Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37302e302f32342d3234203d3e20323730393531.roa
File: 3137372e33362e37302e302f32342d3234203d3e20323730393531.roa (raw, json)
Hash identifier: /AChxO3qVIPgEMCaDN7ZT6mSpKMzD4yz5MGL8m1exh0=
Subject key identifier: A5:2C:03:CE:19:A0:63:C7:9B:43:47:80:7D:14:12:75:7F:AA:99:D7
Certificate issuer: /CN=BAB424425130D4A907ADC474343110DD5B32F7B5
Certificate serial: 05AA5D6CD571E61864CF0A69717F9BDFEF8F9090
Authority key identifier: BA:B4:24:42:51:30:D4:A9:07:AD:C4:74:34:31:10:DD:5B:32:F7:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAB424425130D4A907ADC474343110DD5B32F7B5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37302e302f32342d3234203d3e20323730393531.roa
Signing time: Mon 10 Mar 2025 12:47:01 +0000
ROA not before: Mon 10 Mar 2025 12:42:01 +0000
ROA not after: Mon 09 Mar 2026 12:47:01 +0000
asID: 270951
IP address blocks: 177.36.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:aa:5d:6c:d5:71:e6:18:64:cf:0a:69:71:7f:9b:df:ef:8f:90:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAB424425130D4A907ADC474343110DD5B32F7B5
Validity
Not Before: Mar 10 12:42:01 2025 GMT
Not After : Mar 9 12:47:01 2026 GMT
Subject: CN=A52C03CE19A063C79B4347807D1412757FAA99D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:2f:38:98:29:0b:9f:de:c3:e3:6d:c3:17:
d2:e5:b2:36:f7:ac:d0:38:3b:d9:29:dd:e2:d6:70:
fb:b4:92:65:fe:77:11:6d:f5:85:7c:04:2d:eb:05:
c7:a6:ef:5e:88:4d:89:7d:e6:b6:46:57:84:e9:1e:
fc:33:5f:43:da:07:1e:64:2b:7b:47:98:15:6d:cb:
4e:1b:f9:3a:ed:af:92:36:f5:4c:b6:61:e0:a4:d2:
9c:ee:82:77:dc:5f:33:f1:37:70:f2:1e:be:fc:f3:
d1:12:ac:d0:eb:06:7b:69:72:89:80:41:13:55:72:
c0:47:ea:9a:3b:94:e5:7d:e3:6c:c5:9a:da:1d:90:
67:61:f4:e4:56:2d:10:e4:89:39:bb:67:3e:64:0a:
b9:c0:01:63:36:5b:82:c0:27:0a:af:24:4d:c4:90:
e3:a1:15:47:38:5c:e9:80:b8:96:7d:c9:71:4e:6a:
c7:72:a0:fc:5d:f5:53:0a:25:de:52:00:40:42:62:
b8:7d:4d:ce:1e:09:e6:0d:d8:d0:78:1e:b1:48:41:
2d:ff:e7:f5:2c:f6:23:e0:eb:de:b6:74:6c:8d:9b:
12:11:69:56:cf:b7:d3:fe:a2:d1:6f:e9:38:3b:d9:
be:84:eb:24:54:d8:d4:fe:ec:29:15:87:67:20:a7:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2C:03:CE:19:A0:63:C7:9B:43:47:80:7D:14:12:75:7F:AA:99:D7
X509v3 Authority Key Identifier:
keyid:BA:B4:24:42:51:30:D4:A9:07:AD:C4:74:34:31:10:DD:5B:32:F7:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/BAB424425130D4A907ADC474343110DD5B32F7B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAB424425130D4A907ADC474343110DD5B32F7B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37302e302f32342d3234203d3e20323730393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.70.0/24
Signature Algorithm: sha256WithRSAEncryption
42:04:a4:9a:39:e7:70:9b:2f:a1:3d:d1:06:9a:bc:32:d4:2e:
b9:79:03:b3:fa:a1:0d:1c:40:26:88:8a:2f:15:4d:c1:cb:e9:
ec:e1:0a:69:dc:a9:90:88:f6:46:55:9d:0c:df:95:76:6c:93:
13:14:9c:04:7a:11:6d:86:b4:25:b8:f5:7e:98:17:3e:ff:9d:
f6:31:bc:c6:59:7b:4a:9a:0b:93:95:64:d7:d6:ff:10:a6:0c:
dc:a3:b0:55:1c:ad:e1:c5:90:01:64:e0:bd:f8:7a:03:5e:2f:
01:88:bf:33:85:42:25:2d:7f:4c:bd:45:df:73:83:26:d8:00:
01:0c:88:72:3c:59:b7:36:63:00:ad:79:c2:42:83:e2:da:61:
de:30:44:33:4a:38:df:b4:11:0d:ee:4e:62:22:c9:42:90:fc:
a4:d7:86:8d:f9:cf:09:25:37:c9:88:c9:f8:ba:45:63:6e:1a:
86:9b:a7:e1:5c:98:98:72:3f:b6:d9:65:61:bd:d2:f5:ff:bf:
10:e5:b7:20:92:8a:40:e2:50:da:c9:18:e3:12:4f:6f:ec:9b:
de:b6:f4:c9:56:2a:d2:9b:06:46:7f:db:8b:79:73:b0:0a:9e:
5e:99:10:32:5e:24:65:60:c3:c4:b2:44:ad:04:31:eb:d2:65:
5b:6a:18:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:43:25 2025 by rpki-client