Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3230382e302f32312d3332203d3e20323633303437.roa
File: 3137372e3132392e3230382e302f32312d3332203d3e20323633303437.roa (raw, json)
Hash identifier: xjp3G2uxpcJW16YRqGAJMM4i15uV2TPMooSRUPvK1wY=
Subject key identifier: 74:CF:8E:C0:9C:D8:71:E4:3F:9A:34:52:67:0C:2D:E6:3C:D4:14:CE
Certificate issuer: /CN=2D5218850067B1879FF7D928A844733CA008C908
Certificate serial: 398B092218C0CDF2F0B20703DE4B101A614B2C58
Authority key identifier: 2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3230382e302f32312d3332203d3e20323633303437.roa
Signing time: Wed 29 Jan 2025 19:04:42 +0000
ROA not before: Wed 29 Jan 2025 18:59:42 +0000
ROA not after: Wed 28 Jan 2026 19:04:42 +0000
asID: 263047
IP address blocks: 177.129.208.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:8b:09:22:18:c0:cd:f2:f0:b2:07:03:de:4b:10:1a:61:4b:2c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D5218850067B1879FF7D928A844733CA008C908
Validity
Not Before: Jan 29 18:59:42 2025 GMT
Not After : Jan 28 19:04:42 2026 GMT
Subject: CN=74CF8EC09CD871E43F9A3452670C2DE63CD414CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:17:e1:3c:d6:c8:7f:01:37:12:83:f7:2c:
a4:56:f8:44:84:47:42:1c:01:4b:13:60:d2:05:74:
ce:cb:3b:2b:6f:7e:29:57:f2:20:33:9c:92:1a:78:
95:71:4f:fe:a4:16:21:f1:84:c9:42:0b:f0:a1:3f:
d0:58:23:5b:46:94:7f:30:16:98:79:3b:8e:74:c9:
ff:52:1a:21:f9:ff:a0:1d:bd:40:40:0d:99:1c:c6:
42:31:3c:04:1e:e7:8e:26:6a:43:bb:0d:7c:61:49:
50:c7:45:da:87:5b:22:3c:f8:8a:92:5c:73:a3:f6:
2c:c9:a1:4a:f3:92:e9:2e:5a:32:91:3a:e6:bb:c9:
12:02:fa:24:a8:27:e4:65:cb:42:e8:9f:7d:8e:8a:
04:68:5a:01:17:cd:6c:a3:23:01:84:ab:e8:85:6c:
0e:21:16:12:32:aa:61:e5:9d:4f:7d:5e:7d:e0:3e:
7c:92:64:d3:36:cd:3a:a2:63:c7:d6:06:8f:d9:c9:
56:57:bc:ba:f8:0f:e5:e0:38:15:17:e7:04:6b:eb:
3c:89:3b:59:2a:7d:1e:ea:b5:27:53:4d:5b:8a:ef:
2f:34:37:2a:a5:61:c1:66:5d:f6:89:a4:16:e1:75:
d0:0b:9c:b9:b8:01:c8:aa:95:05:3f:40:a5:5b:3d:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CF:8E:C0:9C:D8:71:E4:3F:9A:34:52:67:0C:2D:E6:3C:D4:14:CE
X509v3 Authority Key Identifier:
keyid:2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3230382e302f32312d3332203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.208.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:66:b1:f1:3f:36:62:3a:88:29:8f:52:f3:b8:50:91:ff:55:
7b:55:4b:a3:9b:39:2b:62:08:8b:c3:62:e7:66:44:db:ab:fe:
fd:94:f8:28:d3:3c:75:70:e8:db:36:97:4e:86:1f:21:0c:d9:
10:55:0b:45:48:e5:80:5f:ff:9f:d8:f8:db:3e:4c:30:96:f1:
d2:4e:6f:d2:59:56:cc:be:df:a2:44:6c:2c:a6:0a:46:d1:c4:
c8:72:fe:0c:2f:b5:25:55:da:7b:3b:6f:41:d2:bf:9c:87:4e:
7e:57:0f:ad:8f:f4:af:ed:71:29:91:6e:8e:ca:ff:37:d2:a9:
b3:f3:12:bb:af:33:23:c0:d0:04:ea:70:de:56:2c:bb:e6:23:
04:7b:b4:66:b0:c5:98:8b:ec:bb:3f:85:7d:55:4e:93:47:00:
b4:47:ea:09:77:bd:ea:6b:5a:c9:a5:c2:1c:88:54:d5:13:d5:
8f:5d:8d:b0:ca:59:77:bf:a1:46:10:b3:8a:7a:de:ea:bc:0d:
34:96:2e:76:7f:79:8e:25:9d:b4:ae:6f:bc:33:eb:d2:8c:ca:
7d:c2:91:9a:b9:d1:9f:75:fa:1b:f6:aa:0a:cb:11:92:d3:88:
b2:b7:c7:01:c6:f6:e9:23:37:39:04:0d:bd:86:22:5e:c0:d0:
34:73:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:57:18 2025 by rpki-client