Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3230312e37372e3136302e302f32302d3230203d3e203238363536.roa
File: 3230312e37372e3136302e302f32302d3230203d3e203238363536.roa (raw, json)
Hash identifier: atkU4NvG3kQi+s1RgF97GvOU0VSbEmDvrjYsdgPhGs0=
Subject key identifier: 84:08:FD:32:A6:54:09:4D:57:02:E9:EB:90:BC:E1:2D:3A:40:A3:A3
Certificate issuer: /CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Certificate serial: 415AA61DFE2B55FAC19157A5F5D0DA893308670F
Authority key identifier: 1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3230312e37372e3136302e302f32302d3230203d3e203238363536.roa
Signing time: Tue 12 Sep 2023 14:13:10 +0000
ROA not before: Tue 12 Sep 2023 14:08:10 +0000
ROA not after: Tue 10 Sep 2024 14:13:10 +0000
asID: 28656
IP address blocks: 201.77.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:5a:a6:1d:fe:2b:55:fa:c1:91:57:a5:f5:d0:da:89:33:08:67:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Validity
Not Before: Sep 12 14:08:10 2023 GMT
Not After : Sep 10 14:13:10 2024 GMT
Subject: CN=8408FD32A654094D5702E9EB90BCE12D3A40A3A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c7:f6:51:e7:c6:22:ed:0a:db:43:96:55:6d:
8b:c5:2f:37:82:42:ec:1e:65:2e:bb:e3:c9:7e:e5:
22:59:75:f5:70:88:77:cc:1b:96:35:ca:6f:d3:c9:
fe:d1:6c:c4:d5:7a:f6:da:e1:30:66:e5:d9:12:1a:
b5:57:e5:2b:0c:dc:29:31:f1:9b:ae:15:67:73:65:
c0:e4:ac:60:2f:c4:ea:e1:62:fb:58:2d:4f:64:7b:
28:7c:6b:08:77:d6:49:90:09:19:8e:37:b9:ce:1a:
ab:36:aa:04:62:7d:b3:ca:72:bc:38:2f:af:22:f8:
44:57:40:86:58:c5:b4:fe:53:d5:f9:60:00:59:7f:
5b:63:aa:83:ed:27:ad:b9:53:d5:dc:59:56:02:07:
75:fb:86:11:19:8e:94:d9:cf:d1:53:b5:c8:28:47:
cc:b0:8c:ee:08:b2:49:95:49:73:5d:ec:87:9d:39:
c1:ff:be:23:e2:d0:7b:d1:7f:0e:6c:db:19:4a:a5:
a7:53:a0:89:23:d6:a5:1d:d2:fb:e9:47:60:02:52:
04:43:bb:e8:d8:55:95:5b:f1:c5:5d:9c:eb:fb:27:
52:7b:9f:c6:ae:84:4a:3e:62:5c:13:85:2b:d5:38:
0b:99:1e:4d:96:4f:3f:f2:6b:9a:2e:40:ed:e6:cd:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:08:FD:32:A6:54:09:4D:57:02:E9:EB:90:BC:E1:2D:3A:40:A3:A3
X509v3 Authority Key Identifier:
keyid:1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3230312e37372e3136302e302f32302d3230203d3e203238363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.160.0/20
Signature Algorithm: sha256WithRSAEncryption
70:24:f7:3f:74:52:55:f2:c0:fe:4e:94:c3:61:c1:2f:6f:6c:
c9:d2:ef:2a:ac:e8:b8:ea:be:e8:8f:54:e8:a6:33:ab:f2:99:
52:5c:f9:c9:f6:97:07:c7:3f:e6:3b:b9:c0:4c:57:9f:5d:d2:
f7:ca:3a:d6:72:99:af:cf:65:18:fb:a6:d8:32:7c:a5:50:28:
5c:2c:cf:e6:ac:92:a5:3d:dd:6c:27:8b:30:ee:19:4f:8f:54:
b5:af:4c:cc:f2:25:19:01:22:dc:91:a8:c1:c4:aa:92:ad:a6:
eb:2e:dd:2a:d5:fb:a1:99:13:8c:bc:b2:b2:c8:20:be:c7:7e:
14:e3:62:20:8b:77:93:2e:64:e9:6e:59:76:4a:2d:88:ff:c5:
4f:ae:85:21:40:82:f3:f2:0b:61:58:91:e1:fe:2c:92:6f:43:
25:15:cf:75:fb:36:ee:f8:4d:41:fa:6f:31:18:4c:43:3c:5e:
27:70:f0:8d:5b:c4:92:c1:24:14:df:2d:2b:e1:86:35:94:09:
c8:ae:e9:9c:78:3b:ea:25:22:c1:b7:b6:af:6c:e9:35:11:ca:
85:f7:1a:5c:81:6c:e5:13:92:ef:a6:fb:ba:b6:d0:84:30:d3:
ad:b0:da:4e:45:06:7f:24:01:6b:db:cc:94:93:c7:38:8d:30:
3b:36:93:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:13:00 2025 by rpki-client