Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/3137372e3132352e3133322e302f32322d3234203d3e203532363431.roa
File: 3137372e3132352e3133322e302f32322d3234203d3e203532363431.roa (raw, json)
Hash identifier: NcVdA4dqzUkkdQi3KIi11cMGwu5C1GJH+fzasZF+KY8=
Subject key identifier: FF:AA:DB:FE:E3:E9:04:AA:ED:71:A0:EC:C6:49:9B:C8:75:1F:B9:9B
Certificate issuer: /CN=3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5
Certificate serial: 1AFB32BC1B1921C4AA527C4E900AAF40D0B8D1D0
Authority key identifier: 3B:C3:59:60:C4:5E:5F:0F:3B:6E:DE:F9:9F:63:19:12:B3:4F:A4:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/3137372e3132352e3133322e302f32322d3234203d3e203532363431.roa
Signing time: Fri 24 Jan 2025 15:24:01 +0000
ROA not before: Fri 24 Jan 2025 15:19:01 +0000
ROA not after: Fri 23 Jan 2026 15:24:01 +0000
asID: 52641
IP address blocks: 177.125.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:fb:32:bc:1b:19:21:c4:aa:52:7c:4e:90:0a:af:40:d0:b8:d1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5
Validity
Not Before: Jan 24 15:19:01 2025 GMT
Not After : Jan 23 15:24:01 2026 GMT
Subject: CN=FFAADBFEE3E904AAED71A0ECC6499BC8751FB99B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:2a:f0:1e:34:0b:c3:6d:92:9e:25:59:b2:
8c:3c:6d:50:df:8a:0a:56:3f:d8:34:73:a4:02:f3:
ad:19:80:f3:d0:47:8a:60:f4:de:60:d9:dc:1f:ab:
16:28:78:7d:e7:44:14:43:37:f3:57:b8:f0:12:33:
87:e2:31:ff:5d:87:fd:44:4c:15:2f:79:11:12:8b:
5b:53:37:8b:61:63:f7:a7:e1:8b:9f:e3:da:2a:36:
60:d1:b3:08:67:56:ef:c8:81:84:09:fb:ff:5d:da:
6d:14:de:01:c8:5c:e0:40:b3:8f:fb:b5:f3:df:62:
f5:1b:3e:35:3e:02:5f:1e:10:44:9a:8a:21:db:61:
8c:2c:7a:e6:6b:8a:f8:bd:2d:be:5a:78:47:4a:f7:
7b:26:cc:de:c4:a8:82:f4:46:ad:65:10:97:ab:9b:
ee:e5:58:38:00:38:27:7e:1e:ea:05:34:1d:e1:be:
e8:4c:55:d0:4c:17:5a:2d:ab:bd:0d:e4:29:6a:18:
fb:08:cf:1a:cb:ff:34:8e:a9:22:ca:f9:69:c5:81:
a5:4b:db:71:ca:f1:30:0c:a0:d7:61:e1:a0:b1:ca:
e0:55:c3:64:6a:ec:ed:60:fc:14:ea:1a:df:27:77:
b3:09:5e:4f:1b:9e:83:28:d6:15:44:e7:37:ea:a0:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:DB:FE:E3:E9:04:AA:ED:71:A0:EC:C6:49:9B:C8:75:1F:B9:9B
X509v3 Authority Key Identifier:
keyid:3B:C3:59:60:C4:5E:5F:0F:3B:6E:DE:F9:9F:63:19:12:B3:4F:A4:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/3137372e3132352e3133322e302f32322d3234203d3e203532363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:b1:6d:b7:4e:65:6f:84:bf:1c:8b:d1:80:ab:ca:50:54:b0:
31:e1:71:53:60:45:9d:c1:ea:45:c5:04:13:11:31:9e:64:98:
37:9c:47:ea:09:6c:a1:f5:29:59:f5:ce:1d:fd:78:56:6c:63:
ce:0e:83:14:ce:17:30:aa:66:2d:7e:80:6a:70:c8:a0:fd:a4:
78:27:b6:1c:e4:69:3d:6e:93:4e:25:55:40:a0:5a:a0:83:2b:
08:72:b5:83:e6:7d:5a:55:ee:3f:9f:3c:9d:30:a8:42:1a:f1:
a3:59:2a:71:09:01:42:aa:28:9a:fa:15:80:d1:a3:c9:b4:5f:
f2:8b:18:61:96:b4:9c:ef:1b:03:e4:e6:86:b5:84:cc:05:da:
e7:5b:00:a1:10:63:8c:d9:ca:b4:8c:4e:af:ca:d3:62:0f:9a:
a4:63:1c:bd:a0:f1:35:57:19:a5:3f:87:31:60:1b:e2:f4:43:
a2:22:65:b5:ca:a0:14:fc:2e:21:4a:0e:3f:86:28:51:e7:3f:
82:5c:a3:81:11:7f:44:f0:d0:8b:b2:c7:92:f6:31:65:ca:e4:
2a:d1:98:e6:3d:59:67:68:38:3c:9f:b6:4d:02:79:b2:b2:6e:
d4:0c:fc:27:0d:f7:c0:20:1f:ac:cf:f9:28:c3:12:85:ed:55:
00:09:86:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:19:40 2025 by rpki-client