Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32342e302f32322d3234203d3e203532363632.roa
File: 3137372e36372e32342e302f32322d3234203d3e203532363632.roa (raw, json)
Hash identifier: CaJ2YqX6hYjPow+L/+Ed8XjKqJ1iY+o5jqj7La4tRTg=
Subject key identifier: 70:AF:89:68:0D:2D:D2:67:71:3A:92:52:C6:AA:B3:A3:CF:D4:28:EE
Certificate issuer: /CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7
Certificate serial: 1BA4B3DA9582A69FDE089B2D204D9919C6BDEFBA
Authority key identifier: C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32342e302f32322d3234203d3e203532363632.roa
Signing time: Thu 01 Aug 2024 17:26:43 +0000
ROA not before: Thu 01 Aug 2024 17:21:43 +0000
ROA not after: Thu 31 Jul 2025 17:26:43 +0000
asID: 52662
IP address blocks: 177.67.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a4:b3:da:95:82:a6:9f:de:08:9b:2d:20:4d:99:19:c6:bd:ef:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7
Validity
Not Before: Aug 1 17:21:43 2024 GMT
Not After : Jul 31 17:26:43 2025 GMT
Subject: CN=70AF89680D2DD267713A9252C6AAB3A3CFD428EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c4:95:f5:4e:19:6b:03:79:41:69:87:58:02:
d7:40:03:b0:13:57:f2:5b:de:95:49:b5:83:0b:cc:
6c:d5:b1:c9:b4:cd:39:10:77:8c:0d:e6:ad:d6:ee:
68:04:ff:6b:ec:9b:74:89:38:ef:62:2d:e0:f1:4a:
ca:8e:6a:ab:15:ed:d8:16:e8:01:2c:ed:a4:60:a5:
c5:96:6c:9a:a1:3f:3a:d0:ad:be:10:38:1b:0c:f9:
77:63:5b:ae:55:b6:cd:21:59:28:b2:99:89:74:99:
3a:7f:de:d3:e0:0c:10:71:5c:44:86:c0:a5:da:85:
1c:7e:f2:26:2f:4a:ec:a7:b4:07:5b:6a:74:62:a9:
d7:cc:59:8e:82:2c:8e:68:ec:9b:fd:31:ad:98:04:
18:91:a8:b9:df:f0:76:b3:92:03:cb:06:16:25:b8:
f2:58:31:84:8d:5f:5f:fd:75:c0:a3:cf:c8:83:35:
d3:dc:0d:40:2d:cd:0e:60:5e:55:c2:4c:64:a0:51:
f5:70:f3:dd:0b:91:0f:a8:d5:9d:5d:f0:89:b9:2f:
26:de:38:48:6d:4f:c9:bc:ff:3d:d5:d6:e3:0b:5a:
7d:b8:be:85:fa:ed:ad:f7:25:cf:62:66:37:4e:38:
94:ff:41:9d:ff:16:b6:e0:b4:02:4a:95:18:c2:f5:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AF:89:68:0D:2D:D2:67:71:3A:92:52:C6:AA:B3:A3:CF:D4:28:EE
X509v3 Authority Key Identifier:
keyid:C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32342e302f32322d3234203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.24.0/22
Signature Algorithm: sha256WithRSAEncryption
64:c1:a5:5d:f2:62:ac:e9:73:6e:0a:4b:94:cb:67:e1:04:0e:
2f:02:51:a3:7f:7a:e7:93:78:dc:1d:09:4e:97:cf:0f:19:0e:
54:90:e6:9a:56:68:e4:3c:0d:89:87:49:2c:9b:f9:e0:bb:fa:
95:0d:ba:d0:7b:d6:2b:ed:09:9d:c7:43:a5:9c:fd:39:45:15:
ff:a1:cd:23:95:53:f9:2f:89:c8:51:a4:ab:6e:e4:52:8b:89:
bf:ea:0f:cf:2c:cb:ab:d6:9b:68:a9:be:29:1a:db:c2:3c:1f:
1d:e8:48:69:a6:f3:d4:4b:cc:d9:48:4b:8e:17:b2:0e:50:77:
8d:b1:1e:5f:6a:9a:6c:3d:d2:e9:c2:cd:c4:7b:9a:d7:b3:cd:
df:a1:bf:25:92:f9:53:97:db:a0:d6:92:82:39:58:77:fd:af:
c0:36:d5:9c:fc:dd:8e:bd:cd:e2:08:08:0c:4d:79:b7:00:16:
ad:f4:aa:a8:39:4b:28:1b:d7:a7:55:b2:7d:d7:ce:94:3b:b8:
54:6e:ba:43:94:d2:e6:9e:f3:c2:85:48:3c:8a:f7:bb:c1:7e:
cc:6c:52:eb:ed:82:02:3a:d5:52:cf:d2:c8:c2:81:8f:7a:92:
ed:3a:91:32:46:73:17:d8:37:ba:49:72:30:e9:01:1c:0e:f3:
c9:8f:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:58:17 2025 by rpki-client