Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa
File: 3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier: cfFCUQhpCOMKKBOmYt1zNQLb3sUPDxo0PY9Hdwmp6XA=
Subject key identifier: A3:38:08:08:76:5D:58:05:7E:BE:08:71:4A:59:FD:2D:51:6C:58:E0
Certificate issuer: /CN=F3E5032069F08FCAFC13EA1C6AAA29F96BC47461
Certificate serial: 3777C0AAAA2E636881666D9938140F45397FC182
Authority key identifier: F3:E5:03:20:69:F0:8F:CA:FC:13:EA:1C:6A:AA:29:F9:6B:C4:74:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa
Signing time: Tue 01 Apr 2025 13:46:25 +0000
ROA not before: Tue 01 Apr 2025 13:41:25 +0000
ROA not after: Tue 31 Mar 2026 13:46:25 +0000
asID: 262550
IP address blocks: 177.72.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:77:c0:aa:aa:2e:63:68:81:66:6d:99:38:14:0f:45:39:7f:c1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3E5032069F08FCAFC13EA1C6AAA29F96BC47461
Validity
Not Before: Apr 1 13:41:25 2025 GMT
Not After : Mar 31 13:46:25 2026 GMT
Subject: CN=A3380808765D58057EBE08714A59FD2D516C58E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:a1:6c:eb:c4:e8:ef:0f:ab:d4:5d:05:52:
55:fd:84:f3:dc:42:5c:fa:b5:16:32:0b:b7:8c:e8:
49:80:01:b0:3e:2d:68:2c:f1:28:6e:67:31:9a:50:
38:a9:b3:fb:0c:15:40:44:28:e8:25:77:6f:86:27:
7d:ec:bb:8e:45:46:ea:ae:0b:a0:da:19:0c:2d:80:
97:d8:21:60:76:a0:56:70:d6:2c:93:24:ec:b3:85:
36:ab:e5:2d:f1:c2:11:8b:8f:fb:71:7d:cd:a5:b1:
f1:67:e9:83:7a:3e:ad:6b:b1:6d:b6:f2:b4:0e:96:
22:b4:e1:d2:5f:c6:d0:90:c4:48:58:f8:55:e4:69:
22:b3:15:9e:42:b9:e8:ae:1f:17:da:93:ba:cc:03:
5f:33:a0:de:7f:ab:b8:9d:17:2e:ba:ee:c8:7d:b0:
57:c9:1d:bb:81:33:f1:10:98:89:46:74:52:67:8c:
28:a7:c5:68:5e:25:2a:9c:da:56:9b:df:ae:17:88:
2b:a6:e9:a5:e5:a1:89:fd:c9:08:25:45:c3:64:0d:
7e:10:36:70:c9:8d:e0:2b:bd:f6:39:a1:9e:f9:59:
f9:8c:b0:50:b6:75:0a:5e:d0:5a:45:a2:73:a9:52:
76:46:41:8a:6d:75:aa:57:79:47:b2:8e:20:9d:93:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:38:08:08:76:5D:58:05:7E:BE:08:71:4A:59:FD:2D:51:6C:58:E0
X509v3 Authority Key Identifier:
keyid:F3:E5:03:20:69:F0:8F:CA:FC:13:EA:1C:6A:AA:29:F9:6B:C4:74:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.72.172.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:43:76:49:9d:25:01:d4:7f:d8:d3:6e:e0:dc:b5:35:24:3f:
a4:d4:a9:ec:b9:42:85:37:d7:4b:f1:a8:9e:3b:19:05:01:3b:
55:d2:59:a2:60:87:64:4a:a9:27:63:fb:b3:b2:29:95:ab:23:
ad:0b:7d:40:b2:14:8d:4f:7f:4e:85:e1:52:9a:10:19:31:9d:
32:c0:1d:6f:f4:86:17:9b:da:e4:e3:9a:0d:1d:26:9b:2b:43:
63:ad:cc:7b:1b:e8:ef:c0:b7:89:e4:03:ec:ae:5f:16:09:e0:
f3:24:2b:22:2f:eb:01:3a:8a:f0:2e:5c:1c:45:76:20:4f:1a:
70:27:15:f2:4c:56:40:c5:de:97:cd:39:49:11:35:1d:97:c6:
ee:4c:df:b9:f3:e5:a0:c3:b3:bd:6a:f0:ca:42:a9:a6:8a:d1:
58:24:f8:ba:cf:f8:4f:2c:59:7f:cf:5e:f3:21:dc:6e:3d:fc:
b1:8c:a0:bb:64:c9:43:82:79:63:14:84:fc:e2:e4:0c:24:ed:
30:c5:9f:68:e7:24:0f:a7:a6:7b:25:ea:c7:77:2a:e5:96:93:
d3:d4:7a:41:93:ed:6a:fe:0d:d4:c4:c7:57:4c:38:8c:5c:51:
69:08:f1:f1:71:ca:0c:86:61:c3:50:69:f4:c1:ba:01:fa:41:
d9:d2:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:02 2025 by rpki-client