Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135322e302f32322d3232203d3e20323632343031.roa
File: 3137372e33362e3135322e302f32322d3232203d3e20323632343031.roa (raw, json)
Hash identifier: /jCCKHdyYvfgxsFjM+85V8Vy4opCSnULRUn7uH3TngI=
Subject key identifier: AC:F3:E1:6B:AA:31:0E:01:C4:35:7A:ED:2E:3F:80:46:03:65:91:41
Certificate issuer: /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial: 3CEC8D072E3B5001FC12E5D551008FE8B66B341B
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135322e302f32322d3232203d3e20323632343031.roa
Signing time: Thu 06 Mar 2025 11:29:47 +0000
ROA not before: Thu 06 Mar 2025 11:24:47 +0000
ROA not after: Thu 05 Mar 2026 11:29:47 +0000
asID: 262401
IP address blocks: 177.36.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ec:8d:07:2e:3b:50:01:fc:12:e5:d5:51:00:8f:e8:b6:6b:34:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Validity
Not Before: Mar 6 11:24:47 2025 GMT
Not After : Mar 5 11:29:47 2026 GMT
Subject: CN=ACF3E16BAA310E01C4357AED2E3F804603659141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:28:9d:fb:4b:0c:38:58:c6:1b:c5:3d:4e:74:
ce:b2:14:f8:0b:27:a0:9f:72:3b:1c:87:4a:5d:44:
7f:da:77:a6:31:ba:62:bd:a6:5c:b1:f3:3f:f7:c2:
a4:b0:34:9b:7d:0d:b5:25:85:00:01:97:f4:fd:24:
7b:70:b6:f9:2e:e4:3b:e7:bc:db:ef:bb:66:f1:27:
7a:d0:85:8b:aa:59:05:06:8a:15:b1:4f:4e:b7:22:
05:d0:ee:61:b9:73:b8:55:db:70:13:4e:cd:7d:99:
2d:f2:c9:48:fb:15:40:eb:46:2f:21:55:65:5e:42:
83:f7:21:61:20:5b:da:6b:e9:57:98:6c:04:2f:d9:
27:94:97:07:d2:b0:62:1e:af:7c:2c:4d:fe:d1:1d:
1b:60:c8:64:28:25:7f:4d:7a:d5:65:ce:89:68:8f:
5b:a4:40:9e:e6:2e:0b:13:58:4d:ad:0c:bf:0c:ae:
1b:d4:4c:b9:31:86:71:24:a1:15:a2:91:56:87:ea:
08:f5:3d:cd:84:a7:aa:b4:55:c1:da:f7:ab:fa:58:
d4:5a:10:39:a9:a1:66:55:85:5d:19:ed:0f:2b:a2:
e5:b6:db:72:f5:e7:2b:a6:4c:d4:dd:b7:fc:1b:25:
a2:2e:cf:fd:af:0a:b5:15:3d:31:67:7f:52:23:53:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F3:E1:6B:AA:31:0E:01:C4:35:7A:ED:2E:3F:80:46:03:65:91:41
X509v3 Authority Key Identifier:
keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135322e302f32322d3232203d3e20323632343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.152.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:31:26:ca:2b:e0:41:ce:1c:47:e6:75:28:75:ee:6a:60:ed:
77:91:8d:d7:3a:16:85:ec:23:b0:96:7c:5b:8a:9b:dc:a7:1e:
b6:a1:07:e8:16:db:e6:f9:56:92:81:5b:4c:5e:78:4f:1c:76:
0a:d5:2d:11:1f:b7:60:8a:51:b9:78:26:e1:86:e7:98:65:ac:
c9:51:78:38:d9:11:3b:64:4e:4a:4f:e1:1a:77:82:77:d3:3d:
0a:b9:3f:eb:09:78:44:26:15:93:15:ce:08:04:2b:54:76:eb:
0f:5d:37:a8:ce:4d:a4:fd:64:67:5e:60:3d:ae:c4:75:52:41:
89:19:fb:84:98:79:26:8e:6f:19:af:e3:71:8f:01:bd:bc:22:
e6:b4:3a:2a:0c:22:dd:35:3e:97:4f:40:69:d8:b6:8e:69:0b:
e2:b3:3c:a3:2b:5c:88:9c:03:0b:b6:b7:cd:c3:88:2d:d4:ac:
95:99:42:60:cc:30:63:ef:e4:46:42:26:37:0a:ce:6d:6e:3d:
45:8e:5e:4b:27:ab:27:58:e0:69:6c:f1:31:5d:84:12:76:fa:
7e:a4:85:6b:39:dc:cf:96:1c:2f:3d:4e:d8:4b:02:b3:a3:81:
6b:a0:39:79:d9:b4:67:52:b9:c8:64:f3:e5:2a:24:cd:78:49:
0f:19:c0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:30:46 2025 by rpki-client