Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135332e302f32342d3234203d3e20323632343031.roa
File: 3137372e33362e3135332e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier: tNdt3bk2kT3YEJlMr46L9Q84Iw593Whka15NzQrtdKo=
Subject key identifier: 21:DC:93:98:09:AF:5C:E2:C0:00:48:29:29:6D:83:52:57:2E:80:91
Certificate issuer: /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial: 153F189A661C4D20B509568F82B0267765CABAFE
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135332e302f32342d3234203d3e20323632343031.roa
Signing time: Thu 06 Mar 2025 11:29:47 +0000
ROA not before: Thu 06 Mar 2025 11:24:47 +0000
ROA not after: Thu 05 Mar 2026 11:29:47 +0000
asID: 262401
IP address blocks: 177.36.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:3f:18:9a:66:1c:4d:20:b5:09:56:8f:82:b0:26:77:65:ca:ba:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Validity
Not Before: Mar 6 11:24:47 2025 GMT
Not After : Mar 5 11:29:47 2026 GMT
Subject: CN=21DC939809AF5CE2C0004829296D8352572E8091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:b3:bf:92:ca:17:96:81:7c:00:b4:3d:26:
95:86:bd:f3:10:5f:2d:25:71:ca:46:45:92:7f:a8:
f0:f4:f8:af:e1:e5:b7:d0:23:85:0a:6e:dd:04:7f:
44:ca:92:45:8e:42:20:5f:98:fc:0a:f0:7a:ba:c5:
3e:5f:60:71:45:d6:4b:28:ae:7d:bc:08:3c:a2:fa:
04:9d:a7:0b:d7:b7:cc:ff:bc:6b:f8:5e:94:08:74:
e4:4b:d2:e1:b5:18:4b:e3:5a:78:f4:f8:19:0a:1f:
d4:ae:82:15:37:77:fe:0d:8d:5d:cd:9b:b1:87:c1:
0a:ca:7e:d1:28:83:2e:ab:91:58:d6:af:ca:e7:d3:
2a:43:10:a5:fe:fa:1d:02:e6:67:4e:cf:cd:4b:61:
1f:63:5e:1f:50:17:70:47:dc:84:f0:46:52:27:83:
9e:bd:3f:ad:f0:c5:f2:68:64:19:ce:90:ff:e4:6d:
26:ca:d2:7a:7e:41:73:90:1e:28:2d:18:3a:71:26:
26:c0:1b:dc:65:0f:97:bd:57:6e:1f:2c:3d:0f:59:
a8:05:4c:e2:33:67:2e:e2:45:15:d6:16:2d:46:10:
98:e4:23:bb:90:12:eb:13:1c:31:3f:32:12:82:84:
d5:73:f5:d9:20:5e:ec:12:35:d8:f7:52:85:c9:84:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DC:93:98:09:AF:5C:E2:C0:00:48:29:29:6D:83:52:57:2E:80:91
X509v3 Authority Key Identifier:
keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135332e302f32342d3234203d3e20323632343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.153.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a0:c6:41:3f:91:35:4f:77:0c:df:03:d5:bc:fe:d4:0a:df:
93:21:b3:de:80:c0:27:13:60:9c:ad:6b:f4:db:c7:d4:a7:44:
24:56:18:a3:50:c9:69:ee:e5:a9:a2:ad:60:94:a7:b4:27:3d:
40:d9:32:e1:ca:36:1b:70:6d:f4:36:11:67:f6:1b:47:ad:dd:
3a:87:52:f5:5f:89:c4:aa:86:6f:c1:89:19:56:47:d1:d2:96:
70:d7:4e:ef:45:05:54:2d:34:7d:93:02:27:b9:54:64:bb:1f:
76:88:92:e4:f4:80:fb:3b:c4:e1:62:78:64:45:89:14:b5:86:
e6:92:68:cc:11:b8:a0:38:00:37:b6:53:00:88:54:5b:ca:ce:
77:5c:8e:ef:3e:e2:aa:10:b4:2c:37:b8:5a:6d:08:2f:f5:c7:
a5:ba:87:dd:e2:1f:43:21:40:2b:ee:7e:c4:72:b2:eb:e1:6c:
07:d4:91:f6:a0:31:bc:d2:3d:3d:85:cd:85:64:dd:30:23:85:
77:4d:5d:cd:50:ed:9f:94:dc:3a:92:78:6b:d6:38:99:05:fa:
70:92:4f:fc:c1:76:e5:14:03:be:3d:82:6a:dc:60:05:da:76:
e8:3b:f2:6e:fe:53:77:e4:bd:a5:de:a4:8c:9c:98:ad:36:d4:
db:a5:e5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:38:10 2025 by rpki-client