Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa
File: 3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa (raw, json)
Hash identifier: lHXFsQFU/dH5ZkgwlOlPYyQwqVEdQJf51MPB5hCnefo=
Subject key identifier: F4:24:BE:9F:6A:EB:30:CF:25:78:08:90:4F:E0:DC:E7:46:4C:1F:65
Certificate issuer: /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial: 01AACF2260A4076A24D0267C2AB32292B4F6BB38
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa
Signing time: Thu 04 Apr 2024 07:48:33 +0000
ROA not before: Thu 04 Apr 2024 07:43:33 +0000
ROA not after: Thu 03 Apr 2025 07:48:33 +0000
asID: 262354
IP address blocks: 177.125.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:aa:cf:22:60:a4:07:6a:24:d0:26:7c:2a:b3:22:92:b4:f6:bb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Validity
Not Before: Apr 4 07:43:33 2024 GMT
Not After : Apr 3 07:48:33 2025 GMT
Subject: CN=F424BE9F6AEB30CF257808904FE0DCE7464C1F65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:4c:8a:82:7f:2e:92:fe:9d:b5:7e:f0:04:
66:d5:e6:1d:c7:35:12:93:91:4f:ec:b2:79:01:04:
0b:76:aa:15:81:f2:6d:f7:a3:38:46:b7:3d:c2:16:
60:62:2a:33:cc:a0:9d:3b:3f:c2:b0:fb:52:30:ac:
44:25:43:96:51:e0:d2:80:47:1c:88:1b:0d:34:34:
f6:e6:e0:06:d4:af:a3:28:ee:08:34:12:47:1f:83:
a0:29:f1:27:f9:66:30:47:0c:7c:14:bc:fd:6c:55:
fc:8f:19:0f:0b:67:1b:4a:c7:8f:db:3c:ba:51:13:
94:2d:f2:eb:b2:6d:98:62:83:d6:51:73:e2:a1:d4:
32:30:af:13:42:4c:00:bf:09:d7:e1:97:f1:bb:02:
30:9c:38:9a:e3:f8:41:1e:16:e0:b9:c5:d3:94:5f:
2d:76:fb:58:71:53:a8:8a:75:a7:90:d2:48:8f:3e:
e0:eb:e2:ac:08:7a:91:fa:04:12:06:38:d4:24:7f:
5e:51:8d:92:6b:37:de:c5:30:eb:3c:9a:27:a9:59:
01:bb:90:37:c6:ab:f5:96:d7:99:9b:40:b4:55:21:
84:ba:69:63:de:9e:7c:52:0a:00:13:43:49:17:bb:
22:16:a1:b8:8d:33:5a:9e:c7:57:c2:2b:ef:af:fb:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:24:BE:9F:6A:EB:30:CF:25:78:08:90:4F:E0:DC:E7:46:4C:1F:65
X509v3 Authority Key Identifier:
keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.208.0/22
Signature Algorithm: sha256WithRSAEncryption
49:88:51:a8:4d:1a:57:55:dc:a3:21:7e:6b:8b:68:ff:33:cb:
0a:48:67:8a:06:24:fc:63:7b:51:0e:41:6e:3e:ce:2e:1e:84:
af:1d:8e:85:ac:60:a0:9b:63:cd:93:3b:c3:cf:3a:ca:dc:90:
74:45:1b:34:56:2a:ca:fc:35:49:3c:7b:e1:ed:ed:e7:0f:33:
c5:97:f9:a7:b5:3e:20:e1:aa:c3:a8:08:80:c5:25:ea:5e:ec:
6e:3f:6b:4f:df:25:78:bd:b5:3c:70:f2:50:58:d3:73:71:40:
cc:5b:f6:da:10:10:f9:be:3f:51:c9:15:3c:36:0e:b6:12:23:
67:13:a7:d8:6e:54:9a:b2:32:44:22:c4:23:63:73:35:4f:03:
17:40:1d:f4:95:ac:73:3b:22:e4:9c:94:d9:d0:29:12:84:6b:
5c:91:47:ba:fb:7c:1b:ac:67:2e:e3:59:50:c8:97:bd:10:e4:
32:2e:55:f9:42:44:9a:49:6d:66:7b:83:e2:1a:11:a0:15:85:
d3:c3:b0:af:16:39:7a:49:85:11:4a:9b:ca:01:0e:34:d9:c0:
43:6a:cd:3a:97:53:8d:91:c3:6e:5d:be:70:f3:1b:08:92:ef:
98:f5:33:c5:30:b4:4e:57:fe:5d:3f:14:8b:65:63:3d:5e:5c:
d4:40:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:10 2025 by rpki-client