Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231362e302f32312d3231203d3e203532383438.roa
File: 3137372e38352e3231362e302f32312d3231203d3e203532383438.roa (raw, json)
Hash identifier: dT3drk2apCMlmTaJ587FJLVDRKf659GM5r5ocqzqC5s=
Subject key identifier: 3D:31:96:BC:15:94:C9:A4:63:8C:A5:11:11:FF:BF:7B:F9:79:F2:B2
Certificate issuer: /CN=99143CBAF11D170944D719FD796009BC38F9F201
Certificate serial: 6F2C0C6B60EBBAD2D2ACE0822771080401725F9C
Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231362e302f32312d3231203d3e203532383438.roa
Signing time: Fri 21 Feb 2025 13:31:59 +0000
ROA not before: Fri 21 Feb 2025 13:26:59 +0000
ROA not after: Fri 20 Feb 2026 13:31:59 +0000
asID: 52848
IP address blocks: 177.85.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2c:0c:6b:60:eb:ba:d2:d2:ac:e0:82:27:71:08:04:01:72:5f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201
Validity
Not Before: Feb 21 13:26:59 2025 GMT
Not After : Feb 20 13:31:59 2026 GMT
Subject: CN=3D3196BC1594C9A4638CA51111FFBF7BF979F2B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:c7:47:2d:ce:11:aa:83:1a:ef:43:6f:89:
d7:99:6f:dc:dd:b9:cf:ee:03:e9:24:32:09:87:fc:
7a:f9:33:82:a5:a6:71:6d:b7:5a:95:27:c7:89:ef:
46:26:e7:86:76:26:79:1c:85:35:ff:8c:99:fd:bf:
32:2e:38:77:e2:b0:75:60:47:e2:9f:83:d6:b8:06:
a9:df:fc:b9:f9:c8:f0:30:de:9a:90:57:d7:8b:9a:
a3:8a:9b:05:45:40:ed:6e:2c:5b:4b:53:0c:6d:17:
58:1c:2d:51:49:77:85:36:76:6e:47:1a:54:40:0f:
01:90:8b:4f:50:1f:e7:4b:06:13:68:23:5f:b1:21:
76:59:de:44:f0:d5:d7:76:92:22:89:9c:66:e7:4d:
21:6c:3c:c2:c4:6f:69:0d:4f:ea:1f:54:04:cc:a2:
10:4d:90:24:c0:f8:6b:19:fb:76:a5:9a:65:af:e1:
a5:a4:41:ef:42:76:7d:86:04:db:41:b4:fe:df:ea:
69:82:c2:38:96:6c:05:c0:a1:9e:3e:ae:4f:25:08:
20:06:d2:4b:26:18:c2:1e:a1:6d:73:07:27:fa:79:
7c:23:68:82:38:55:1a:bf:c9:ec:4d:49:cd:08:04:
60:81:68:b2:37:b1:c0:29:6a:c7:b4:81:13:b1:eb:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:31:96:BC:15:94:C9:A4:63:8C:A5:11:11:FF:BF:7B:F9:79:F2:B2
X509v3 Authority Key Identifier:
keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231362e302f32312d3231203d3e203532383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.216.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:dd:ac:05:69:d9:d0:8e:33:a1:7f:8d:dc:f2:d6:df:ba:87:
45:f6:de:e8:2b:c1:18:ab:34:41:c0:6a:01:c2:5a:77:7a:42:
70:63:c1:ba:26:43:97:fb:e8:41:01:78:0e:42:38:09:e6:62:
6e:b3:b1:58:b2:d8:9b:34:d8:30:72:5a:48:09:e0:98:e8:e5:
a0:82:b3:f1:8f:ee:28:8f:aa:ad:67:54:22:4e:0b:ab:4c:3f:
bf:6f:af:8a:17:63:a0:73:cb:fc:7b:04:89:9d:ce:3c:73:e8:
3e:33:ca:1d:41:be:41:14:13:94:0f:c0:2d:82:8b:8a:06:49:
b9:24:7a:ff:52:aa:58:5d:4c:27:5d:39:2d:2e:1a:f2:9a:fe:
33:3b:77:89:b9:30:81:b0:45:70:b7:16:cd:3c:75:77:ca:e6:
2e:07:33:c4:69:ce:87:b4:36:42:a9:d7:80:57:27:bf:ed:fa:
72:f4:a0:ba:fb:46:c5:b7:c9:0e:43:bd:c0:44:9a:9f:49:39:
6e:3f:36:a4:e4:6b:d1:e4:48:c7:88:c1:1c:e6:1e:ae:e0:f8:
17:64:d3:f7:b0:b7:f3:0a:02:88:42:cb:6c:12:b9:bf:0d:96:
10:65:ff:54:a0:9d:5f:f6:a4:7a:a8:b2:ba:32:6e:7f:f1:18:
2a:42:57:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:28:03 2025 by rpki-client