Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e38382e302f32322d3234203d3e203238363436.roa
File: 3230312e37372e38382e302f32322d3234203d3e203238363436.roa (raw, json)
Hash identifier: 5Lcrh6l+hg9eV1C311wcV9j3t5HUeG1h5+nEObtz6Rs=
Subject key identifier: BC:89:1F:71:86:46:2C:3C:17:D7:73:DE:B0:24:1D:11:4D:AF:63:BD
Certificate issuer: /CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
Certificate serial: 014D1B5D687645B78D43A262A60018E4F309E22A
Authority key identifier: D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e38382e302f32322d3234203d3e203238363436.roa
Signing time: Fri 23 Feb 2024 18:28:06 +0000
ROA not before: Fri 23 Feb 2024 18:23:06 +0000
ROA not after: Fri 21 Feb 2025 18:28:06 +0000
asID: 28646
IP address blocks: 201.77.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4d:1b:5d:68:76:45:b7:8d:43:a2:62:a6:00:18:e4:f3:09:e2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
Validity
Not Before: Feb 23 18:23:06 2024 GMT
Not After : Feb 21 18:28:06 2025 GMT
Subject: CN=BC891F7186462C3C17D773DEB0241D114DAF63BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:a5:df:a7:19:9b:23:54:b9:85:04:2c:11:
07:b0:a0:4a:c9:a3:10:c8:78:85:3b:65:9f:e8:26:
22:a6:b9:e6:c9:58:c2:55:83:b0:56:ce:3e:eb:cd:
99:7b:dc:56:1b:82:ee:bc:8c:f0:9b:28:92:8e:09:
e6:76:81:31:c5:95:e1:d4:6f:6b:5c:52:d8:79:69:
53:06:e6:67:a5:9f:e4:88:64:89:7a:43:7b:64:8a:
6d:ba:be:0e:4a:69:5d:5c:30:2b:44:7b:04:a5:e2:
dc:96:f2:6b:94:ec:72:61:f4:63:10:01:42:0e:37:
d0:c6:18:6b:d3:76:fa:44:8e:d6:87:50:62:02:d4:
da:7c:91:e0:91:20:45:1b:18:7c:59:1f:5c:e9:31:
7e:88:5e:e7:b2:f2:7b:50:d3:8f:82:a4:1e:27:d3:
f3:de:b5:24:02:bb:ed:09:9a:ce:e8:3c:e8:40:09:
8f:75:97:1d:b4:ac:17:61:9f:50:2a:d7:f4:af:3c:
d4:32:43:32:1f:4c:db:8e:30:be:ad:79:c3:43:71:
b2:e5:35:18:da:c0:0f:ac:9c:18:12:a6:20:25:f7:
83:67:7d:e1:18:8d:c4:00:3d:a4:e4:fe:b9:d2:c0:
33:98:74:a6:45:55:d0:4d:82:89:18:c0:ab:21:7b:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:1F:71:86:46:2C:3C:17:D7:73:DE:B0:24:1D:11:4D:AF:63:BD
X509v3 Authority Key Identifier:
keyid:D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e38382e302f32322d3234203d3e203238363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.88.0/22
Signature Algorithm: sha256WithRSAEncryption
83:9e:95:80:11:ed:65:86:9b:f5:b0:8b:df:7d:e4:66:0c:c0:
2a:d2:bd:4f:d2:a1:5f:ec:a0:26:c5:40:4c:34:07:6c:88:39:
65:3e:d9:aa:ff:d0:bc:02:74:5b:98:7a:12:66:a9:c2:0a:11:
d2:92:3d:5a:b5:02:20:99:19:cb:c6:99:39:e7:e7:3b:4a:fd:
d5:29:65:13:3d:da:b4:ff:60:51:83:57:30:38:ef:36:7d:48:
58:c0:ea:aa:58:b6:a9:57:9f:35:aa:41:6e:6c:5b:84:2e:00:
59:22:69:9c:f6:92:cb:9b:a9:5c:41:39:e3:1a:ed:5a:5c:10:
5b:74:9b:c9:05:57:e8:fa:65:26:66:1c:63:74:ef:17:7c:9b:
76:b7:36:08:21:5b:34:1c:9e:ed:6b:82:01:c9:c2:10:36:ca:
5d:ca:a3:31:b4:69:1e:1d:b4:fe:48:72:55:f4:2e:14:00:87:
74:46:14:60:35:4c:19:cf:55:0c:99:47:0f:9b:0d:25:83:22:
59:bf:0b:93:db:49:d6:e8:54:26:62:20:d3:57:37:da:87:2a:
a2:92:a9:7a:84:6a:f9:e6:e3:a2:18:1b:c7:13:90:66:d7:54:
63:9f:f0:03:c6:ed:cf:09:b0:3a:3b:82:6a:2d:99:94:bf:8c:
34:b1:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:04:51 2025 by rpki-client