Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e34382e302f32312d3231203d3e20323634323136.roa
File: 3137372e38362e34382e302f32312d3231203d3e20323634323136.roa (raw, json)
Hash identifier: VEyfnk0mkOIypcDQaN49gMAsJARCeYw9ZgY9X5RydaU=
Subject key identifier: F3:B5:DC:05:0C:B0:11:FC:08:5E:A2:26:0D:70:82:45:AB:66:C7:8D
Certificate issuer: /CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
Certificate serial: 0689F593CBC11A2F05D07791B42E8C711AD5C5A9
Authority key identifier: D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e34382e302f32312d3231203d3e20323634323136.roa
Signing time: Tue 20 Feb 2024 12:18:35 +0000
ROA not before: Tue 20 Feb 2024 12:13:35 +0000
ROA not after: Tue 18 Feb 2025 12:18:35 +0000
asID: 264216
IP address blocks: 177.86.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:89:f5:93:cb:c1:1a:2f:05:d0:77:91:b4:2e:8c:71:1a:d5:c5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2B1CE4C3652770D801C5063724CC7342B3F572F
Validity
Not Before: Feb 20 12:13:35 2024 GMT
Not After : Feb 18 12:18:35 2025 GMT
Subject: CN=F3B5DC050CB011FC085EA2260D708245AB66C78D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:77:c0:aa:e7:f8:28:be:e6:a7:98:32:b0:
a3:85:3a:6f:f2:db:ec:de:13:1f:14:5f:4c:14:b8:
d7:bc:e6:23:af:52:00:4e:bc:a9:ab:ff:06:0e:d2:
de:e7:30:d8:cf:1d:73:69:78:70:85:81:20:e1:f4:
c4:a1:1a:10:e2:c1:d6:55:e4:1b:db:fe:8c:e9:07:
07:34:06:e4:9b:cc:40:d0:b4:59:c9:a7:0b:fd:a3:
5f:84:be:a8:f6:e6:3b:75:e9:f7:d7:d7:88:f0:22:
ba:47:14:70:78:45:dc:a8:4d:fb:e0:ec:54:d5:ee:
04:14:ae:97:f3:91:f7:f8:25:28:b4:0d:e1:42:ca:
0f:47:9c:de:08:11:41:97:96:a2:0b:48:ea:20:58:
16:1b:45:bf:42:e0:6d:dc:8d:1f:0a:5f:50:08:08:
d4:9b:4f:37:98:5b:1f:42:0e:87:1a:ee:eb:c3:c9:
cd:0e:5f:c5:58:bd:59:2d:d5:67:f3:f2:8c:12:97:
c9:1f:0f:9c:46:72:57:64:2d:62:f1:0c:1f:97:28:
68:e3:1c:98:5b:21:47:36:fe:c4:3b:ba:98:ef:99:
d6:b1:54:d4:67:b7:3d:67:78:a6:84:99:67:9c:22:
85:0a:86:72:d0:6f:a3:4b:ad:76:e6:f0:da:70:e4:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B5:DC:05:0C:B0:11:FC:08:5E:A2:26:0D:70:82:45:AB:66:C7:8D
X509v3 Authority Key Identifier:
keyid:D2:B1:CE:4C:36:52:77:0D:80:1C:50:63:72:4C:C7:34:2B:3F:57:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B1CE4C3652770D801C5063724CC7342B3F572F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e34382e302f32312d3231203d3e20323634323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.86.48.0/21
Signature Algorithm: sha256WithRSAEncryption
64:63:fb:2d:d7:db:02:d9:9e:6c:6a:67:77:5e:36:75:56:57:
30:49:99:db:e5:5b:34:1f:52:2b:f5:0a:ce:d8:99:c0:53:22:
e1:76:35:41:44:ff:26:6c:ed:7c:3b:44:05:d9:5a:8d:38:7c:
10:cc:71:a0:de:75:a9:f7:a8:cb:3a:8e:43:0e:ce:af:0e:3d:
e6:38:77:6d:2c:1d:2c:4c:74:d0:15:76:9f:76:e5:b1:12:03:
e8:79:ba:ee:dd:e9:7b:55:d9:1f:a3:90:96:9e:54:8c:2f:0e:
0f:b8:15:5e:ce:87:2e:13:b1:6b:f2:7a:c2:c8:4d:2e:00:62:
67:e4:96:c7:f8:f4:b4:74:45:8c:d6:8c:8b:dc:85:30:6a:59:
0c:65:61:32:bb:de:ff:ec:50:44:ea:d9:7b:ee:22:51:1c:24:
d1:f3:1d:73:7a:10:ce:3b:9a:2a:74:6d:25:ca:f2:27:2d:06:
15:55:62:a0:73:74:a0:0a:6a:75:60:53:30:76:15:43:2b:e4:
f9:27:ed:cc:5f:92:bf:26:92:e3:73:5b:6c:63:c8:e4:06:83:
39:14:ef:2d:e7:95:ea:e0:f9:a0:75:5e:fc:8c:b5:6d:25:18:
b5:1f:68:94:6f:ca:25:57:04:f1:be:b8:5b:d8:7d:40:c1:75:
45:46:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:23:07 2025 by rpki-client