Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa
File: 3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa (raw, json)
Hash identifier: i9mzCxxJAnKmQpzYITM5ukDs9a0osD+hPZYzfJoR7kY=
Subject key identifier: 66:1B:A2:02:AB:CC:28:CE:7D:41:ED:AC:CE:E6:BF:FA:F3:B4:77:E3
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 3B8BD038DFF301AA89A96B098D6555211D3FB035
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:10 +0000
ROA not before: Mon 13 Jan 2025 13:27:10 +0000
ROA not after: Mon 12 Jan 2026 13:32:10 +0000
asID: 28202
IP address blocks: 177.130.160.0/19 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:8b:d0:38:df:f3:01:aa:89:a9:6b:09:8d:65:55:21:1d:3f:b0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:10 2025 GMT
Not After : Jan 12 13:32:10 2026 GMT
Subject: CN=661BA202ABCC28CE7D41EDACCEE6BFFAF3B477E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:8e:4e:10:3b:67:31:3a:7a:69:93:36:86:
91:e4:5d:8a:fd:f8:21:f3:fd:a9:f5:fa:f2:36:cc:
86:01:6d:c1:6a:a9:21:64:8e:f0:43:bd:d5:88:1d:
34:2b:a9:5b:53:86:94:95:d6:f9:35:b1:90:19:1e:
da:8c:12:83:d7:da:07:eb:98:2e:80:18:03:ec:d6:
b8:8f:97:f8:cd:70:46:6b:05:a4:95:e1:44:ac:84:
96:c0:75:b9:2f:b7:6a:53:70:ff:1a:a2:3d:a5:5a:
24:27:ce:ae:c4:c7:8d:a9:fb:41:7b:7a:d0:a1:1a:
69:bd:6e:8f:b2:35:3b:75:42:08:d9:2e:77:ed:5f:
e9:d4:cc:24:6e:7e:5c:dd:3f:58:e4:5e:3a:00:7f:
05:55:56:16:36:cd:da:db:2f:5e:2f:98:81:86:54:
a1:1b:0a:70:a2:d4:fa:70:c4:75:39:4c:35:2a:d9:
4a:6f:bd:96:0c:86:21:07:2c:53:06:b4:81:20:e5:
f3:58:75:fe:92:87:1d:d1:ab:9e:c2:62:3e:40:89:
5e:4b:1d:0f:b9:6b:06:fb:29:ea:60:d1:18:71:f2:
3e:8b:2e:b0:05:10:e4:4d:79:a2:96:84:ad:f9:36:
42:4a:73:a3:1b:60:f1:a3:bf:24:a1:b2:9a:db:d3:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1B:A2:02:AB:CC:28:CE:7D:41:ED:AC:CE:E6:BF:FA:F3:B4:77:E3
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.130.160.0/19
Signature Algorithm: sha256WithRSAEncryption
67:cc:c0:ab:51:da:80:b7:34:c1:a9:70:59:80:25:ef:57:4e:
ee:e9:9d:27:8d:94:70:77:c2:0b:2b:ae:96:90:9b:db:c1:e6:
62:1e:3c:16:b0:2d:9a:97:b6:d5:5b:99:65:e2:3a:45:c1:51:
2a:23:9d:35:59:df:a5:8e:8c:88:30:19:59:2f:e9:9f:c6:82:
b7:c3:e6:2c:80:7c:e8:e7:50:c0:28:7d:d7:b5:d3:40:07:3c:
66:ff:f8:29:f2:3d:66:d2:2d:cc:30:26:38:04:a8:8c:ac:95:
37:c8:62:36:98:9f:a1:ae:70:76:92:03:29:88:d9:ea:44:37:
ee:a9:d6:07:79:d7:8a:1f:8a:1a:94:a7:94:bc:ff:c5:ed:05:
3a:96:99:e9:52:c4:cf:da:57:57:a1:70:ba:00:07:15:04:39:
98:f0:98:e1:22:7a:a0:e8:0c:e9:84:78:0a:11:b7:93:aa:0b:
d4:62:5a:fe:86:ee:44:ce:3d:31:d4:e2:cb:95:fe:7d:a8:42:
d3:ae:bf:ac:cc:91:0a:26:e1:c5:fd:be:20:77:ab:b2:67:2a:
db:3f:35:cf:57:6a:2f:85:91:12:e2:4c:8e:d2:63:e0:ed:3c:
17:fe:63:31:0a:86:27:da:c7:81:f8:fd:eb:77:6e:70:0d:4f:
62:21:f4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:49:59 2025 by rpki-client