Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35322e302f32332d3233203d3e20323633333437.roa
File: 3139312e33372e35322e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier: C7dP5KIkelDXdw4IbvwJnSg5bTgufWR1O43jEQ9BK68=
Subject key identifier: 76:77:C6:6B:B5:BF:D2:18:EE:9F:C1:2C:E0:96:20:20:C3:9E:6E:16
Certificate issuer: /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial: 75DCD751F46F88D02BF49E7E38DFCA314B8FCDE8
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35322e302f32332d3233203d3e20323633333437.roa
Signing time: Thu 06 Mar 2025 18:28:50 +0000
ROA not before: Thu 06 Mar 2025 18:23:50 +0000
ROA not after: Thu 05 Mar 2026 18:28:50 +0000
asID: 263347
IP address blocks: 191.37.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:dc:d7:51:f4:6f:88:d0:2b:f4:9e:7e:38:df:ca:31:4b:8f:cd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Validity
Not Before: Mar 6 18:23:50 2025 GMT
Not After : Mar 5 18:28:50 2026 GMT
Subject: CN=7677C66BB5BFD218EE9FC12CE0962020C39E6E16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5c:1d:75:97:e0:40:9d:bb:a4:09:c9:d8:7c:
f8:31:bb:a1:56:07:0d:ed:1b:1e:7b:99:bf:89:b9:
f6:b1:95:e1:a5:74:cb:2c:66:49:d1:8d:97:bb:fe:
c1:b5:9a:ef:a0:17:14:82:4d:61:26:d8:ff:a1:8f:
04:f9:61:fb:05:dd:8f:fe:c5:61:a3:fd:6e:fe:ad:
97:fb:91:9c:89:7a:38:21:a5:c9:f9:93:49:d2:a3:
23:d8:b0:d0:2d:89:30:0f:67:61:5b:f0:2b:09:d7:
14:64:ab:88:a6:46:2d:5d:65:0c:01:eb:c8:75:e3:
99:4f:96:20:cb:8a:a2:00:80:a4:3f:4f:63:f9:3a:
92:de:dc:81:74:a7:a0:90:f4:4d:c2:d1:25:7b:5e:
42:00:f6:9a:f0:2f:40:da:5c:73:0c:0b:1c:6c:cf:
2e:20:46:30:7b:4e:f0:51:93:52:dc:01:1d:52:3d:
c5:cd:56:77:e1:4a:a9:d6:25:a5:7f:d2:e7:4d:0b:
11:66:29:6b:8c:4e:03:a9:81:c3:a7:cd:5b:d3:3e:
e4:d3:aa:ca:3b:15:6b:68:f0:7e:33:b9:88:d5:10:
7f:19:d3:16:4c:70:3f:bd:d4:23:15:15:e1:ed:5c:
82:23:36:d4:56:36:c5:3d:91:85:af:bb:ac:6c:47:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:77:C6:6B:B5:BF:D2:18:EE:9F:C1:2C:E0:96:20:20:C3:9E:6E:16
X509v3 Authority Key Identifier:
keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35322e302f32332d3233203d3e20323633333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.52.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:fb:ba:b6:2f:76:49:9b:5f:62:6e:45:8b:a4:5f:b2:cc:2a:
34:fe:e7:fa:23:59:b1:d9:d3:ba:3f:57:fe:42:45:b3:6f:d5:
0d:b6:31:7b:c8:92:f0:b0:c8:7c:a5:b0:75:2b:26:8b:e7:ea:
f1:cc:73:e4:cd:f8:a1:69:2a:ef:b3:53:a3:5f:00:fd:97:77:
fa:5b:dc:21:98:d4:34:10:f3:e4:0a:ae:0b:69:d1:90:1d:46:
16:7d:a4:6a:cc:81:39:f2:bd:e8:3d:18:f7:e3:4c:70:6d:4c:
e8:f7:10:41:f0:49:e9:6a:39:9d:9b:f9:ce:c4:a2:9b:02:46:
2b:aa:cc:f6:0f:d5:29:24:ab:c9:81:55:4e:d8:6a:2d:19:06:
a9:9b:a3:53:f2:b2:37:89:0a:03:a3:c3:11:cf:1d:70:80:19:
30:d9:93:5f:e8:61:d1:01:88:1b:24:7f:0f:e0:fa:69:8e:75:
d3:d1:7b:e8:2a:f6:a6:d0:88:8a:f6:41:17:58:ed:71:c9:e8:
77:93:0a:19:65:48:88:f8:29:45:b9:a0:72:15:e3:35:25:15:
9c:49:f2:b1:3b:be:05:ef:c9:16:57:93:36:73:44:c6:75:76:
ba:0f:3a:a7:3e:8c:9e:8e:56:58:81:7c:fc:1a:ca:be:36:20:
47:d7:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:29:38 2025 by rpki-client