Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39322e302f32342d3234203d3e20323633363237.roa
File: 3137372e31322e39322e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier: h3IccsAStaoYrWoYiknsxwS0nAYYIAiK7lH0MHskt/0=
Subject key identifier: 49:9B:10:F5:AA:CA:C8:13:5B:9A:A2:9B:1E:E1:0D:E8:52:49:D3:D3
Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial: 4EEC73554FE7D2A6B55EEBBE1176F4BB8AACA127
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39322e302f32342d3234203d3e20323633363237.roa
Signing time: Tue 25 Mar 2025 20:13:31 +0000
ROA not before: Tue 25 Mar 2025 20:08:31 +0000
ROA not after: Tue 24 Mar 2026 20:13:31 +0000
asID: 263627
IP address blocks: 177.12.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ec:73:55:4f:e7:d2:a6:b5:5e:eb:be:11:76:f4:bb:8a:ac:a1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
Validity
Not Before: Mar 25 20:08:31 2025 GMT
Not After : Mar 24 20:13:31 2026 GMT
Subject: CN=499B10F5AACAC8135B9AA29B1EE10DE85249D3D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:4b:35:33:bc:24:a5:02:77:aa:ca:b3:f5:
cb:24:34:c4:e9:89:c1:19:ce:25:b6:d0:ae:15:a7:
35:37:0a:ed:a7:46:16:9b:87:3f:4f:8e:bb:9e:e1:
ac:a5:42:49:0f:64:85:da:97:45:04:ce:25:87:4a:
4e:cb:04:e2:d5:1c:7d:46:4c:df:95:7b:e8:c8:2c:
87:d8:ab:3b:44:07:04:23:7d:68:ce:d2:51:17:d2:
96:63:bc:44:db:ed:43:8c:b8:e1:ee:3a:95:9e:7e:
80:0d:96:a1:44:6e:f4:83:ea:46:b8:c5:d2:bf:47:
23:96:38:52:f8:46:fe:37:be:49:37:d8:a4:c4:dc:
e6:27:55:6d:a7:0f:37:68:19:7b:81:f5:0e:94:f3:
37:eb:33:fc:e1:9c:0b:49:65:d0:df:14:92:2f:e8:
15:28:f2:a2:ab:15:46:84:55:b5:cc:12:5d:ff:77:
90:77:fe:f0:41:77:fa:aa:5d:a4:28:7f:65:57:7d:
26:c3:fc:1d:b5:d1:db:c2:8b:c1:53:00:14:85:4f:
a9:24:b4:b6:61:3a:f9:b8:ec:97:72:09:29:30:0b:
c7:b4:eb:61:66:0c:fc:1f:80:b8:9f:d6:55:68:98:
a0:c7:98:5d:17:99:7c:5d:d4:bd:b7:7a:76:33:5a:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9B:10:F5:AA:CA:C8:13:5B:9A:A2:9B:1E:E1:0D:E8:52:49:D3:D3
X509v3 Authority Key Identifier:
keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39322e302f32342d3234203d3e20323633363237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.12.92.0/24
Signature Algorithm: sha256WithRSAEncryption
41:50:56:6e:ac:b1:17:79:65:d1:b0:c0:64:e9:53:03:94:39:
1c:04:5a:89:1c:d4:c0:ba:05:34:03:ef:da:e6:8f:44:79:7c:
0e:03:64:85:33:56:2d:ca:b7:af:0c:3b:05:be:24:b6:16:88:
ba:ec:71:38:09:7f:e7:63:59:28:d5:11:5a:ad:1a:d9:e5:c8:
86:7f:f5:7f:24:4c:6c:12:98:6b:80:22:d3:25:b8:5d:e2:3c:
95:48:38:cd:3c:29:82:5c:1a:d4:a9:f6:4f:6b:b5:f1:33:72:
6f:d5:4f:7a:b7:45:e8:61:42:16:28:27:0c:66:00:01:27:83:
fd:aa:88:e3:c9:af:b9:38:9a:a3:8b:7e:5f:ee:db:3d:7f:03:
34:0a:5c:85:f1:8e:bd:8d:e1:ff:2c:fe:c6:aa:d6:59:88:48:
b6:ff:12:03:a2:22:61:56:d0:d1:e5:20:24:15:47:09:f6:1d:
69:34:90:96:4a:18:ce:b1:c1:bb:a7:46:19:fa:bd:ff:e5:61:
b7:43:e4:6f:e7:4e:5f:3e:b0:23:a7:5d:c0:87:3b:17:ec:e0:
3b:4c:5e:ca:fc:20:0f:c1:05:db:2e:e4:cc:e0:94:f4:26:46:
54:a8:e2:b9:d1:08:86:58:4a:8d:5b:fb:8e:5c:c7:64:8c:da:
d5:2f:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:57:49 2025 by rpki-client