Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32342d3234203d3e20323632343031.roa
File: 3137372e33362e3132382e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier: AwkaPJOYs0mQNEPUCVb47B7u5K06gAAIrtQFehuPun8=
Subject key identifier: 96:6D:43:EE:CB:53:3A:E0:43:97:7D:A3:C7:B3:FD:02:80:50:9F:BE
Certificate issuer: /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial: 212E756E8A533B3E3541A3EE2FC6842B6A02F4AA
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32342d3234203d3e20323632343031.roa
Signing time: Thu 06 Mar 2025 11:29:50 +0000
ROA not before: Thu 06 Mar 2025 11:24:50 +0000
ROA not after: Thu 05 Mar 2026 11:29:50 +0000
asID: 262401
IP address blocks: 177.36.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:2e:75:6e:8a:53:3b:3e:35:41:a3:ee:2f:c6:84:2b:6a:02:f4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Validity
Not Before: Mar 6 11:24:50 2025 GMT
Not After : Mar 5 11:29:50 2026 GMT
Subject: CN=966D43EECB533AE043977DA3C7B3FD0280509FBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:d6:f0:21:b8:94:51:33:73:a0:d7:b3:76:
e6:57:b0:07:ee:eb:a5:54:65:44:14:ae:51:cb:71:
0a:f8:c9:b9:bd:2f:b3:4f:97:7d:b3:1a:56:c5:88:
05:a6:9c:e8:73:b6:ec:f6:ab:5a:8f:5e:a8:03:5f:
10:bf:0e:8b:0a:44:4f:21:c9:eb:b4:3c:74:b5:58:
f4:5f:ae:7d:5b:67:d3:7c:1d:b5:5d:b8:14:22:42:
2d:c0:fd:c7:fa:d5:3c:3c:c0:89:e7:8d:d5:75:4c:
fe:c7:c7:13:76:c3:bb:7d:76:b9:83:6f:93:3f:2b:
47:8a:cc:93:49:da:c9:7e:fe:4d:e9:6c:b4:4d:09:
2b:76:5d:05:da:24:7b:26:cc:be:e8:9e:bd:55:1e:
be:20:82:03:df:c3:14:d7:92:b0:27:51:fa:fb:16:
09:b3:2f:4f:a9:83:30:28:e2:74:33:a8:18:2f:7a:
95:cf:18:03:6d:0b:54:74:79:1e:2b:70:dd:df:9f:
3b:22:d4:a3:4c:49:1f:e3:f4:c0:8f:38:4e:6c:c2:
96:fa:02:58:37:bc:d2:91:0b:f0:75:26:64:04:50:
fb:cc:a6:83:4b:57:5f:65:fe:2c:84:9e:84:6b:07:
9d:c7:42:6c:43:42:34:27:db:d1:93:51:8f:4e:d9:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:43:EE:CB:53:3A:E0:43:97:7D:A3:C7:B3:FD:02:80:50:9F:BE
X509v3 Authority Key Identifier:
keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32342d3234203d3e20323632343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.128.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c4:a4:10:6b:f8:70:72:c4:ae:28:3f:76:9f:df:4a:5d:4d:
c2:4b:01:51:6a:63:df:2e:b3:d1:eb:d5:4e:80:02:11:af:06:
19:f4:02:ab:b6:d9:40:d9:80:83:92:eb:29:75:2a:24:20:be:
28:7a:16:e0:6a:e9:68:96:01:db:35:e4:b3:0b:53:41:27:9c:
c1:91:42:7d:e8:23:2d:84:b8:53:65:89:20:26:df:a8:0f:09:
96:e0:85:fe:d1:8e:2f:89:7b:03:4d:5c:9f:4f:f6:9a:d2:cf:
25:50:03:80:07:05:5b:fe:09:d0:72:01:6b:a8:f9:0b:ea:fa:
9f:9d:97:43:2e:7b:35:86:fa:b9:dd:c2:f6:16:69:cd:f3:1b:
78:61:26:46:b2:75:41:b7:12:02:00:d0:8a:15:5d:bd:a4:00:
60:c4:36:e0:2b:61:b2:52:b0:35:91:4a:d4:fb:ee:f1:a5:b8:
b4:d3:42:75:c4:5a:f2:a4:07:6b:89:bc:a5:7e:1e:e4:ba:dc:
f0:5a:b5:19:d7:c8:ce:4b:dc:7c:ee:bc:8a:0d:f5:e7:a3:2b:
93:14:16:16:0b:8d:24:7a:c7:cf:40:9f:2e:65:18:cc:43:d9:
9e:c9:29:fe:d3:74:83:44:5d:45:91:33:4b:ef:b5:d8:16:d9:
98:77:ef:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:34:14 2025 by rpki-client