Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e36382e302f32342d3234203d3e20323730393531.roa
File: 3137372e33362e36382e302f32342d3234203d3e20323730393531.roa (raw, json)
Hash identifier: cF3XNQi5RowSjCmVJLHMbaeipRulmIdVf2q5d8mv1uY=
Subject key identifier: 19:84:42:9F:1E:BB:64:C5:77:1C:14:33:AF:A6:0A:78:38:6B:FA:69
Certificate issuer: /CN=BAB424425130D4A907ADC474343110DD5B32F7B5
Certificate serial: 9A940F2377F8FBC7A9004CA45FADBBF95E040A
Authority key identifier: BA:B4:24:42:51:30:D4:A9:07:AD:C4:74:34:31:10:DD:5B:32:F7:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAB424425130D4A907ADC474343110DD5B32F7B5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e36382e302f32342d3234203d3e20323730393531.roa
Signing time: Mon 10 Mar 2025 12:47:02 +0000
ROA not before: Mon 10 Mar 2025 12:42:02 +0000
ROA not after: Mon 09 Mar 2026 12:47:02 +0000
asID: 270951
IP address blocks: 177.36.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
9a:94:0f:23:77:f8:fb:c7:a9:00:4c:a4:5f:ad:bb:f9:5e:04:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAB424425130D4A907ADC474343110DD5B32F7B5
Validity
Not Before: Mar 10 12:42:02 2025 GMT
Not After : Mar 9 12:47:02 2026 GMT
Subject: CN=1984429F1EBB64C5771C1433AFA60A78386BFA69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:eb:8d:13:eb:6c:a8:83:e7:20:1b:2b:05:
2b:ad:5a:b4:61:39:81:fe:49:17:b1:e2:e9:dd:8a:
ba:6c:e9:09:55:6f:f5:46:97:6a:72:59:00:c2:2d:
b8:17:81:c6:cd:75:c8:62:be:b6:20:7a:15:9e:41:
02:0c:da:c3:06:48:cc:f3:2a:0a:c7:b0:59:f5:27:
c3:b3:ce:26:26:b4:29:ee:37:fc:de:f3:b2:28:53:
e4:68:b8:5a:bc:7d:31:71:ba:63:4b:77:e5:2a:1c:
bb:96:08:ec:34:9d:c0:69:4b:41:d4:7c:77:ca:5b:
ba:b8:8b:e2:14:4d:0f:c9:dc:fb:9e:ea:81:7f:1b:
a5:cc:8e:a9:80:df:33:4a:eb:75:f3:5d:fd:78:61:
0c:66:e1:5a:c7:27:cb:4c:dd:a0:10:b0:bc:8e:5e:
80:90:01:00:69:be:73:9a:23:d7:b7:91:d4:ba:4b:
42:ce:c9:d8:9a:d2:17:26:3a:d5:39:c2:d5:b0:2d:
df:d3:b1:c7:60:14:07:bd:fd:63:1d:d5:27:54:95:
d9:c4:aa:86:84:3e:97:6d:8a:f6:00:6b:bb:3e:64:
08:b4:19:c3:c8:05:1a:d1:f3:7a:5b:8d:a6:f8:e4:
35:d8:9f:61:4d:e5:b4:4f:20:12:eb:7e:32:43:d9:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:84:42:9F:1E:BB:64:C5:77:1C:14:33:AF:A6:0A:78:38:6B:FA:69
X509v3 Authority Key Identifier:
keyid:BA:B4:24:42:51:30:D4:A9:07:AD:C4:74:34:31:10:DD:5B:32:F7:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/BAB424425130D4A907ADC474343110DD5B32F7B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAB424425130D4A907ADC474343110DD5B32F7B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e36382e302f32342d3234203d3e20323730393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4a:b9:b1:b3:85:b3:96:a6:6b:c5:e2:9c:9d:11:fe:a8:88:
dc:9d:58:c5:64:4b:62:f4:7e:9a:c1:01:4a:9f:9b:c4:89:37:
c6:43:fb:15:46:ca:c1:fa:f4:c6:67:2b:3c:b1:db:9e:4f:4d:
3d:e5:02:76:7c:01:ff:88:92:08:13:b5:26:8e:09:78:5b:a4:
d1:9f:21:53:57:32:9a:0a:3c:38:f0:3e:a4:c5:8e:9d:b5:2e:
72:8e:b6:bf:e6:81:27:11:8e:ef:2f:83:64:7e:d1:68:e8:30:
4b:9e:e6:7d:21:fb:ef:fc:32:f3:de:9f:a2:bb:b0:8f:ae:65:
0b:66:f3:3f:8b:30:c2:17:cb:e4:bb:f0:9f:00:ca:4e:0e:1d:
67:f5:2d:10:a2:5c:2c:47:6e:9b:da:bd:a1:73:a7:ef:7b:40:
76:b1:f0:cc:87:9d:06:bb:40:85:e3:f6:fc:93:75:19:bb:85:
ec:b4:e4:be:6b:32:17:67:7f:4c:83:8f:c3:3d:8b:7d:ee:7c:
0f:bf:33:68:f7:d0:1f:92:9d:6a:9c:60:e9:4a:3f:55:63:94:
4e:81:cc:6c:93:40:f6:7c:13:c9:aa:29:ff:ba:50:3c:97:52:
a9:4d:df:0d:d4:27:35:ef:e4:79:61:01:42:0b:b9:6d:fb:d7:
d5:db:8c:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAJqUDyN3+PvHqQBMpF+tu/leBAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFCNDI0NDI1MTMwRDRBOTA3QURDNDc0MzQzMTEwREQ1
QjMyRjdCNTAeFw0yNTAzMTAxMjQyMDJaFw0yNjAzMDkxMjQ3MDJaMDMxMTAvBgNV
BAMTKDE5ODQ0MjlGMUVCQjY0QzU3NzFDMTQzM0FGQTYwQTc4Mzg2QkZBNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNuuNE+tsqIPnIBsrBSutWrRh
OYH+SRex4undirps6QlVb/VGl2pyWQDCLbgXgcbNdchivrYgehWeQQIM2sMGSMzz
KgrHsFn1J8OzziYmtCnuN/ze87IoU+RouFq8fTFxumNLd+UqHLuWCOw0ncBpS0HU
fHfKW7q4i+IUTQ/J3Pue6oF/G6XMjqmA3zNK63XzXf14YQxm4VrHJ8tM3aAQsLyO
XoCQAQBpvnOaI9e3kdS6S0LOydia0hcmOtU5wtWwLd/TscdgFAe9/WMd1SdUldnE
qoaEPpdtivYAa7s+ZAi0GcPIBRrR83pbjab45DXYn2FN5bRPIBLrfjJD2XM9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGYRCnx67ZMV3HBQzr6YKeDhr+mkwHwYDVR0j
BBgwFoAUurQkQlEw1KkHrcR0NDEQ3Vsy97UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTF6Ym5Yajk4NGtMNFdrWHU4UW5CeFA5Q21XaVpKZTZFaTRwanpZRndv
cXEvMC9CQUI0MjQ0MjUxMzBENEE5MDdBREM0NzQzNDMxMTBERDVCMzJGN0I1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBQjQyNDQyNTEzMEQ0QTkw
N0FEQzQ3NDM0MzExMERENUIzMkY3QjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkxemJuWGo5ODRrTDRXa1h1OFFuQnhQOUNtV2laSmU2RWk0cGp6WUZ3b3FxLzAv
MzEzNzM3MmUzMzM2MmUzNjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsSREMA0GCSqGSIb3DQEBCwUAA4IBAQBfSrmxs4Wz
lqZrxeKcnRH+qIjcnVjFZEti9H6awQFKn5vEiTfGQ/sVRsrB+vTGZys8sdueT009
5QJ2fAH/iJIIE7Umjgl4W6TRnyFTVzKaCjw48D6kxY6dtS5yjra/5oEnEY7vL4Nk
ftFo6DBLnuZ9Ifvv/DLz3p+iu7CPrmULZvM/izDCF8vku/CfAMpODh1n9S0Qolws
R26b2r2hc6fve0B2sfDMh50Gu0CF4/b8k3UZu4XstOS+azIXZ39Mg4/DPYt97nwP
vzNo99Afkp1qnGDpSj9VY5ROgcxsk0D2fBPJqin/ulA8l1KpTd8N1Cc17+R5YQFC
C7lt+9fV24zu
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:42:08 2025 by rpki-client