Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3232302e302f32322d3232203d3e20323632383638.roa
File: 3137372e32302e3232302e302f32322d3232203d3e20323632383638.roa (raw, json)
Hash identifier: ws8ISeB3/o0FKnip6d8MzCgKOcAC079DbVzeiEGmEOA=
Subject key identifier: 51:CC:9C:27:C1:D3:7C:0F:51:19:B4:73:30:58:D4:B5:07:FE:83:5B
Certificate issuer: /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial: 7921F5004E452DD4A166771B4B46D6D8D0BC41B6
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access: rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3232302e302f32322d3232203d3e20323632383638.roa
Signing time: Thu 04 Apr 2024 11:06:54 +0000
ROA not before: Thu 04 Apr 2024 11:01:54 +0000
ROA not after: Thu 03 Apr 2025 11:06:54 +0000
asID: 262868
IP address blocks: 177.20.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:21:f5:00:4e:45:2d:d4:a1:66:77:1b:4b:46:d6:d8:d0:bc:41:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Validity
Not Before: Apr 4 11:01:54 2024 GMT
Not After : Apr 3 11:06:54 2025 GMT
Subject: CN=51CC9C27C1D37C0F5119B4733058D4B507FE835B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:df:81:5a:e3:82:2f:2c:3b:74:14:0e:cb:
0d:00:c0:cc:db:2e:ce:d0:34:ac:68:10:e7:70:4c:
10:18:30:75:b2:f4:3f:13:64:70:19:a3:95:79:e8:
61:b0:d0:72:73:0d:10:d3:0d:d0:1a:6a:22:31:26:
b6:cf:50:5e:e8:95:6c:dd:b9:f0:dd:22:6c:1f:b6:
37:09:b3:37:f4:0b:49:4b:7a:d9:96:56:ce:a9:4c:
75:00:e1:ff:98:3a:bb:96:92:b2:93:9e:4d:b7:66:
68:53:67:e3:be:82:cd:4f:4c:39:8d:8a:b0:29:7e:
2f:77:18:42:5f:1c:58:fe:70:b9:c3:0b:78:93:9d:
35:65:ac:bb:a3:19:24:31:e4:2c:d2:65:a5:03:e3:
2e:f8:c0:44:4f:cc:ae:40:5f:d8:dc:84:2e:a4:48:
f4:fa:59:79:ad:d2:71:c0:62:ab:04:f1:71:4a:e0:
70:ed:a9:09:19:6f:2c:56:14:26:ee:87:50:8b:3a:
41:8b:b9:95:ab:73:c3:1b:f6:1d:bc:93:86:68:32:
d1:ce:43:b9:bc:43:da:a0:77:d3:45:ce:c5:9f:e7:
ae:a1:b6:ec:9f:f3:7d:6c:c0:ae:a9:66:62:b6:f8:
91:d8:1c:78:57:37:c1:58:7d:46:4b:8a:47:40:3a:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CC:9C:27:C1:D3:7C:0F:51:19:B4:73:30:58:D4:B5:07:FE:83:5B
X509v3 Authority Key Identifier:
keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3232302e302f32322d3232203d3e20323632383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.20.220.0/22
Signature Algorithm: sha256WithRSAEncryption
15:da:8d:3a:e3:fa:6c:1f:ba:d2:a7:73:d2:82:57:b7:3b:92:
64:67:99:33:11:69:99:71:92:fb:d6:87:3d:68:c3:85:57:89:
47:7f:fa:d7:db:43:6f:98:af:48:66:23:c2:5e:4d:f1:91:dc:
4c:a5:0e:18:82:4d:72:a0:b1:30:a1:93:43:d4:90:4a:8c:9f:
36:be:26:f2:1d:6d:bf:4c:18:4b:90:fb:5f:5f:b7:5f:30:9a:
d7:f5:13:d9:7f:5d:ef:ea:be:9b:f7:2f:e6:6c:43:64:f9:0b:
25:a9:37:5a:a8:73:19:f1:eb:6b:e4:33:5e:dc:35:0a:74:77:
03:5a:ba:41:26:3f:21:3c:1e:66:a4:72:4d:42:37:1a:e8:98:
23:8c:bb:48:2c:f2:96:9a:33:55:11:97:51:b6:bc:60:b0:c4:
d3:f0:4a:15:d2:20:86:73:cb:f3:33:09:b0:b1:14:d4:dc:7b:
88:ae:7a:68:8f:b9:1a:d7:de:60:05:12:d7:0c:1a:9a:eb:bf:
d3:f9:85:48:c6:e4:28:ae:d0:b9:71:31:aa:f4:d5:aa:e2:f2:
b7:44:da:08:6c:cc:64:9e:6a:92:ba:5d:7b:da:b3:c5:a6:ca:
ed:c3:37:1e:18:5d:e9:5c:a0:cc:50:ca:f3:10:ce:ab:7c:fb:
db:56:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:57:51 2025 by rpki-client