Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32342d3234203d3e20323632383636.roa
File: 3137372e31322e3234302e302f32342d3234203d3e20323632383636.roa (raw, json)
Hash identifier: SU+lYtZ9LUKVbUpV1YUOKwkkEs+XnsgnMz2Xorw9T2c=
Subject key identifier: 74:56:18:2C:15:0D:DA:16:7D:E2:92:C7:A1:AE:11:1E:B3:AF:56:E8
Certificate issuer: /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial: 3FBEE80E12F8425146550B68ABD4A9EF344B7742
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32342d3234203d3e20323632383636.roa
Signing time: Thu 06 Mar 2025 01:21:40 +0000
ROA not before: Thu 06 Mar 2025 01:16:40 +0000
ROA not after: Thu 05 Mar 2026 01:21:40 +0000
asID: 262866
IP address blocks: 177.12.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:be:e8:0e:12:f8:42:51:46:55:0b:68:ab:d4:a9:ef:34:4b:77:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
Validity
Not Before: Mar 6 01:16:40 2025 GMT
Not After : Mar 5 01:21:40 2026 GMT
Subject: CN=7456182C150DDA167DE292C7A1AE111EB3AF56E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:ce:7c:c8:47:4c:06:b4:0a:eb:44:0d:ec:
f5:ba:56:0a:ed:c3:e2:9a:a9:d0:49:1d:2e:a7:27:
58:7a:bc:fb:d2:ac:4d:09:93:4d:31:97:86:58:54:
32:65:7b:99:6d:db:4d:49:f7:c3:4a:c7:5b:d3:d2:
54:c5:a8:d1:81:43:23:97:5a:59:1e:5f:a2:f2:9e:
8d:f3:85:0c:2c:eb:2e:0a:43:ad:20:92:d3:51:ea:
7d:e6:1d:ae:73:54:4d:9d:e8:1e:06:79:ad:4b:63:
89:4a:57:61:8c:26:ac:99:f1:39:18:64:19:eb:bd:
05:b0:ff:48:11:f9:7c:58:ac:1e:0e:99:c1:ae:99:
59:0e:5d:53:0b:3d:b0:dc:95:5b:e7:d5:d0:d2:26:
34:88:6a:cb:7f:14:9c:f4:41:c2:b1:ab:8d:31:ac:
33:1f:e3:ee:2f:69:33:49:d7:16:42:34:7c:ad:4e:
3c:ec:2c:56:9c:a8:e8:8a:f2:a0:42:90:16:f4:70:
02:42:25:9a:c5:d7:6a:ba:7d:e7:df:8b:ae:a1:4a:
f3:be:fc:ea:d6:d9:00:d2:c3:99:8b:06:ad:42:2c:
8c:3e:13:2b:3f:81:24:1f:62:be:a6:97:d4:4a:1a:
2d:a1:a7:c3:38:32:65:ed:22:8d:cd:ba:3b:cc:91:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:56:18:2C:15:0D:DA:16:7D:E2:92:C7:A1:AE:11:1E:B3:AF:56:E8
X509v3 Authority Key Identifier:
keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32342d3234203d3e20323632383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.12.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:1d:48:e0:08:82:4c:07:da:e4:a8:9f:c2:ed:b1:69:26:3c:
cb:ef:73:a0:38:d2:2e:b6:1f:2e:2f:c4:d3:37:d8:a2:56:cc:
29:82:cf:1f:d3:38:aa:0d:d8:19:ea:a0:c1:77:49:45:5c:95:
b8:52:8b:52:b1:4d:06:2a:6f:d9:83:8a:68:b8:5c:04:c0:2f:
6e:5a:f1:a7:03:d1:da:f4:51:36:90:8a:0d:6a:13:73:c5:bf:
3a:58:0e:9b:45:b5:75:16:19:ee:07:ea:e7:ba:af:3f:74:15:
a2:17:25:73:bd:f2:c8:60:e4:7d:02:60:3d:ec:76:f4:19:f6:
70:7e:df:84:8d:7c:b5:41:c5:9c:30:e4:7a:bd:18:09:a4:8c:
4f:53:eb:d2:5a:71:6e:37:c8:d7:4d:8c:0d:99:b5:5f:6d:62:
dd:4a:89:5d:e6:10:4e:67:0c:0d:55:96:de:5e:c2:16:4c:2d:
b8:60:b1:3e:f8:1c:a7:45:c8:47:90:66:cf:77:7c:ba:71:0f:
68:33:85:6b:93:b6:ae:18:bb:19:ec:3d:78:bf:e3:08:ce:36:
6b:00:e5:73:c2:ed:10:7f:78:c2:34:3c:63:04:47:02:86:cb:
8d:6c:02:d9:c9:fa:4b:e7:a7:67:61:c8:54:25:0b:73:e5:75:
a6:0e:a3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:30:52 2025 by rpki-client