36:ec:17:9b:80:b7:60:27:
d0:89:67:a2:e6:16:91:90:06:7a:a7:2d:3f:d6:7b:bf:eb:0b:
69:36:9a:a7:f2:a3:40:32:9c:a4:8a:36:30:8a:86:87:e1:e1:
20:b2:57:d2:c8:8a:8f:ab:a4:42:8a:44:b7:33:64:64:bc:d0:
f4:50:85:ef:e4:26:21:29:17:52:43:5f:ef:fc:46:bb:96:e9:
04:11:d8:18:18:9d:82:ce:2f:6c:ce:c0:fa:de:5a:6f:c2:0e:
0c:06:8c:73:7b:38:b4:e9:c2:d0:3a:fa:82:b3:d4:92:da:24:
d5:a9:ce:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:03:28 2025 by rpki-client