Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32312d3234203d3e203532363031.roa
File: 3137372e3132342e37322e302f32312d3234203d3e203532363031.roa (raw, json)
Hash identifier: NYIt8xNbbcRtpy23YaiyOi5AW/YA5LOK+z7XxbB2SSs=
Subject key identifier: 37:E6:B2:37:F3:D0:1F:36:EF:BF:B8:48:0C:89:6B:8C:3C:20:D4:90
Certificate issuer: /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial: ABEFFBBCD1C323C408705EA57F7D2CA48AB9D0
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access: rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32312d3234203d3e203532363031.roa
Signing time: Tue 03 Dec 2024 18:44:06 +0000
ROA not before: Tue 03 Dec 2024 18:39:06 +0000
ROA not after: Tue 02 Dec 2025 18:44:06 +0000
asID: 52601
IP address blocks: 177.124.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ab:ef:fb:bc:d1:c3:23:c4:08:70:5e:a5:7f:7d:2c:a4:8a:b9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Validity
Not Before: Dec 3 18:39:06 2024 GMT
Not After : Dec 2 18:44:06 2025 GMT
Subject: CN=37E6B237F3D01F36EFBFB8480C896B8C3C20D490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b7:cd:9a:e6:75:bb:29:9e:d0:b8:aa:3c:cd:
f3:d1:6c:26:a4:f9:b3:eb:e0:8a:35:29:31:be:f4:
98:26:be:ec:23:83:14:16:7e:da:dd:a4:8c:79:27:
e9:09:31:45:d8:44:b1:2e:71:72:5d:8c:39:d2:80:
89:ac:73:2f:1d:bb:12:78:0f:d7:de:14:6d:c6:04:
22:27:c5:63:0b:f4:f3:19:34:51:e1:f7:4b:02:62:
34:0e:b6:c6:ee:09:1e:05:8d:62:22:d9:23:b9:8b:
f8:74:38:a2:27:af:6e:00:c9:35:1a:9a:21:20:15:
a7:a7:06:72:30:95:02:ff:90:eb:a1:2f:fb:8e:2c:
fe:a7:9f:7d:0f:33:07:22:8c:1c:a7:94:1c:ce:4e:
89:a9:c9:7d:2c:94:9a:7d:96:a3:da:fa:f9:9e:ac:
56:fd:bc:85:e2:62:bf:37:b0:d3:7a:cd:d0:8d:22:
7c:28:70:f5:98:25:13:80:a6:5b:d7:9a:72:05:ec:
ee:8c:b2:2d:c0:66:0b:ff:11:23:27:82:6b:d2:10:
61:fc:d1:28:d4:12:5d:b9:28:86:f5:e7:86:47:4d:
ac:44:64:69:62:d9:24:e6:1e:17:ec:f2:b0:aa:d8:
ae:75:cb:f0:f7:f0:73:2a:8d:c6:11:c6:bd:fc:d9:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E6:B2:37:F3:D0:1F:36:EF:BF:B8:48:0C:89:6B:8C:3C:20:D4:90
X509v3 Authority Key Identifier:
keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32312d3234203d3e203532363031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.124.72.0/21
Signature Algorithm: sha256WithRSAEncryption
81:a8:36:eb:d0:39:00:f0:1d:2d:72:8e:2a:79:7f:86:69:d4:
56:c3:78:ff:fa:df:3b:aa:3d:47:99:b0:af:2f:50:2d:fa:5e:
b7:0f:9a:bc:ac:b9:f0:6d:6c:bb:01:b6:72:7e:e1:01:e1:da:
c9:4d:a0:ad:53:c2:34:7d:fb:d4:8c:0e:78:40:11:c7:d3:a2:
c7:1d:d9:49:92:10:fc:4d:ec:8e:1a:88:8e:53:9b:af:6c:74:
b6:ec:8d:df:0d:96:51:b9:3d:36:82:52:b7:ec:52:ae:56:96:
31:f9:59:b7:0a:38:80:1c:57:3c:21:a7:5d:5b:d6:1a:07:40:
0e:e0:f2:a9:4c:c7:b9:ea:c8:76:2d:23:a2:4a:24:2b:a3:d6:
7c:dc:34:48:4c:a5:bc:58:93:de:0a:00:87:8a:59:e9:14:00:
9e:67:51:ac:1a:f9:50:38:b6:2b:7f:34:aa:9e:20:a4:9a:ae:
8e:c7:1e:bd:1a:f2:29:62:3c:2c:9c:66:f9:38:c2:af:b9:c1:
10:e3:29:f1:d3:a0:92:15:6c:2a:c5:ac:7f:c7:98:bc:73:14:
c1:42:fd:b8:1c:3b:d8:4f:9f:c3:1e:ff:44:9d:f9:9b:f7:94:
4d:0b:3b:4b:83:27:2b:04:cd:38:1d:83:6d:19:cf:3d:aa:b7:
dd:96:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:57:57 2025 by rpki-client