Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa
File: 3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa (raw, json)
Hash identifier: bVN8dGhUBO5H8QD4mROQdspKgS3SFhv4MEmxift+b5U=
Subject key identifier: 28:DB:7F:57:8F:4B:29:7D:7A:28:00:42:F3:59:EF:17:53:B2:EA:BD
Certificate issuer: /CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
Certificate serial: 7CB7B65DC9F365F718F5C2DF4736331DEEE0A90F
Authority key identifier: 29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa
Signing time: Sun 29 Dec 2024 14:21:19 +0000
ROA not before: Sun 29 Dec 2024 14:16:19 +0000
ROA not after: Sun 28 Dec 2025 14:21:19 +0000
asID: 270737
IP address blocks: 177.221.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b7:b6:5d:c9:f3:65:f7:18:f5:c2:df:47:36:33:1d:ee:e0:a9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
Validity
Not Before: Dec 29 14:16:19 2024 GMT
Not After : Dec 28 14:21:19 2025 GMT
Subject: CN=28DB7F578F4B297D7A280042F359EF1753B2EABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:46:7d:e6:34:f5:e2:08:0d:a9:48:7e:fd:
e9:78:33:95:1c:65:54:c5:45:1a:ec:b5:ea:46:45:
43:68:26:5b:95:37:50:73:3c:7b:e4:4c:6d:85:53:
8c:f0:95:41:86:bf:e4:ca:41:4c:f5:5f:f4:34:b5:
8d:60:01:4c:c6:f6:12:ce:04:0c:2f:15:45:49:24:
85:27:23:e5:7f:43:cc:c0:18:60:99:15:7c:f9:ab:
8f:50:ad:5a:26:bd:6e:a6:6b:5a:c9:3d:60:6f:67:
de:b7:08:a7:8f:df:82:d4:79:d7:1b:c6:bc:3e:59:
9a:f7:af:87:dc:a3:b7:ed:69:a5:51:b9:6d:c8:5b:
29:55:06:5b:f2:41:e7:1c:d6:e2:d1:84:83:2e:3c:
85:c0:52:5a:00:2b:54:19:c1:1f:7f:68:57:52:8d:
88:4f:59:f0:b6:20:99:b3:02:ec:ca:b8:52:f8:be:
97:9f:5c:e2:ed:08:3b:6a:08:70:7d:ed:a5:cf:f4:
e5:de:35:d9:df:28:b0:dc:0d:28:2e:99:38:88:98:
3c:5e:41:20:5b:98:7d:23:48:a9:6e:54:88:6f:c4:
45:73:7b:b8:48:d5:11:fb:72:58:96:da:cb:16:92:
f6:74:91:3d:75:73:ca:fc:9a:76:ca:c3:24:b0:44:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DB:7F:57:8F:4B:29:7D:7A:28:00:42:F3:59:EF:17:53:B2:EA:BD
X509v3 Authority Key Identifier:
keyid:29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.221.136.0/22
Signature Algorithm: sha256WithRSAEncryption
81:20:1f:ec:93:5a:6e:cf:be:1c:35:32:54:51:9f:0f:18:63:
8a:b4:41:b4:e3:ff:52:05:64:d9:17:ed:da:54:e6:74:41:47:
03:b4:94:72:86:d2:af:f2:88:f3:81:ab:10:8e:80:33:5f:ef:
39:81:d1:d6:8c:e2:b8:ae:61:de:28:89:a4:a9:39:0f:f6:72:
31:f5:aa:e5:e3:e3:ad:66:07:4b:9c:b0:1e:5c:0b:92:26:d7:
95:59:69:13:dc:69:67:5b:65:c3:7c:6f:c5:32:3a:20:b5:a3:
4d:7c:50:e5:1b:b5:17:e0:ad:42:04:a5:e8:59:5b:c8:db:5c:
d8:12:1f:19:69:b6:2e:45:1b:a1:01:79:ea:79:8e:28:66:35:
de:0e:42:a5:cf:f1:f8:53:e1:8e:39:ce:a2:07:0e:dd:3c:e5:
43:35:d0:fa:ab:d3:7e:98:ab:28:5d:2e:93:0d:ac:d1:34:31:
93:64:f1:77:6e:8f:c2:f5:c1:07:43:1b:0b:74:1b:00:c6:d5:
cb:29:90:0a:89:4a:dc:85:e2:12:c0:c0:94:b1:80:e4:46:f6:
e3:31:c4:2c:86:df:2a:83:43:26:20:64:6c:73:01:a4:b1:26:
a7:5a:0b:99:72:8f:58:7c:ec:be:af:7e:29:62:be:98:bd:c6:
72:21:70:a6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfLe2XcnzZfcY9cLfRzYzHe7gqQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlDMzE2NTdBOTYwQzJFOTM1QUU1NENERjVGODRBOTEz
Q0NGMTlBRTAeFw0yNDEyMjkxNDE2MTlaFw0yNTEyMjgxNDIxMTlaMDMxMTAvBgNV
BAMTKDI4REI3RjU3OEY0QjI5N0Q3QTI4MDA0MkYzNTlFRjE3NTNCMkVBQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYHUZ95jT14ggNqUh+/el4M5Uc
ZVTFRRrstepGRUNoJluVN1BzPHvkTG2FU4zwlUGGv+TKQUz1X/Q0tY1gAUzG9hLO
BAwvFUVJJIUnI+V/Q8zAGGCZFXz5q49QrVomvW6ma1rJPWBvZ963CKeP34LUedcb
xrw+WZr3r4fco7ftaaVRuW3IWylVBlvyQecc1uLRhIMuPIXAUloAK1QZwR9/aFdS
jYhPWfC2IJmzAuzKuFL4vpefXOLtCDtqCHB97aXP9OXeNdnfKLDcDSgumTiImDxe
QSBbmH0jSKluVIhvxEVze7hI1RH7cliW2ssWkvZ0kT11c8r8mnbKwySwREgtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKNt/V49LKX16KABC81nvF1Oy6r0wHwYDVR0j
BBgwFoAUKcMWV6lgwuk1rlTN9fhKkTzPGa4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNa
S2svMC8yOUMzMTY1N0E5NjBDMkU5MzVBRTU0Q0RGNUY4NEE5MTNDQ0YxOUFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5QzMxNjU3QTk2MEMyRTkz
NUFFNTRDREY1Rjg0QTkxM0NDRjE5QUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvS0RqVHR1VmZSeHliUUVDWmZNUm92NVo2RHByeUY3TXlRTjE3djJzWktrLzAv
MzEzNzM3MmUzMjMyMzEyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM3MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArHdiDANBgkqhkiG9w0BAQsFAAOCAQEAgSAf
7JNabs++HDUyVFGfDxhjirRBtOP/UgVk2Rft2lTmdEFHA7SUcobSr/KI84GrEI6A
M1/vOYHR1oziuK5h3iiJpKk5D/ZyMfWq5ePjrWYHS5ywHlwLkibXlVlpE9xpZ1tl
w3xvxTI6ILWjTXxQ5Ru1F+CtQgSl6FlbyNtc2BIfGWm2LkUboQF56nmOKGY13g5C
pc/x+FPhjjnOogcO3TzlQzXQ+qvTfpirKF0ukw2s0TQxk2Txd26PwvXBB0MbC3Qb
AMbVyymQColK3IXiEsDAlLGA5Eb24zHELIbfKoNDJiBkbHMBpLEmp1oLmXKPWHzs
vq9+KWK+mL3GciFwpg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:12:01 2025 by rpki-client