Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e33362e302f32342d3234203d3e203238323130.roa
File: 3137372e3133372e33362e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: pC3AYdzxeLmdHywAFm131N4+x/O9lF6DgYhHTJQchKQ=
Subject key identifier: D1:69:5E:36:78:C5:2F:09:1B:67:19:C0:76:A8:37:09:56:B3:C8:02
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 5A507836864A10E98E33880CD3B879FA18F4CF5B
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e33362e302f32342d3234203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:14 +0000
ROA not before: Thu 06 Mar 2025 04:37:14 +0000
ROA not after: Thu 05 Mar 2026 04:42:14 +0000
asID: 28210
IP address blocks: 177.137.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:50:78:36:86:4a:10:e9:8e:33:88:0c:d3:b8:79:fa:18:f4:cf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:14 2025 GMT
Not After : Mar 5 04:42:14 2026 GMT
Subject: CN=D1695E3678C52F091B6719C076A8370956B3C802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dd:08:55:40:6e:dc:5e:28:b6:6c:5e:e4:30:
0a:b0:cd:d7:5c:d5:75:85:0f:ab:42:52:be:9a:5f:
ef:8e:51:9b:91:63:ee:81:1d:f8:59:53:05:9d:b0:
e3:27:a6:01:ec:8a:88:84:38:ff:ec:c7:5f:78:02:
e0:22:b1:a1:37:11:53:58:db:7a:05:fa:ec:2a:0f:
2a:6a:0b:d8:42:d9:3c:af:2b:a1:87:05:9f:2a:d6:
83:b7:c3:67:1b:0e:c8:0a:01:58:f7:27:68:eb:17:
ae:25:70:23:0c:6f:7a:94:2f:6b:cd:3a:a8:bc:0e:
63:4a:ba:6d:aa:bd:38:bc:5e:3d:bb:9f:63:3e:04:
52:af:54:3b:ef:1e:17:a7:39:9f:4b:7e:b0:23:43:
31:32:40:02:1f:b1:9d:a5:00:39:e8:cb:88:96:d4:
1d:0b:19:3e:ad:e8:08:72:29:46:d0:9f:ac:43:c5:
77:0a:02:61:82:6f:bc:6d:6e:f9:5d:50:32:63:cf:
05:3c:a2:45:c1:d4:49:27:1a:b3:91:9a:1b:99:c9:
fd:7f:a2:de:36:f2:5b:0a:81:0f:1e:d0:69:de:b5:
aa:8c:63:a6:a9:e2:3a:12:91:f4:03:27:ed:57:b9:
49:3b:3f:f6:15:1e:62:b1:f9:0f:7a:2f:df:59:02:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:69:5E:36:78:C5:2F:09:1B:67:19:C0:76:A8:37:09:56:B3:C8:02
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e3133372e33362e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.36.0/24
Signature Algorithm: sha256WithRSAEncryption
41:4c:36:a2:f1:55:67:d6:b8:f8:0e:b0:f6:d3:d1:f6:3d:57:
f3:a0:e9:02:fa:bc:31:d7:09:e8:38:3d:0c:51:3a:82:f2:08:
ee:8a:1f:54:00:65:a1:91:92:ef:3e:15:c2:32:49:58:39:ca:
9b:ae:05:ea:d8:5b:19:95:25:82:5f:1b:e0:2c:71:71:7a:37:
99:95:77:25:1e:41:f9:be:25:8a:38:4a:f9:17:9e:47:b2:0d:
c8:b4:2a:1e:7f:86:5b:dd:15:46:ea:70:29:c4:cd:ec:bf:73:
69:83:c4:f7:8d:30:a4:a9:53:1b:08:d9:dc:7d:7d:94:23:05:
2a:45:06:ac:d4:3b:ae:0e:37:f9:4b:b0:66:90:51:58:72:58:
3d:0b:61:3f:db:ee:cd:50:4d:90:f7:51:93:23:e2:a3:e4:b3:
3a:4f:de:78:9a:98:5b:d5:01:31:9a:a5:95:6e:b6:94:48:0a:
7b:89:3f:ce:44:19:2f:4c:ef:15:59:18:22:fb:7f:13:85:36:
b0:8b:2b:92:2d:77:5b:8f:0a:48:b4:c6:0b:a9:ca:90:05:85:
6a:4f:c9:37:70:e9:d1:d4:f4:7b:fa:2a:77:29:db:f2:d4:fe:
0d:83:b1:c2:97:1c:ab:b8:4f:79:77:e2:8b:88:2f:15:c0:61:
c0:ce:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:48:03 2025 by rpki-client