Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/3137372e37352e34382e302f32302d3332203d3e20323632353838.roa
File: 3137372e37352e34382e302f32302d3332203d3e20323632353838.roa (raw, json)
Hash identifier: zGhinLdhgyoTukFfGGg90RiRqdYGxtxS8z7orNn1PNU=
Subject key identifier: 4A:6E:67:FF:21:B6:AC:1A:7E:D8:92:FE:CA:21:4D:2F:15:F9:45:88
Certificate issuer: /CN=70257C060065495B0C625EE3C4FC503EAEB25ED4
Certificate serial: 58983EBFF10A500BD692F3AFEB11511C111CE9F8
Authority key identifier: 70:25:7C:06:00:65:49:5B:0C:62:5E:E3:C4:FC:50:3E:AE:B2:5E:D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/3137372e37352e34382e302f32302d3332203d3e20323632353838.roa
Signing time: Thu 06 Mar 2025 14:31:54 +0000
ROA not before: Thu 06 Mar 2025 14:26:54 +0000
ROA not after: Thu 05 Mar 2026 14:31:54 +0000
asID: 262588
IP address blocks: 177.75.48.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:98:3e:bf:f1:0a:50:0b:d6:92:f3:af:eb:11:51:1c:11:1c:e9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70257C060065495B0C625EE3C4FC503EAEB25ED4
Validity
Not Before: Mar 6 14:26:54 2025 GMT
Not After : Mar 5 14:31:54 2026 GMT
Subject: CN=4A6E67FF21B6AC1A7ED892FECA214D2F15F94588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:67:1c:35:7f:86:20:d9:8c:b1:3e:89:6b:
4f:e6:d5:d7:43:90:ce:f1:9b:a5:c8:7b:53:09:c9:
3e:2e:e8:c6:5c:50:b5:67:41:f0:b6:ba:65:fc:d9:
04:e4:a9:f8:ef:74:b1:51:21:14:c8:45:d2:e7:60:
6d:00:de:fb:59:04:35:dc:69:84:58:d7:0e:78:88:
22:a9:fd:e8:6e:11:d7:f2:80:3a:9f:1a:01:f7:a7:
da:63:f9:1a:1f:bb:12:3f:36:be:55:c6:f9:c6:fe:
f0:61:6f:d3:5f:a7:a4:6e:46:f0:86:3d:b5:e0:4c:
28:98:33:ee:06:1c:d6:4d:77:e9:71:e0:1a:32:16:
f4:0e:fb:b1:0f:35:6b:50:79:d9:29:96:b8:2b:72:
51:a2:1f:5a:b9:cd:8a:9c:1e:ea:51:17:07:b0:fa:
29:20:04:a4:f2:54:1f:70:54:a2:cf:3a:b5:60:aa:
af:8e:be:fe:dc:fd:56:bb:a7:69:bf:4c:0b:41:77:
5d:8b:ab:b7:1c:8e:3f:a1:83:ff:31:a4:95:59:18:
86:79:e0:5e:7f:e3:33:2c:63:6a:8f:da:3f:0c:f4:
3c:38:2c:f0:e3:2b:82:12:98:3d:84:87:da:11:74:
f3:ae:12:28:49:67:6b:75:c5:a9:5d:e0:21:8d:9d:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6E:67:FF:21:B6:AC:1A:7E:D8:92:FE:CA:21:4D:2F:15:F9:45:88
X509v3 Authority Key Identifier:
keyid:70:25:7C:06:00:65:49:5B:0C:62:5E:E3:C4:FC:50:3E:AE:B2:5E:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/3137372e37352e34382e302f32302d3332203d3e20323632353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.75.48.0/20
Signature Algorithm: sha256WithRSAEncryption
55:4f:18:a7:f9:56:f7:e1:fb:97:50:e1:9c:d7:10:f0:00:a8:
aa:57:7c:f4:4e:01:89:c1:f1:4e:dd:aa:36:7b:6f:9b:e4:f1:
93:77:55:dc:fb:26:14:da:f1:d8:0a:39:40:c3:eb:26:16:46:
47:6a:47:5d:12:1c:a9:ee:d6:ca:b8:89:cb:81:da:15:4e:a1:
28:bf:15:6a:96:29:fa:69:0d:04:4c:4e:78:15:7b:73:75:0c:
1a:88:32:08:43:18:fe:ae:53:49:16:a8:30:e5:4c:be:35:b4:
19:06:9a:12:e0:a6:f5:9b:b6:40:97:28:c7:ef:41:82:08:74:
a5:e4:0e:ae:92:88:ff:8e:03:2c:55:95:9c:d6:fc:44:01:a5:
a7:00:b8:cf:f1:8d:1a:87:77:74:60:8c:91:95:74:4b:5d:f7:
0a:a0:83:53:01:29:c8:c5:dd:e5:f6:85:84:1a:76:b4:a9:c6:
3b:de:4c:3f:bc:bb:5e:2b:37:07:c6:0b:09:60:c7:93:0a:44:
28:ca:74:70:fd:59:33:4f:7e:43:c6:5e:03:fa:41:1a:e6:f1:
41:67:ee:e6:94:bc:a4:5b:ba:50:96:b1:d4:05:06:f5:5b:8f:
00:db:de:34:31:dc:9a:11:31:27:28:43:56:97:32:aa:f2:c3:
ea:a5:3a:0b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUWJg+v/EKUAvWkvOv6xFRHBEc6fgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAyNTdDMDYwMDY1NDk1QjBDNjI1RUUzQzRGQzUwM0VB
RUIyNUVENDAeFw0yNTAzMDYxNDI2NTRaFw0yNjAzMDUxNDMxNTRaMDMxMTAvBgNV
BAMTKDRBNkU2N0ZGMjFCNkFDMUE3RUQ4OTJGRUNBMjE0RDJGMTVGOTQ1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOWccNX+GINmMsT6Ja0/m1ddD
kM7xm6XIe1MJyT4u6MZcULVnQfC2umX82QTkqfjvdLFRIRTIRdLnYG0A3vtZBDXc
aYRY1w54iCKp/ehuEdfygDqfGgH3p9pj+RofuxI/Nr5VxvnG/vBhb9Nfp6RuRvCG
PbXgTCiYM+4GHNZNd+lx4BoyFvQO+7EPNWtQedkplrgrclGiH1q5zYqcHupRFwew
+ikgBKTyVB9wVKLPOrVgqq+Ovv7c/Va7p2m/TAtBd12Lq7ccjj+hg/8xpJVZGIZ5
4F5/4zMsY2qP2j8M9Dw4LPDjK4ISmD2Eh9oRdPOuEihJZ2t1xald4CGNnYUxAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUSm5n/yG2rBp+2JL+yiFNLxX5RYgwHwYDVR0j
BBgwFoAUcCV8BgBlSVsMYl7jxPxQPq6yXtQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BR1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRB
LzEvNzAyNTdDMDYwMDY1NDk1QjBDNjI1RUUzQzRGQzUwM0VBRUIyNUVENC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83MDI1N0MwNjAwNjU0OTVCMEM2
MjVFRTNDNEZDNTAzRUFFQjI1RUQ0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
R1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRBLzEvMzEz
NzM3MmUzNzM1MmUzNDM4MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzIzNjMyMzUz
ODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEsUswMA0GCSqGSIb3DQEBCwUAA4IBAQBVTxin+Vb34fuX
UOGc1xDwAKiqV3z0TgGJwfFO3ao2e2+b5PGTd1Xc+yYU2vHYCjlAw+smFkZHakdd
Ehyp7tbKuInLgdoVTqEovxVqlin6aQ0ETE54FXtzdQwaiDIIQxj+rlNJFqgw5Uy+
NbQZBpoS4Kb1m7ZAlyjH70GCCHSl5A6ukoj/jgMsVZWc1vxEAaWnALjP8Y0ah3d0
YIyRlXRLXfcKoINTASnIxd3l9oWEGna0qcY73kw/vLteKzcHxgsJYMeTCkQoynRw
/VkzT35Dxl4D+kEa5vFBZ+7mlLykW7pQlrHUBQb1W48A2940MdyaETEnKENWlzKq
8sPqpToL
-----END CERTIFICATE-----
Generated at Wed Apr 9 21:01:36 2025 by rpki-client