Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32322d3232203d3e20323632343835.roa
File: 3137302e3233382e3137322e302f32322d3232203d3e20323632343835.roa (raw, json)
Hash identifier: KR/9ApspM02dp9fQm4tyRIdGYazTn1kkFxRmiWpum7k=
Subject key identifier: 06:AA:5B:65:CF:07:61:78:2E:83:D5:DF:D8:3B:AF:D1:2A:E0:D4:D0
Certificate issuer: /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial: 2C4D05991AA4AC7D4C4D9A135710CD4C12808627
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32322d3232203d3e20323632343835.roa
Signing time: Sat 27 Jul 2024 21:13:24 +0000
ROA not before: Sat 27 Jul 2024 21:08:24 +0000
ROA not after: Sat 26 Jul 2025 21:13:24 +0000
asID: 262485
IP address blocks: 170.238.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4d:05:99:1a:a4:ac:7d:4c:4d:9a:13:57:10:cd:4c:12:80:86:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Validity
Not Before: Jul 27 21:08:24 2024 GMT
Not After : Jul 26 21:13:24 2025 GMT
Subject: CN=06AA5B65CF0761782E83D5DFD83BAFD12AE0D4D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:f3:88:a7:44:68:c8:82:54:db:80:e2:dd:
9f:72:e9:7b:f6:ac:65:ce:0e:68:1d:22:c6:d4:87:
92:b3:a4:20:1d:5a:13:5d:82:c5:1b:9d:a5:c1:b3:
8f:50:13:84:30:f3:c9:16:a0:4d:0b:a9:e8:d1:7d:
34:a3:c5:25:7e:13:5d:61:e6:ee:ec:14:67:4b:82:
a1:d2:3a:28:58:02:51:0d:a2:16:a4:c8:83:73:47:
21:10:f8:29:26:a1:b7:1c:76:62:1c:00:59:e5:e0:
1b:97:f9:d6:ed:8e:03:a1:b8:0f:0d:e0:29:fd:bc:
9a:4f:88:1a:ee:a3:f9:62:00:83:92:91:84:4b:e8:
ed:85:0b:9e:51:83:c0:1a:06:6c:d9:72:9f:b3:f1:
e6:d0:83:71:05:a6:38:45:57:f5:70:7b:a2:35:45:
91:45:e0:3e:be:26:32:06:7f:cf:6d:22:df:2a:8b:
00:f8:07:86:14:25:0d:f7:73:41:53:34:78:58:46:
11:13:bb:79:8f:91:b4:0c:5f:52:72:c1:b4:42:5d:
67:a8:db:50:27:f4:d9:0f:0e:d5:00:48:73:68:ec:
cc:c8:86:f9:db:e8:63:9f:22:cf:a5:e9:ff:56:9d:
ec:07:f2:3d:fa:26:a8:42:06:fc:9b:37:be:fc:2c:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AA:5B:65:CF:07:61:78:2E:83:D5:DF:D8:3B:AF:D1:2A:E0:D4:D0
X509v3 Authority Key Identifier:
keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32322d3232203d3e20323632343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:f2:ed:61:72:7b:87:6a:b7:24:96:ce:b0:c3:cb:79:87:d8:
43:a2:b2:3f:44:09:17:9c:08:73:f9:ef:88:a2:52:b2:28:09:
ba:fa:51:a7:fa:04:49:30:51:e3:9c:f3:89:f5:1b:8f:33:83:
fd:11:f1:d2:7e:77:dd:db:db:f3:d9:44:90:36:8d:a9:9b:20:
35:af:f4:e5:af:f3:f2:0f:83:7a:bd:0f:b0:bb:83:33:dc:59:
e0:4f:a0:2c:6f:1c:84:93:06:80:b5:86:44:f3:d9:4c:e2:9b:
28:8f:94:d0:e9:b1:3b:62:f4:3b:87:31:85:a1:91:e4:cd:9d:
83:87:7d:52:bd:ba:fc:e5:6f:ce:3f:04:6e:d4:f3:7e:03:bf:
da:0a:d2:93:f3:91:0e:82:55:e8:a1:a0:9b:71:27:ee:1a:1c:
72:37:2b:0a:a0:94:1a:b8:2b:95:09:90:9f:b1:88:92:01:09:
ea:ac:59:d4:fe:15:ea:6c:02:0d:3f:c7:88:15:9a:13:63:8b:
55:1e:bf:99:23:a8:2c:68:6e:8f:c1:87:3d:b9:5f:b3:54:7d:
bc:07:6d:ff:85:75:6c:ec:be:39:23:c4:08:38:fd:bc:ce:08:
e7:d6:6d:e5:a3:26:44:1f:8a:5a:bd:bd:48:a4:e0:d5:53:85:
05:b7:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:26 2025 by rpki-client