Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/3137372e38362e3131362e302f32322d3234203d3e203532353730.roa
File: 3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (raw, json)
Hash identifier: CFpu8RQP02K8mfMysBtMeHpJUcGHMZmd7BF/VaU76GQ=
Subject key identifier: E9:F3:42:A8:95:77:D9:D6:3F:C6:F3:FF:1D:B0:CE:A6:57:0B:E6:4C
Certificate issuer: /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9
Certificate serial: 5F92C7A382620C60C13E683D5D8BF12CDF5EDFEB
Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/3137372e38362e3131362e302f32322d3234203d3e203532353730.roa
Signing time: Wed 03 Apr 2024 19:11:58 +0000
ROA not before: Wed 03 Apr 2024 19:06:58 +0000
ROA not after: Wed 02 Apr 2025 19:11:58 +0000
asID: 52570
IP address blocks: 177.86.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:92:c7:a3:82:62:0c:60:c1:3e:68:3d:5d:8b:f1:2c:df:5e:df:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9
Validity
Not Before: Apr 3 19:06:58 2024 GMT
Not After : Apr 2 19:11:58 2025 GMT
Subject: CN=E9F342A89577D9D63FC6F3FF1DB0CEA6570BE64C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:8c:58:e8:d1:a8:36:81:89:5b:16:07:f7:
fc:6c:6b:19:e2:ed:34:77:f9:5b:eb:e3:b0:02:c9:
7d:7d:e2:2d:56:2c:cb:7d:a6:ae:b9:e2:bc:0c:44:
75:ee:de:3b:fe:39:0c:d4:d5:6e:6e:87:7f:dd:df:
48:74:c8:ca:1b:43:2a:76:7f:59:e5:5b:e5:11:19:
be:55:eb:c7:63:fd:14:fe:22:df:50:91:b3:6d:9d:
a1:7a:08:f1:8e:51:0a:c3:36:49:93:7f:2b:34:f7:
a6:40:66:45:c8:2f:3c:bc:dd:58:68:4d:d9:76:60:
87:85:15:5d:60:9f:07:bc:66:73:b4:b2:b8:a5:a6:
d0:0d:d8:b9:aa:37:a3:69:4b:11:65:a3:02:ce:78:
4f:01:6f:33:63:0b:91:a2:07:7e:2a:a5:18:2b:98:
de:d6:08:a1:03:b7:3e:43:e3:c8:af:26:b4:22:9e:
54:37:0a:bb:66:bd:1e:c9:86:43:74:58:21:8b:e1:
31:6b:14:34:90:51:cc:c7:9c:2f:54:ac:b3:bb:ef:
54:86:52:92:85:fc:db:9b:58:d4:82:54:eb:0d:0c:
0f:00:9a:67:77:51:3e:a0:2c:e8:d5:67:7c:45:80:
c5:15:21:ed:16:20:5b:73:f5:f7:d1:de:fe:67:55:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F3:42:A8:95:77:D9:D6:3F:C6:F3:FF:1D:B0:CE:A6:57:0B:E6:4C
X509v3 Authority Key Identifier:
keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/3137372e38362e3131362e302f32322d3234203d3e203532353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.86.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:3d:19:12:3b:ee:db:43:13:2b:31:c6:d8:d5:27:d6:7b:27:
96:13:93:ac:ea:a7:4f:84:b0:32:b3:86:c2:93:7c:6a:13:78:
2e:77:2c:6d:45:da:1f:72:6b:2f:6d:e7:f2:bd:00:82:71:6a:
99:7d:ba:c9:23:72:bb:c8:81:a1:db:55:2c:0e:5a:6f:c5:51:
86:e3:ca:bc:b4:2f:8d:3e:d2:e8:74:7f:80:0b:6a:32:97:15:
63:94:56:f6:16:01:5c:2b:ce:92:0a:f5:ed:29:2f:0d:f8:f9:
26:65:da:e3:4e:5d:68:0f:01:65:8d:45:26:1a:71:7f:c5:55:
f9:c2:6d:98:93:43:a5:1a:b4:58:2d:0e:8f:0c:de:bf:e4:02:
66:3e:9e:5e:11:97:f0:0b:d4:b9:a2:28:fa:0a:cd:53:15:fc:
ec:26:e9:16:3e:21:cb:b4:bb:08:6d:26:f1:fe:38:4a:b0:bf:
84:3f:d2:4d:cb:61:a7:0e:8d:c9:4f:e3:0c:a0:86:a6:8b:9f:
84:3f:01:63:b6:df:7e:72:42:26:78:f7:2b:40:19:40:c7:5e:
8d:0d:e3:56:eb:46:d6:d7:63:a6:d6:58:75:bc:40:20:5f:a3:
c4:f7:07:2c:5f:95:a8:72:a4:21:3e:1f:5c:7a:9b:7d:ae:44:
61:d1:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:22:22 2025 by rpki-client