
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e302e302f32312d3231203d3e20323632353039.roa
File: 3137372e36372e302e302f32312d3231203d3e20323632353039.roa (raw, json)
Hash identifier: t0Mkl4HXvVUGDewHTKRNN08JzJwJsLpEutIlNTA1kV0=
Subject key identifier: 3D:1B:47:89:8F:FA:59:EE:F8:1F:D0:A9:A3:11:C6:3A:D7:BF:DB:9E
Certificate issuer: /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial: 39E0C2EFACDEEF54268FC4523054944E04B83BE6
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e302e302f32312d3231203d3e20323632353039.roa
Signing time: Mon 23 Jan 2023 21:51:30 +0000
ROA not before: Mon 23 Jan 2023 21:46:30 +0000
ROA not after: Mon 22 Jan 2024 21:51:30 +0000
asID: 262509
IP address blocks: 177.67.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e0:c2:ef:ac:de:ef:54:26:8f:c4:52:30:54:94:4e:04:b8:3b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
Validity
Not Before: Jan 23 21:46:30 2023 GMT
Not After : Jan 22 21:51:30 2024 GMT
Subject: CN=3D1B47898FFA59EEF81FD0A9A311C63AD7BFDB9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:1b:b6:b8:7a:41:a6:c1:89:b3:af:df:c8:
15:64:2c:35:34:8c:33:ac:1a:63:2a:af:39:f8:4e:
10:39:6e:37:f3:b8:8f:be:49:91:4d:54:89:a2:a3:
6e:07:e9:e7:f7:10:21:a2:40:99:f9:27:6e:53:1b:
75:0b:d1:c6:79:8a:17:b2:98:d9:21:52:f3:bf:cb:
67:19:6f:fc:83:f8:b1:7b:14:ca:73:76:54:e9:08:
9b:dc:a9:0c:ea:74:ad:a4:2a:b1:3f:aa:72:69:60:
20:e3:82:21:49:89:c4:2b:95:bb:f1:94:2b:52:52:
da:5d:83:50:d2:27:bd:b6:d3:cb:09:b1:83:ca:4f:
69:69:cb:6c:0c:81:44:11:97:1e:50:c7:f0:b6:20:
3d:27:bb:42:52:52:45:b6:c6:de:0e:7b:b7:77:9e:
8a:48:1b:29:ec:30:7f:cf:dc:c6:03:7f:8f:86:46:
6f:f8:96:9e:e4:18:88:d6:31:6f:42:58:dd:f4:02:
71:a0:30:bc:df:fc:e4:e4:bb:3d:96:c8:3f:f4:9f:
ed:c2:ec:a0:d4:02:47:a1:e9:21:af:10:c3:f0:04:
2b:2e:16:27:fd:a3:71:ed:13:18:4f:dc:4a:8b:60:
8a:be:36:19:e4:ed:7c:a7:0d:26:0d:0a:be:91:a3:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1B:47:89:8F:FA:59:EE:F8:1F:D0:A9:A3:11:C6:3A:D7:BF:DB:9E
X509v3 Authority Key Identifier:
keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e302e302f32312d3231203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.0.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:40:67:ea:b9:8d:9d:27:54:2a:7c:c2:37:28:e1:38:23:82:
56:f3:ed:f7:cc:17:88:bf:3f:a4:63:71:27:83:4d:9c:1b:ba:
0b:fa:95:bb:aa:80:a5:a2:af:94:7f:fa:6c:91:3f:26:bf:0f:
54:94:b4:25:e9:df:f2:40:bc:56:e4:ec:9e:ba:fe:52:fe:df:
ec:00:b6:e0:da:f6:b6:6f:61:ab:69:4d:be:72:c2:84:18:d6:
f2:a2:17:a3:19:02:e2:49:a4:68:f4:84:21:db:c7:79:ed:37:
bc:c1:30:54:a1:89:9e:81:a1:a8:3d:98:e1:32:7f:95:ca:88:
f4:31:ae:44:9b:b6:4c:4c:fa:7a:6a:b7:bd:77:c6:97:19:7c:
45:cc:9f:99:ad:d1:0a:4e:3a:e3:00:7b:01:a8:b5:a7:c2:29:
f1:23:8e:74:d5:b4:ad:b8:52:3e:89:50:af:b6:c3:27:b1:9d:
8a:48:54:bb:7b:7a:6b:bc:2b:cb:bc:b2:a2:f4:d4:43:f5:de:
0b:ac:9c:35:d1:a8:47:8c:95:99:01:31:40:45:6e:b9:23:e1:
39:bc:cc:df:3a:74:32:d0:55:58:16:9b:86:c1:cd:7d:b3:d4:
1e:f1:a8:c4:9c:c8:1f:0d:fb:d1:8a:35:08:86:01:d6:b2:1d:
fb:90:be:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:25:45 2025 by rpki-client