Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133312e3136302e302f31392d3139203d3e203238323130.roa
File: 3137372e3133312e3136302e302f31392d3139203d3e203238323130.roa (raw, json)
Hash identifier: AqHIEWvwb8DH4jcaSetLjmu3Xpi/MpbCOOBmkOss3BI=
Subject key identifier: AF:2A:93:71:10:59:FD:97:02:DE:0A:41:37:F5:43:44:28:48:3F:F5
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 3621BB5C51CC2E10FFCC839B5F60CAF95ADF28CC
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133312e3136302e302f31392d3139203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:12 +0000
ROA not before: Thu 06 Mar 2025 04:37:12 +0000
ROA not after: Thu 05 Mar 2026 04:42:12 +0000
asID: 28210
IP address blocks: 177.131.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:21:bb:5c:51:cc:2e:10:ff:cc:83:9b:5f:60:ca:f9:5a:df:28:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:12 2025 GMT
Not After : Mar 5 04:42:12 2026 GMT
Subject: CN=AF2A93711059FD9702DE0A4137F5434428483FF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:5b:1c:0e:22:d7:64:45:db:db:15:1c:67:
f4:a7:00:12:9d:82:db:c5:44:be:e4:dc:46:60:cb:
4b:c0:67:0b:d0:14:9c:0b:fc:70:ef:5f:da:f3:5c:
5d:9d:c0:b1:ca:a0:da:3d:cf:3c:06:38:21:4d:7d:
01:92:52:e1:0c:a3:ca:c0:6b:5b:c0:51:9f:98:ec:
9c:71:b0:ac:7e:f0:36:f9:2f:e4:94:c6:96:45:93:
40:e7:9b:ab:9a:39:f0:3a:1f:12:44:a9:f8:0e:14:
18:7f:38:e6:7f:47:10:1d:19:6d:83:70:5b:69:56:
1a:d7:7f:64:51:4b:fa:85:9a:57:fe:b3:0b:9e:4c:
9e:0e:7a:f5:8c:a2:5b:d0:56:3e:1f:95:09:3f:fd:
18:30:0d:e5:d9:a9:02:22:99:b4:9e:52:82:00:1e:
1f:90:55:34:03:65:61:09:aa:b1:93:85:5f:90:13:
85:24:b0:0b:31:ac:77:14:00:af:a3:ed:57:77:da:
d0:03:99:60:b4:e9:43:45:9d:cb:15:19:ae:11:4b:
09:28:b9:c3:6d:64:0a:d5:5e:bc:48:f7:41:58:41:
78:f2:0c:73:59:46:2a:ef:e5:1d:b3:89:16:13:71:
dc:8b:de:5e:65:a4:9d:7b:24:be:bb:e1:9b:a1:f9:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2A:93:71:10:59:FD:97:02:DE:0A:41:37:F5:43:44:28:48:3F:F5
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133312e3136302e302f31392d3139203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.131.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:10:89:ad:1c:f6:d7:88:20:0f:cd:f0:17:88:d5:ff:2c:b7:
30:21:87:a8:71:dc:15:87:10:45:9d:5b:fa:ac:0d:47:45:89:
18:9c:64:46:f5:f0:c0:6c:67:6b:48:2f:f0:52:28:b4:56:19:
a2:06:e4:a0:1c:5f:ce:1b:7f:e0:7b:4c:8c:4a:fe:af:08:53:
9a:e7:fc:f8:a3:60:7d:1e:20:bf:d5:ba:ce:e4:81:d7:4d:d8:
7e:59:b9:cb:40:d3:92:7b:fb:84:9d:f0:4e:fc:de:94:58:ab:
51:c8:c4:d8:c0:2a:63:55:b6:b9:11:87:f1:48:21:c8:37:d4:
ca:fb:d1:5b:ae:95:bb:d2:79:9f:fe:e1:4e:68:21:b8:3d:46:
75:b5:b2:81:a3:84:77:31:d9:03:6a:72:7c:b7:5c:13:f6:5f:
95:f8:01:81:4b:ba:30:8b:41:74:b3:44:cb:68:91:83:2a:4f:
79:ac:b2:66:30:99:d0:a9:28:21:4b:16:3b:04:5e:8c:c5:46:
2a:88:88:ce:8e:d7:63:48:3e:84:8e:18:e9:ee:9d:c5:dc:51:
81:a4:74:30:64:37:87:2a:51:ad:ed:6e:8c:2f:4f:fb:d2:4a:
b0:f1:bd:27:0e:9a:6a:32:e6:03:4a:8c:c9:d7:0a:2b:76:3c:
4b:50:99:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:39:34 2025 by rpki-client