Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134342e302f32302d3230203d3e20323632343031.roa
File: 3137372e33362e3134342e302f32302d3230203d3e20323632343031.roa (raw, json)
Hash identifier: U5Ac+BSqUzyZBO9GaSq3j9F0qLdWRyn6vqbVmmn1vwU=
Subject key identifier: 4B:99:C7:1C:B5:B5:F5:EE:30:C7:08:04:B1:D8:78:68:13:7F:B6:16
Certificate issuer: /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial: 1ECD1094981F927224F6044116F689BEFC6E70BF
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134342e302f32302d3230203d3e20323632343031.roa
Signing time: Thu 06 Mar 2025 11:29:49 +0000
ROA not before: Thu 06 Mar 2025 11:24:49 +0000
ROA not after: Thu 05 Mar 2026 11:29:49 +0000
asID: 262401
IP address blocks: 177.36.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:cd:10:94:98:1f:92:72:24:f6:04:41:16:f6:89:be:fc:6e:70:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Validity
Not Before: Mar 6 11:24:49 2025 GMT
Not After : Mar 5 11:29:49 2026 GMT
Subject: CN=4B99C71CB5B5F5EE30C70804B1D87868137FB616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1d:c0:69:4f:e0:7f:2e:98:5f:67:fe:50:c5:
f1:33:75:d1:2b:94:9d:12:28:1e:be:a4:f5:bb:33:
31:9a:fd:1e:84:76:be:44:67:3f:64:02:d1:21:60:
db:4b:a9:22:1b:bf:4d:d6:d1:b8:9b:23:b4:f0:12:
82:4e:3c:c1:79:61:8d:77:c8:9a:89:a8:a8:e6:a0:
2f:88:21:47:3a:7b:4a:bd:12:e0:32:36:8f:8a:bb:
97:68:48:bf:2f:7d:37:6e:33:7f:01:16:6d:3e:3d:
b7:05:b4:1a:a7:55:2c:bc:a3:23:9d:a8:13:59:83:
d4:00:2d:d0:a0:de:34:fd:65:af:6e:b1:b6:66:06:
88:cc:a2:e4:35:28:34:35:4d:71:a1:02:55:fe:9b:
6d:70:da:4a:63:ca:ca:fa:96:cd:00:3e:8a:e1:25:
9e:97:1a:0d:32:60:74:df:da:24:ea:5c:80:1c:0a:
66:ac:44:3d:16:8c:98:55:5d:7d:eb:12:5f:9b:09:
a5:92:4c:16:48:8b:b2:ca:c0:65:8f:9f:02:59:29:
a5:ef:fd:19:d8:d8:31:3a:57:ef:b3:0c:84:d0:07:
3b:89:fd:b4:5e:24:25:fa:df:fb:e8:9e:2d:bf:25:
a2:f6:98:a3:71:e9:77:eb:1e:c4:45:bf:4d:89:89:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:99:C7:1C:B5:B5:F5:EE:30:C7:08:04:B1:D8:78:68:13:7F:B6:16
X509v3 Authority Key Identifier:
keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134342e302f32302d3230203d3e20323632343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.144.0/20
Signature Algorithm: sha256WithRSAEncryption
89:28:23:a5:dd:60:39:eb:2e:7f:4a:d0:3e:53:e7:c1:f0:33:
c7:57:a0:f3:e2:07:a3:72:6f:2e:04:c6:51:ce:3a:e4:61:be:
49:2a:2f:0d:55:33:4a:37:52:43:80:ce:e4:9d:c5:f5:17:db:
ac:e3:ed:d0:c2:5f:42:f6:4f:cd:29:ae:8b:11:6b:83:d0:73:
70:79:9d:a3:5b:f7:cf:ce:9c:00:58:d3:f3:82:09:b0:00:f5:
d5:7a:9a:e4:53:b9:3a:31:4e:05:16:78:00:0a:9c:cf:46:43:
b4:c9:2d:a5:5e:da:24:5a:fc:24:e1:57:6f:e0:6b:ba:c5:82:
0a:43:d2:67:44:e4:09:a5:6e:94:a4:97:62:6b:c4:3b:66:1f:
96:2f:de:2b:5c:ca:6c:5e:13:41:6b:8e:b0:d4:38:8a:ba:10:
13:c5:d6:ec:b8:3f:10:68:a2:eb:78:90:ba:e7:40:7d:99:68:
b1:c8:e9:76:47:58:37:8f:3c:ce:df:86:02:9f:de:a7:28:3f:
df:00:1c:09:99:0c:10:69:97:b6:3b:b8:98:d3:4e:54:68:44:
5c:cf:56:21:6c:bc:01:c9:4b:49:5a:f4:e8:30:59:89:b9:4b:
ea:2e:59:b5:cc:21:25:1b:b3:36:04:eb:8e:b7:02:46:53:69:
ff:a9:5e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:46:25 2025 by rpki-client