Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
File: 3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier: 4KNuw3KrhokAp07epZbqKXvturdr87y4wuDmG7XhaGQ=
Subject key identifier: F8:B1:87:2B:31:45:B0:D9:A0:B3:26:09:D4:33:4D:6B:EC:1A:D3:1F
Certificate issuer: /CN=614EF54DCD6F303805D5996E2C956F5A6154005E
Certificate serial: 3A52F50CF7F2EE877B102EE1B665C5105B16B2EC
Authority key identifier: 61:4E:F5:4D:CD:6F:30:38:05:D5:99:6E:2C:95:6F:5A:61:54:00:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
Signing time: Thu 10 Jul 2025 23:51:51 +0000
ROA not before: Thu 10 Jul 2025 23:46:51 +0000
ROA not after: Thu 09 Jul 2026 23:51:51 +0000
asID: 263584
IP address blocks: 177.129.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:52:f5:0c:f7:f2:ee:87:7b:10:2e:e1:b6:65:c5:10:5b:16:b2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614EF54DCD6F303805D5996E2C956F5A6154005E
Validity
Not Before: Jul 10 23:46:51 2025 GMT
Not After : Jul 9 23:51:51 2026 GMT
Subject: CN=F8B1872B3145B0D9A0B32609D4334D6BEC1AD31F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:bd:c2:98:67:07:0a:27:31:f4:20:62:de:
b4:c7:84:bd:c3:b1:84:2c:bf:bb:ea:b5:90:71:8b:
78:0d:a0:08:ac:53:8c:b1:97:ff:28:d9:fa:18:10:
93:4f:d5:da:76:04:21:73:cb:06:ca:46:92:bc:be:
4c:89:d9:26:7b:ea:5a:d5:ea:72:44:10:dd:ff:e1:
f0:8c:45:1f:1c:44:9d:31:24:c3:a5:72:35:eb:6d:
fe:49:b3:a1:07:fb:b2:83:86:05:3f:2a:a4:ba:99:
3e:fb:f3:7a:bc:78:9a:7a:48:ac:d0:3f:1a:04:01:
b8:c0:97:1d:96:6e:70:f0:65:ee:68:5b:e9:8f:7d:
ec:16:c8:f7:91:36:df:47:03:c9:f1:53:c2:a5:39:
cf:ed:12:ca:41:5c:66:83:14:4a:5b:af:9e:53:32:
b3:12:a9:41:32:da:0d:dc:0d:16:0f:48:e0:6c:fc:
f7:53:11:49:13:0d:b6:ee:88:4a:c6:54:91:d3:be:
36:65:08:ec:ca:84:b7:b0:78:f3:d9:db:19:9c:46:
0c:52:11:d1:8a:ae:da:d9:d1:d5:73:dd:e9:2f:0a:
04:58:f8:ba:6b:ee:8d:bc:48:dd:6c:36:0b:9d:c7:
88:4b:f8:a3:2c:d4:a7:ca:a0:9f:b3:14:77:f8:49:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:87:2B:31:45:B0:D9:A0:B3:26:09:D4:33:4D:6B:EC:1A:D3:1F
X509v3 Authority Key Identifier:
keyid:61:4E:F5:4D:CD:6F:30:38:05:D5:99:6E:2C:95:6F:5A:61:54:00:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.143.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b6:e9:c1:81:7b:fb:dc:9b:0c:b1:7f:a0:b8:90:f6:71:85:
9d:db:b8:76:fe:23:8f:97:a8:80:ed:89:7e:80:04:83:92:4d:
7c:7a:f8:18:e1:90:97:e9:31:37:b9:ee:76:95:6f:c9:e1:80:
4a:5f:b7:40:f3:c8:8b:99:d2:dc:d3:7e:57:99:17:3e:a4:46:
d3:b2:ac:1f:48:ee:9d:f2:58:aa:bd:8e:7e:56:f2:93:8f:ea:
68:c3:c2:5e:df:1c:79:eb:f7:0e:d3:52:8a:ae:47:20:2c:49:
d6:fe:50:8d:97:fa:42:a8:5f:1a:87:14:f0:2f:c9:de:07:a2:
85:14:21:9e:3e:5e:46:40:4b:66:f6:43:03:a4:6f:66:35:63:
d6:a2:16:54:52:c8:4c:f2:17:f1:ce:a6:a6:a8:b0:2a:f7:ee:
10:3d:3c:fc:d0:38:61:c6:2d:52:d7:26:53:b8:75:7d:27:58:
7c:c0:c5:26:c2:62:51:3b:cc:9a:d4:48:2c:03:7d:43:9c:c2:
2d:97:34:f8:8a:71:8f:32:fd:6d:03:9b:5b:8f:c7:a4:e9:ce:
72:1f:b6:6a:ba:8b:b4:aa:60:dd:92:66:0d:cc:96:bf:e1:64:
cf:a0:80:4d:0b:64:12:72:03:38:96:ac:9d:ea:47:93:6c:0e:
66:b7:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:17 2025 by rpki-client