Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32302d3230203d3e20323632343031.roa
File: 3137372e33362e3132382e302f32302d3230203d3e20323632343031.roa (raw, json)
Hash identifier: z/XFIrgcmgDzhyzzkNogcseaoLAxX0mVc9ndmwa04xg=
Subject key identifier: 48:DD:BF:87:8A:F6:87:80:12:83:03:BC:A7:09:0E:01:60:43:76:8F
Certificate issuer: /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial: 207C1AA4E7D4A9F467B0237E64DA902F70167E8A
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32302d3230203d3e20323632343031.roa
Signing time: Thu 04 Apr 2024 10:47:44 +0000
ROA not before: Thu 04 Apr 2024 10:42:44 +0000
ROA not after: Thu 03 Apr 2025 10:47:44 +0000
asID: 262401
IP address blocks: 177.36.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:7c:1a:a4:e7:d4:a9:f4:67:b0:23:7e:64:da:90:2f:70:16:7e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Validity
Not Before: Apr 4 10:42:44 2024 GMT
Not After : Apr 3 10:47:44 2025 GMT
Subject: CN=48DDBF878AF68780128303BCA7090E016043768F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:16:44:fe:89:79:a0:2d:3b:87:5f:90:52:
2d:7c:5d:62:5d:74:7e:c8:23:f8:11:88:5f:61:eb:
32:27:69:ee:d6:16:66:3f:2f:22:95:e0:1a:ce:9a:
24:4d:1c:52:44:f9:48:d1:37:97:ee:f5:98:b1:2f:
a3:61:78:7b:ea:7c:ed:7e:0e:1c:05:e0:d1:da:55:
15:71:1e:80:d7:db:c4:5f:40:40:8c:b3:2b:38:5a:
b7:bf:c1:99:b6:fa:90:da:e8:0a:d8:9d:1e:b2:03:
15:df:b9:79:e7:e4:7d:86:95:8c:21:86:4a:1f:bf:
70:79:eb:39:f4:2d:84:c4:88:e9:1f:d0:a8:aa:81:
a5:36:a9:e3:09:c6:a9:5e:b7:48:d4:df:6a:22:6c:
8b:4e:d6:af:b8:82:93:8c:88:87:ae:d1:ee:6f:17:
2b:c6:b7:03:73:08:6d:8f:01:5b:c5:84:c3:2d:29:
50:9f:ba:9b:9b:20:3a:03:81:b9:3e:a0:9d:55:2b:
57:fb:38:ed:7f:51:9f:d5:d2:d4:45:8c:56:02:67:
6f:4a:07:5d:e7:24:fe:2a:11:fd:57:11:b3:dd:20:
fd:5a:b8:15:74:76:6a:db:df:33:96:b2:ac:a2:37:
9e:f6:db:a9:cd:74:20:bd:89:5d:cc:31:65:fb:8b:
36:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DD:BF:87:8A:F6:87:80:12:83:03:BC:A7:09:0E:01:60:43:76:8F
X509v3 Authority Key Identifier:
keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32302d3230203d3e20323632343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.128.0/20
Signature Algorithm: sha256WithRSAEncryption
89:44:1e:dd:ef:f9:19:f1:b4:c6:5e:ae:37:ca:52:a1:a7:5f:
5b:8d:d3:c0:3a:21:24:77:c5:29:62:85:b1:62:e3:3e:38:5f:
97:41:0b:46:c6:8f:eb:dc:86:7c:9f:7e:bf:a9:c0:38:ae:57:
2e:b8:c9:24:53:5e:16:7e:23:83:c5:55:ed:e8:06:f9:f9:d3:
be:d1:8a:a8:b3:21:94:d0:12:db:77:f4:d5:13:40:2d:2f:76:
bf:ff:fc:da:02:28:c0:43:75:10:49:1f:d9:ff:3f:fc:98:6c:
bf:44:00:84:91:46:9d:6f:4b:ea:f9:dc:3d:e9:4e:f7:c2:f2:
71:2d:67:e2:82:ec:9d:26:7d:32:63:18:dd:33:59:7e:3b:f7:
9f:0c:3a:36:68:a1:40:07:1f:05:cd:e7:bd:20:bf:94:9f:e8:
55:63:8a:8c:04:a9:18:21:cb:2b:cd:2b:d8:a7:f2:65:3c:ee:
d0:b4:5a:e8:21:46:0c:84:86:63:c5:56:73:e6:63:4f:b7:f6:
44:7d:c0:ed:92:be:87:98:bb:5c:f6:11:26:08:0a:c9:f6:57:
d4:b5:bb:66:ea:d3:57:48:5f:39:e1:85:41:0d:f1:33:f1:78:
dd:f0:57:12:e0:4f:7c:a9:08:6c:9f:0f:60:06:32:38:60:d5:
39:fc:c2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:29:37 2025 by rpki-client