Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135312e302f32342d3234203d3e20323632343031.roa
File: 3137372e33362e3135312e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier: xxbL9wUtn5c2oETW14Gmvkh/vTXHTiijlAUP0QBLrlE=
Subject key identifier: 97:D8:37:DB:A4:B3:E1:9C:91:6B:EE:23:8F:1E:D6:B1:71:52:F5:EE
Certificate issuer: /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial: 7AB9E2BE63584411D8FFBBC765D7D1B630178F1C
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135312e302f32342d3234203d3e20323632343031.roa
Signing time: Thu 06 Mar 2025 11:29:45 +0000
ROA not before: Thu 06 Mar 2025 11:24:45 +0000
ROA not after: Thu 05 Mar 2026 11:29:45 +0000
asID: 262401
IP address blocks: 177.36.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b9:e2:be:63:58:44:11:d8:ff:bb:c7:65:d7:d1:b6:30:17:8f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Validity
Not Before: Mar 6 11:24:45 2025 GMT
Not After : Mar 5 11:29:45 2026 GMT
Subject: CN=97D837DBA4B3E19C916BEE238F1ED6B17152F5EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:82:df:ec:cb:76:1f:55:21:38:d2:eb:c6:
5b:94:00:f6:d2:dc:ad:23:d1:c1:6e:73:6b:ad:60:
58:82:4f:11:12:48:9e:aa:0d:bf:47:dd:55:f9:fc:
2f:8c:3f:d2:0c:f7:93:2f:d5:32:a7:7e:08:e9:c8:
51:9b:ae:59:da:93:78:c7:e5:96:de:e9:39:17:4e:
54:79:dd:73:5d:6d:ba:96:76:a9:2c:b4:ab:6e:bf:
8d:f2:74:37:80:8f:0c:ec:0d:2f:6b:54:48:39:c7:
02:1b:77:6b:11:27:21:75:a7:de:83:62:5f:ca:56:
b6:69:16:cf:cf:b7:6c:70:aa:cb:8c:d0:33:32:ff:
72:c8:50:96:33:90:7a:8e:54:95:41:be:2b:59:2b:
33:65:5e:0e:44:3d:7b:8f:7d:bc:12:76:ca:64:d5:
b0:97:33:34:7a:e7:0e:27:26:f5:82:80:5a:63:80:
a4:31:8a:1b:36:27:b6:7e:2d:c2:e9:1a:b2:98:4f:
fc:e2:8a:54:04:86:3b:56:03:17:47:93:2c:c2:11:
d2:f3:53:2b:17:44:db:1b:f2:72:5b:7e:31:5f:e8:
f0:eb:5a:32:bc:75:ba:a0:f6:86:27:f5:4c:d0:48:
d5:3e:c2:86:a5:ea:55:52:e5:e0:16:a8:41:2f:56:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:37:DB:A4:B3:E1:9C:91:6B:EE:23:8F:1E:D6:B1:71:52:F5:EE
X509v3 Authority Key Identifier:
keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135312e302f32342d3234203d3e20323632343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.151.0/24
Signature Algorithm: sha256WithRSAEncryption
82:89:e1:63:4a:40:1c:76:5c:74:10:4a:97:2d:46:49:3b:8a:
97:b4:58:c1:21:bb:a1:e3:ee:95:d8:ac:a9:bc:2e:c9:33:1c:
b3:9f:4a:b4:0e:64:ce:5f:29:7f:65:03:15:6a:c2:11:77:e4:
37:3a:f2:b5:82:80:0e:02:59:21:e3:ae:c5:1a:c5:6e:02:0f:
5c:34:bf:0e:90:eb:17:41:c7:a5:2a:4a:37:2f:ac:16:fe:6c:
16:e8:c0:55:13:00:7f:33:63:0f:3f:39:e1:53:5a:6c:ee:83:
d4:f5:07:17:8e:99:7d:20:f5:86:97:7d:75:86:36:ab:c9:90:
59:6e:e0:fd:db:c3:99:0e:94:c8:80:7b:d4:06:95:16:67:6f:
41:ed:94:36:ac:99:28:f0:12:12:94:36:77:75:2e:f1:32:dd:
3c:25:b6:c5:36:37:3a:d4:64:1c:f8:5e:15:8b:44:30:86:bd:
ef:f9:c7:ea:71:3a:85:e3:14:50:ad:81:0c:33:28:80:fc:9f:
25:63:04:bc:17:4c:af:36:48:6e:78:f3:69:bb:02:9c:fe:6a:
4b:39:d4:fc:ab:d4:47:1f:bb:7a:45:f1:ef:c8:b3:90:11:81:
4b:55:58:ca:9c:cd:97:6b:64:79:fb:92:ef:80:a8:1a:37:ac:
6a:7c:20:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:47:02 2025 by rpki-client