Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/3137372e3132382e3132302e302f32322d3332203d3e203532383730.roa
File: 3137372e3132382e3132302e302f32322d3332203d3e203532383730.roa (raw, json)
Hash identifier: PzS/3KJRjphWMdqQHaIvCKKvdnE2yLnV5pL9Jhr7ywg=
Subject key identifier: 94:C0:4F:E8:C5:A5:CD:02:3B:C0:22:4E:C0:B6:07:AB:6C:E3:BB:8D
Certificate issuer: /CN=2F8C4EECD957464FDCE83518985B0C91CC92EBC4
Certificate serial: 2391E984EDA56769489585C1C8010E4527D76862
Authority key identifier: 2F:8C:4E:EC:D9:57:46:4F:DC:E8:35:18:98:5B:0C:91:CC:92:EB:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F8C4EECD957464FDCE83518985B0C91CC92EBC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/3137372e3132382e3132302e302f32322d3332203d3e203532383730.roa
Signing time: Fri 20 Jun 2025 16:35:38 +0000
ROA not before: Fri 20 Jun 2025 16:30:38 +0000
ROA not after: Fri 19 Jun 2026 16:35:38 +0000
asID: 52870
IP address blocks: 177.128.120.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:91:e9:84:ed:a5:67:69:48:95:85:c1:c8:01:0e:45:27:d7:68:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F8C4EECD957464FDCE83518985B0C91CC92EBC4
Validity
Not Before: Jun 20 16:30:38 2025 GMT
Not After : Jun 19 16:35:38 2026 GMT
Subject: CN=94C04FE8C5A5CD023BC0224EC0B607AB6CE3BB8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:93:56:c7:b7:72:0f:a1:d9:0a:a3:6d:dc:
a3:08:de:a5:7f:3e:58:32:3f:32:b3:a3:06:ad:bc:
6b:6e:64:b4:71:de:87:72:e1:25:4a:63:b8:27:0e:
c7:b7:f0:72:c0:76:ce:48:66:1a:46:f5:fe:03:58:
bf:5f:89:46:b1:cb:0a:23:ab:ed:34:11:f7:de:d1:
13:64:a3:d7:b3:cc:07:02:2c:67:c1:d8:e1:d3:7a:
10:e7:db:68:5b:d1:8a:e5:b8:bd:96:51:cc:bc:43:
21:d3:e4:33:16:58:34:e3:29:23:a3:39:b7:07:fc:
92:7e:9d:fc:a9:90:f5:a8:e3:6b:e3:f0:c5:25:3a:
8a:36:5a:45:9e:9e:3c:4a:2e:d1:2b:7c:53:b9:75:
0c:1a:f4:f4:a4:82:7d:bb:10:59:a5:f5:89:b3:27:
f8:cb:fc:91:91:19:f1:38:22:03:9d:e0:ba:46:3e:
63:ee:d5:38:43:0e:bd:2a:8d:9e:e6:94:d1:7d:67:
24:c2:4a:28:12:6a:55:04:fd:93:a1:42:c9:2e:e9:
52:c1:97:29:7d:51:91:7f:6f:9a:db:9e:1b:30:61:
29:a3:55:48:66:bf:41:70:74:85:1d:e4:94:8c:ef:
5c:3e:ca:cd:52:0f:94:b8:1c:9b:ad:ec:b6:ae:25:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C0:4F:E8:C5:A5:CD:02:3B:C0:22:4E:C0:B6:07:AB:6C:E3:BB:8D
X509v3 Authority Key Identifier:
keyid:2F:8C:4E:EC:D9:57:46:4F:DC:E8:35:18:98:5B:0C:91:CC:92:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/2F8C4EECD957464FDCE83518985B0C91CC92EBC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F8C4EECD957464FDCE83518985B0C91CC92EBC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/3137372e3132382e3132302e302f32322d3332203d3e203532383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.120.0/22
Signature Algorithm: sha256WithRSAEncryption
19:ee:e8:a8:54:01:db:cf:43:b7:3c:b5:57:d0:0d:e8:6e:29:
ca:e9:bd:33:09:e0:31:d2:37:cc:2b:d8:e4:7e:fd:07:a5:2b:
00:91:7b:8d:04:06:78:7d:3b:ed:ca:d8:02:0d:ef:09:7b:ae:
c2:68:43:44:e8:4f:7e:af:6f:c9:c2:c9:ed:37:df:d3:16:10:
90:50:0b:04:fe:04:72:27:be:a3:37:e7:0b:b1:16:3d:39:e9:
c7:8b:3f:a9:8d:b3:32:99:9c:8c:89:1f:ab:30:99:cc:1c:8d:
3c:93:7c:c6:1c:35:fb:ee:f0:e7:ce:31:96:8c:dd:93:95:32:
bf:c2:5a:46:97:8b:53:90:c1:d5:06:27:28:e7:18:89:f6:f9:
5c:84:45:28:2a:d4:c2:9a:a5:9a:1b:ea:e5:28:7a:48:1c:78:
84:2f:3a:fd:18:e5:04:66:68:bc:5a:33:8e:0b:96:15:0c:c4:
0a:9c:aa:f7:5a:b9:01:81:ba:ba:9c:9d:8e:b7:ee:3f:80:54:
77:b4:65:84:55:ca:fd:fb:44:0d:40:14:5a:5b:a3:de:39:6c:
ce:0d:e4:c1:0a:27:2f:63:4a:3d:29:48:b5:b7:e5:80:90:fc:
34:d5:3d:37:f2:4f:21:7e:4e:64:00:c3:9a:7b:dd:ca:50:e3:
e3:e0:1b:5a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI5HphO2lZ2lIlYXByAEORSfXaGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY4QzRFRUNEOTU3NDY0RkRDRTgzNTE4OTg1QjBDOTFD
QzkyRUJDNDAeFw0yNTA2MjAxNjMwMzhaFw0yNjA2MTkxNjM1MzhaMDMxMTAvBgNV
BAMTKDk0QzA0RkU4QzVBNUNEMDIzQkMwMjI0RUMwQjYwN0FCNkNFM0JCOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzspNWx7dyD6HZCqNt3KMI3qV/
PlgyPzKzowatvGtuZLRx3ody4SVKY7gnDse38HLAds5IZhpG9f4DWL9fiUaxywoj
q+00Effe0RNko9ezzAcCLGfB2OHTehDn22hb0YrluL2WUcy8QyHT5DMWWDTjKSOj
ObcH/JJ+nfypkPWo42vj8MUlOoo2WkWenjxKLtErfFO5dQwa9PSkgn27EFml9Ymz
J/jL/JGRGfE4IgOd4LpGPmPu1ThDDr0qjZ7mlNF9ZyTCSigSalUE/ZOhQsku6VLB
lyl9UZF/b5rbnhswYSmjVUhmv0FwdIUd5JSM71w+ys1SD5S4HJut7LauJUuFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlMBP6MWlzQI7wCJOwLYHq2zju40wHwYDVR0j
BBgwFoAUL4xO7NlXRk/c6DUYmFsMkcyS68QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdyd0dBeXhja1NZaDdIZVM3SEtNdmpXSGtXUDNFUmRROTFOZHh5ZnB4
ZjQvMC8yRjhDNEVFQ0Q5NTc0NjRGRENFODM1MTg5ODVCMEM5MUNDOTJFQkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGOEM0RUVDRDk1NzQ2NEZE
Q0U4MzUxODk4NUIwQzkxQ0M5MkVCQzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3cndHQXl4Y2tTWWg3SGVTN0hLTXZqV0hrV1AzRVJkUTkxTmR4eWZweGY0LzAv
MzEzNzM3MmUzMTMyMzgyZTMxMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzIzODM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxgHgwDQYJKoZIhvcNAQELBQADggEBABnu6KhU
AdvPQ7c8tVfQDehuKcrpvTMJ4DHSN8wr2OR+/QelKwCRe40EBnh9O+3K2AIN7wl7
rsJoQ0ToT36vb8nCye0339MWEJBQCwT+BHInvqM35wuxFj056ceLP6mNszKZnIyJ
H6swmcwcjTyTfMYcNfvu8OfOMZaM3ZOVMr/CWkaXi1OQwdUGJyjnGIn2+VyERSgq
1MKapZob6uUoekgceIQvOv0Y5QRmaLxaM44LlhUMxAqcqvdauQGBurqcnY637j+A
VHe0ZYRVyv37RA1AFFpbo945bM4N5MEKJy9jSj0pSLW35YCQ/DTVPTfyTyF+TmQA
w5p73cpQ4+PgG1o=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:46:29 2025 by rpki-client