Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/3137372e3232332e3134302e302f32342d3234203d3e20323731323039.roa
File: 3137372e3232332e3134302e302f32342d3234203d3e20323731323039.roa (raw, json)
Hash identifier: 5zIEjBaTEPPsfvC2W5CtlPoOWCi2Ol5aHTOhgB+ylII=
Subject key identifier: E3:3B:D9:FD:6B:94:BA:8D:E3:43:9C:3F:2F:43:CE:E1:D1:55:13:D6
Certificate issuer: /CN=0D43F36140A4C38AD745FB2C264948998A60F421
Certificate serial: 07EA3A2AC0E95C74C543B1676F52013871A62841
Authority key identifier: 0D:43:F3:61:40:A4:C3:8A:D7:45:FB:2C:26:49:48:99:8A:60:F4:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D43F36140A4C38AD745FB2C264948998A60F421.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/3137372e3232332e3134302e302f32342d3234203d3e20323731323039.roa
Signing time: Sun 26 Jan 2025 20:21:03 +0000
ROA not before: Sun 26 Jan 2025 20:16:03 +0000
ROA not after: Sun 25 Jan 2026 20:21:03 +0000
asID: 271209
IP address blocks: 177.223.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ea:3a:2a:c0:e9:5c:74:c5:43:b1:67:6f:52:01:38:71:a6:28:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D43F36140A4C38AD745FB2C264948998A60F421
Validity
Not Before: Jan 26 20:16:03 2025 GMT
Not After : Jan 25 20:21:03 2026 GMT
Subject: CN=E33BD9FD6B94BA8DE3439C3F2F43CEE1D15513D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:15:96:c4:6d:37:01:54:66:30:77:74:a2:
a5:59:42:d5:a6:b7:6a:16:3f:8b:13:d5:1b:b2:f6:
0e:ab:5b:3a:38:00:3e:ed:41:40:7a:78:7e:d0:5c:
bf:7e:6c:fe:6f:d8:0a:b9:a0:1e:69:3b:79:25:17:
04:d4:29:e7:7f:9c:0c:77:01:cc:08:7e:da:6c:04:
6e:00:88:b3:ff:f5:5e:03:8a:d0:30:bd:f4:52:3f:
9b:62:2c:a8:a6:6d:17:8b:c1:d5:6e:2b:e6:d3:43:
8b:9a:a7:40:66:f9:01:88:ef:a9:1d:7b:af:f4:1c:
c3:2e:18:f2:14:61:73:45:fb:b3:8b:e7:9b:f7:a1:
02:19:52:a8:8a:1c:d8:01:9c:43:de:17:10:0b:82:
85:2b:71:6d:fb:9e:97:31:1d:6d:e0:ea:b8:09:71:
81:fd:88:a7:21:79:26:54:69:dd:e7:d1:e8:22:f8:
40:6c:47:ad:5c:05:7a:07:90:ac:03:cd:84:3f:53:
77:5a:63:2b:5f:a9:2c:53:43:33:91:17:7d:3a:22:
1e:35:45:f7:7b:9d:09:7e:2d:74:66:c0:d6:4e:af:
ef:26:c4:42:3c:00:32:f0:de:ac:3c:66:25:fb:79:
0a:da:89:21:58:44:09:76:42:d6:6e:f8:7d:1a:e4:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3B:D9:FD:6B:94:BA:8D:E3:43:9C:3F:2F:43:CE:E1:D1:55:13:D6
X509v3 Authority Key Identifier:
keyid:0D:43:F3:61:40:A4:C3:8A:D7:45:FB:2C:26:49:48:99:8A:60:F4:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D43F36140A4C38AD745FB2C264948998A60F421.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/3137372e3232332e3134302e302f32342d3234203d3e20323731323039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.223.140.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ad:d9:1a:e7:f7:bf:34:0b:af:5d:77:7b:de:b2:d2:27:b0:
52:c2:e5:c9:1f:19:89:8c:be:23:03:26:ec:ca:af:be:a9:06:
4e:25:8f:00:78:f3:70:77:e2:69:c4:f1:8f:48:59:2c:3c:2b:
30:2d:b4:40:40:b3:b6:7d:c1:60:19:7e:87:d3:51:84:8e:79:
63:61:58:51:68:3e:fd:88:4c:d8:cf:4f:a2:bb:9b:1a:1f:4f:
af:c4:15:b9:f6:cc:4f:a0:d9:f3:32:73:36:5a:f5:a8:0e:b9:
7d:17:6f:f2:24:5a:d4:68:6f:19:f2:71:1c:a2:01:8a:dc:c5:
b7:4f:18:ab:a9:ea:37:61:ac:a0:9e:7a:20:a5:e4:84:eb:bb:
bf:76:d5:ec:fc:53:95:1a:f1:ec:4c:f2:af:3a:5f:e6:8f:81:
5a:8c:63:6c:c2:64:4c:56:09:a7:06:56:ab:69:43:43:cb:cd:
53:2f:ff:7a:76:6e:b9:a9:5e:c2:f3:65:5f:7a:7e:e7:9e:c0:
36:16:17:3a:84:0d:e8:4c:c3:05:0b:2a:a0:a8:e4:e1:e0:2f:
58:08:c6:49:df:20:7b:0c:75:a6:8d:be:be:3b:73:49:82:b3:
c4:83:2b:05:18:2e:42:c2:a1:68:47:81:a9:2d:0f:82:f1:45:
e7:13:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:43:18 2025 by rpki-client