Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/3137372e38362e39362e302f32312d3332203d3e20323632353036.roa
File: 3137372e38362e39362e302f32312d3332203d3e20323632353036.roa (raw, json)
Hash identifier: zNEO5VjdUssSmDnatKQ0risH9GIqrvSntMswWswg8RI=
Subject key identifier: 2E:EB:7D:5B:F0:BD:10:D7:91:FC:CB:3E:C5:64:9F:D8:AC:26:EE:3E
Certificate issuer: /CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
Certificate serial: 6F7055C6F68F1964DF020F88E6BF3C90DFF31C7F
Authority key identifier: EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/3137372e38362e39362e302f32312d3332203d3e20323632353036.roa
Signing time: Thu 13 Mar 2025 14:12:17 +0000
ROA not before: Thu 13 Mar 2025 14:07:17 +0000
ROA not after: Thu 12 Mar 2026 14:12:17 +0000
asID: 262506
IP address blocks: 177.86.96.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:70:55:c6:f6:8f:19:64:df:02:0f:88:e6:bf:3c:90:df:f3:1c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
Validity
Not Before: Mar 13 14:07:17 2025 GMT
Not After : Mar 12 14:12:17 2026 GMT
Subject: CN=2EEB7D5BF0BD10D791FCCB3EC5649FD8AC26EE3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:c7:97:85:26:cd:8e:45:c8:5a:e2:87:f7:
5b:14:8d:fd:84:40:7e:92:67:3c:55:4f:b5:9b:82:
23:3b:c4:12:76:bb:0b:13:bb:9f:ba:e4:69:08:61:
e1:bf:6c:19:42:42:4d:81:f8:f3:90:40:86:25:45:
ea:df:3f:23:c3:07:dc:12:6b:96:dc:b7:13:ae:ee:
45:2c:bc:54:17:23:6d:f4:cc:15:bf:57:88:5b:1f:
5e:58:35:d4:e1:93:ed:de:ba:27:71:5c:a6:b8:6c:
7f:46:3d:21:c0:b7:a5:c5:88:6e:4d:eb:5b:5a:0a:
cd:05:df:8e:97:95:9d:63:11:ee:7e:ee:1b:bb:10:
cd:f9:9c:45:3d:d0:59:2c:3b:fb:91:11:28:6a:af:
5e:60:0c:bc:4b:d1:0c:7a:e9:dc:bb:4c:7e:5d:c2:
37:bd:11:43:5a:aa:f8:35:d1:3d:88:58:30:cd:b5:
04:77:a8:0b:68:b8:22:88:7c:d9:89:75:19:78:1e:
4a:e6:98:0a:3b:70:3c:a6:dc:f6:01:5c:f7:3f:a7:
61:7a:81:d3:03:83:08:08:ee:3f:d5:6e:86:ef:78:
5b:a5:b7:44:8a:6b:47:72:b6:f1:ac:56:c9:7c:42:
e7:dc:0f:05:8a:9c:d3:d7:d8:40:d0:5b:2c:cc:79:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EB:7D:5B:F0:BD:10:D7:91:FC:CB:3E:C5:64:9F:D8:AC:26:EE:3E
X509v3 Authority Key Identifier:
keyid:EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/3137372e38362e39362e302f32312d3332203d3e20323632353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.86.96.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:ad:77:a9:f6:46:0b:66:f6:1a:7c:74:d4:7f:a4:2d:a4:8d:
0b:e3:5c:04:78:67:fc:34:e0:d4:c2:d6:d8:d9:de:0b:08:3a:
f3:d6:67:81:cc:9d:dc:d3:93:15:44:c5:01:83:3c:45:7a:ed:
0c:58:e2:0a:43:36:af:29:b1:90:17:83:af:8d:31:c9:82:35:
f2:d2:06:a2:4b:e7:c2:0a:9c:b1:20:3f:0d:80:77:92:08:1e:
15:96:ab:e6:ac:3d:0f:bd:8d:a9:02:4d:bf:6e:ec:24:7c:6b:
fc:12:57:11:99:2a:f6:4c:9a:c2:b7:5a:05:f2:c8:10:ca:c0:
30:be:f4:5f:e9:a9:24:2b:72:08:cb:1c:c8:3a:16:0e:8b:33:
c0:50:48:23:3d:8f:54:00:8b:18:61:b2:11:50:25:71:c8:ad:
e8:35:46:46:9b:27:74:f7:80:ef:f8:91:e7:08:28:86:bb:87:
18:5b:7f:fc:4a:a4:8a:36:b1:1c:1a:90:dc:2c:9f:55:7c:a3:
8c:7f:a5:30:1e:d4:92:e6:80:a9:d3:4c:88:fb:f6:1c:93:f8:
22:77:3e:85:68:98:81:0a:00:a9:23:38:1b:e7:85:5f:fd:1d:
39:3d:20:7c:e4:97:be:96:6e:9f:3f:19:1f:7d:11:90:94:12:
c7:04:24:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:46:57 2025 by rpki-client