Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133362e302f32322d3232203d3e20323730373337.roa
File: 3137372e3232312e3133362e302f32322d3232203d3e20323730373337.roa (raw, json)
Hash identifier: li5trPZuMvTy5YhngALG+RLibGRO7biJVadC3FY6jME=
Subject key identifier: 65:81:1D:B4:0C:82:E7:49:FB:72:39:8B:63:1E:97:6F:B8:D9:27:EA
Certificate issuer: /CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
Certificate serial: 598F5B404B58F35F4DB74A798E86DE4F8FFB4626
Authority key identifier: 29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133362e302f32322d3232203d3e20323730373337.roa
Signing time: Fri 02 Aug 2024 11:28:08 +0000
ROA not before: Fri 02 Aug 2024 11:23:08 +0000
ROA not after: Fri 01 Aug 2025 11:28:08 +0000
asID: 270737
IP address blocks: 177.221.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:8f:5b:40:4b:58:f3:5f:4d:b7:4a:79:8e:86:de:4f:8f:fb:46:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
Validity
Not Before: Aug 2 11:23:08 2024 GMT
Not After : Aug 1 11:28:08 2025 GMT
Subject: CN=65811DB40C82E749FB72398B631E976FB8D927EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:7f:91:4c:0c:f0:68:47:aa:0e:fc:41:39:
24:d8:b4:73:a0:61:d2:3b:8c:57:1e:df:63:82:f1:
d3:9f:fb:12:22:7b:1b:48:9b:5a:ce:a9:c2:59:17:
05:8f:c6:bd:fd:55:7b:b6:7f:b5:65:8e:9d:7c:87:
c1:f6:e2:db:15:6a:5d:d8:f3:23:ed:ab:8d:d8:98:
51:35:93:d1:fe:2c:5c:f9:bd:e5:68:da:35:e2:a9:
cd:f2:16:3a:9a:c6:69:cf:2e:87:99:e8:87:cf:bd:
8a:09:3e:b6:89:5f:b4:df:09:2e:06:71:f7:61:ad:
89:12:62:b5:b8:de:b8:51:10:6e:40:89:2e:0d:86:
44:62:99:3c:e5:f6:91:d6:93:61:72:5d:f4:de:4b:
d7:db:7f:55:f4:6f:8a:32:b5:e8:67:5c:e3:03:25:
59:c3:11:f4:26:a1:17:e4:55:a3:34:a3:29:80:7d:
12:25:18:b7:0d:94:48:ef:f8:67:25:e1:db:1d:a9:
ac:a7:bc:a8:04:02:e8:4a:88:b1:94:b7:bb:2d:f6:
72:e5:86:78:dd:a9:38:5a:86:86:8e:7a:96:07:44:
b3:24:f9:63:bd:9d:8f:79:1b:4a:d4:90:92:f2:35:
24:b3:1f:15:7d:35:39:de:01:d9:fd:98:48:85:f7:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:1D:B4:0C:82:E7:49:FB:72:39:8B:63:1E:97:6F:B8:D9:27:EA
X509v3 Authority Key Identifier:
keyid:29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133362e302f32322d3232203d3e20323730373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.221.136.0/22
Signature Algorithm: sha256WithRSAEncryption
01:43:1c:5b:69:1f:f0:52:b8:21:e3:a0:84:d3:80:08:22:3a:
a4:07:8b:c8:40:5f:0b:ed:09:c2:9c:2b:cf:58:d6:df:92:73:
1d:33:f3:0c:ba:a8:dd:d3:72:03:2b:7c:cc:7c:5e:a9:2a:ac:
74:84:c8:62:a2:4e:40:51:ae:8d:44:4f:f5:e9:06:52:2a:79:
9d:79:a4:e4:aa:5c:0b:0f:17:4e:c0:cc:66:a0:cc:71:32:65:
31:45:66:b8:46:17:de:53:e6:65:2b:81:ae:c2:c5:50:81:94:
af:88:2b:b4:cc:69:85:57:26:82:8a:74:87:96:cf:48:65:28:
40:2c:cf:da:e2:bb:e1:75:65:4d:d5:9f:78:3d:c5:49:a6:34:
5c:26:13:ba:e4:41:43:6d:3c:3e:82:84:55:be:c2:d7:33:9e:
ea:cf:e4:47:80:4a:55:54:a5:d3:e3:32:12:b2:e4:fe:5a:78:
ee:f5:88:47:46:69:f0:1d:c5:30:88:43:69:68:27:4f:f7:e1:
53:26:af:d3:59:03:70:b8:60:b8:eb:f4:c3:19:a1:f3:ce:ca:
3d:d5:6a:e6:d0:10:a3:ed:e9:c8:3b:ac:65:f5:9f:cd:09:47:
e5:30:b2:92:84:62:ca:14:a1:eb:d2:d9:44:41:d1:6e:38:a2:
48:3e:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:51 2025 by rpki-client