Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3230382e302f32312d3231203d3e203532383438.roa
File: 3137372e38352e3230382e302f32312d3231203d3e203532383438.roa (raw, json)
Hash identifier: RRqoJBiXii3TgpvUYwzTzwuOv7ddzpllt21x0hxGtNA=
Subject key identifier: F7:FB:39:E7:A8:56:CC:9F:76:3E:0A:E1:4F:B5:15:24:74:E8:09:E6
Certificate issuer: /CN=99143CBAF11D170944D719FD796009BC38F9F201
Certificate serial: 03F747CE56FD4751D0BD364228E860985F3905AC
Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3230382e302f32312d3231203d3e203532383438.roa
Signing time: Fri 21 Feb 2025 13:31:58 +0000
ROA not before: Fri 21 Feb 2025 13:26:58 +0000
ROA not after: Fri 20 Feb 2026 13:31:58 +0000
asID: 52848
IP address blocks: 177.85.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f7:47:ce:56:fd:47:51:d0:bd:36:42:28:e8:60:98:5f:39:05:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201
Validity
Not Before: Feb 21 13:26:58 2025 GMT
Not After : Feb 20 13:31:58 2026 GMT
Subject: CN=F7FB39E7A856CC9F763E0AE14FB5152474E809E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:e9:db:52:70:48:68:2a:e3:9f:59:34:0f:
8b:12:26:36:f4:72:7e:10:5d:60:7f:da:f3:2e:3d:
0a:bf:45:65:cf:c8:8b:16:27:09:a1:f3:e4:8d:da:
4d:c0:cd:cf:d6:01:a6:19:cb:a6:eb:3e:90:87:d8:
8c:ec:18:ed:b2:03:b3:38:10:96:99:9d:5a:af:4f:
be:7e:7f:ae:87:96:48:b7:7b:db:c3:c7:40:d4:f6:
06:f5:35:85:59:e9:f9:e4:8e:4e:62:5d:7c:7c:aa:
99:f7:a6:66:72:4d:b2:9a:4a:27:26:f5:23:c3:89:
86:40:b6:f0:06:a6:0f:a5:b4:4a:a2:df:6a:cd:c4:
b4:70:e9:48:9a:53:33:13:8b:f3:2f:6c:95:31:bc:
77:b3:43:bb:39:e4:16:0c:4f:9d:c0:52:23:52:17:
34:f9:c1:b0:11:b2:b6:33:ea:32:4d:ea:3c:15:2e:
22:e5:e1:ba:1e:a8:55:68:89:19:65:d8:4e:4b:d7:
50:27:68:d8:7f:de:54:57:4a:36:2c:52:d9:a5:db:
aa:16:f8:4e:48:a7:6e:de:f4:a3:6e:73:b7:81:c4:
0e:02:42:81:6e:ed:38:89:29:02:ab:76:68:2f:f7:
fe:b9:c9:dd:cc:2e:ed:9b:c6:3f:1c:09:a9:1d:cb:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FB:39:E7:A8:56:CC:9F:76:3E:0A:E1:4F:B5:15:24:74:E8:09:E6
X509v3 Authority Key Identifier:
keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3230382e302f32312d3231203d3e203532383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.208.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:93:25:a8:82:f4:06:45:7a:ab:bb:1e:ae:f9:b6:df:b9:b3:
69:ac:9a:af:4b:08:bf:33:fb:22:36:c5:25:ac:92:b1:5b:74:
67:92:46:bb:84:2d:bd:2b:9b:cd:4e:a4:9a:d0:65:46:2a:4f:
a9:92:49:c4:ca:04:36:bc:89:62:d6:61:16:cf:66:c3:40:b5:
16:2c:7f:b2:29:6c:0f:9f:a8:a5:41:4e:5e:06:a2:9d:cf:5c:
f3:71:9b:fe:36:a2:0f:01:84:6a:50:ac:00:42:49:5f:2a:43:
2a:c5:e2:13:c9:da:e8:8d:1c:ee:98:19:f2:09:84:ee:93:61:
f3:29:00:28:1f:79:ee:77:20:84:cb:93:b7:b1:4a:a7:9a:cb:
83:29:c3:09:11:35:63:f7:9c:f5:c2:02:17:86:a2:bb:55:c6:
c2:f6:a9:e2:55:ed:0b:3c:99:fd:ce:d1:cd:23:5b:84:55:e7:
d6:1f:6b:9e:be:68:f1:20:c0:47:35:a6:ec:52:d6:80:9f:6a:
a0:c6:e7:7d:76:f8:89:e1:7b:5c:90:c3:ff:80:f1:3d:6e:c2:
bb:45:39:cb:b0:50:52:b5:f3:73:e2:90:b3:0e:e2:bb:f4:c1:
d4:7a:57:b3:cf:87:73:b6:15:16:77:28:db:d6:7a:a7:e5:43:
6d:53:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:11:03 2025 by rpki-client