Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133362e302f32342d3234203d3e20323731323037.roa
File: 3137392e34322e3133362e302f32342d3234203d3e20323731323037.roa (raw, json)
Hash identifier: /2fblaUsvX8YigDjxZ2w0/HDzxhL/uzUl9c7st8v4U4=
Subject key identifier: 11:BD:3E:50:37:62:BF:79:23:AC:CD:7D:1C:01:C2:CC:1D:86:08:52
Certificate issuer: /CN=63D0CD7989A27283F0FE9C2C9601426AC969B1D3
Certificate serial: 4B3CB1C097B072A3D06965DA803298CB76002794
Authority key identifier: 63:D0:CD:79:89:A2:72:83:F0:FE:9C:2C:96:01:42:6A:C9:69:B1:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D0CD7989A27283F0FE9C2C9601426AC969B1D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133362e302f32342d3234203d3e20323731323037.roa
Signing time: Mon 10 Feb 2025 12:56:22 +0000
ROA not before: Mon 10 Feb 2025 12:51:22 +0000
ROA not after: Mon 09 Feb 2026 12:56:22 +0000
asID: 271207
IP address blocks: 179.42.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3c:b1:c0:97:b0:72:a3:d0:69:65:da:80:32:98:cb:76:00:27:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63D0CD7989A27283F0FE9C2C9601426AC969B1D3
Validity
Not Before: Feb 10 12:51:22 2025 GMT
Not After : Feb 9 12:56:22 2026 GMT
Subject: CN=11BD3E503762BF7923ACCD7D1C01C2CC1D860852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:21:18:23:c6:2e:17:35:95:f2:fd:82:c8:
4a:3e:80:56:3d:52:66:b8:0b:4a:34:0b:e4:eb:93:
07:84:f6:98:a5:96:1a:13:31:65:b7:cd:52:8f:09:
d2:1e:5a:58:50:96:ee:02:57:c1:3f:7a:de:6b:b9:
1c:37:00:7a:ce:00:0f:98:1a:1f:00:dc:32:fb:f4:
97:12:34:60:bf:fc:a0:ef:48:50:95:94:fc:42:ed:
81:00:c4:05:f0:05:6e:72:cc:04:85:3a:19:9b:d6:
a9:74:4f:08:57:eb:28:25:3b:1f:88:c5:8f:b5:65:
f8:09:01:f7:9b:b8:ca:3d:97:b6:10:59:84:6b:53:
f2:64:6c:9b:18:7f:ac:db:22:e9:64:1e:c1:86:da:
08:5e:02:56:6f:13:63:fc:42:27:3e:df:20:a4:1c:
1f:02:d9:a9:e9:bd:d3:c3:34:89:ad:b4:4d:24:f0:
06:16:43:c2:9e:b6:eb:a8:46:0d:48:49:6d:a8:ad:
45:5b:95:2b:34:ef:e1:e6:87:74:17:44:88:1b:f3:
ec:3d:31:bd:06:df:a3:ca:58:4c:5b:10:6a:5c:9a:
15:b2:59:85:75:7d:59:6a:15:79:9b:ac:4b:3a:cd:
41:2b:5a:4f:4f:0c:b7:8d:07:0f:45:70:e6:c2:11:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BD:3E:50:37:62:BF:79:23:AC:CD:7D:1C:01:C2:CC:1D:86:08:52
X509v3 Authority Key Identifier:
keyid:63:D0:CD:79:89:A2:72:83:F0:FE:9C:2C:96:01:42:6A:C9:69:B1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/63D0CD7989A27283F0FE9C2C9601426AC969B1D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D0CD7989A27283F0FE9C2C9601426AC969B1D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133362e302f32342d3234203d3e20323731323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.42.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ea:68:90:9a:00:1a:97:75:b1:c6:9e:e1:09:5e:f4:4f:50:
6b:de:19:e1:78:81:60:4a:c2:a5:76:31:5f:58:49:08:33:6f:
d6:cf:03:23:9d:89:39:50:c5:bb:3e:a4:ca:86:2c:ff:bf:48:
d6:97:f5:e3:fc:f6:7e:a1:f1:d2:2a:ac:f5:f3:90:e5:75:5a:
54:7d:8b:e5:6b:4c:c6:57:a4:df:48:c4:7c:e4:16:47:79:c5:
8a:b0:0d:1a:f8:14:09:05:25:c3:fa:e1:47:7e:37:6e:3a:3b:
b3:6d:88:60:4b:4e:78:a2:0c:ac:b5:a3:df:47:79:f7:4f:9f:
85:39:09:f6:af:c7:9c:cb:7f:17:d8:a0:4f:dd:b8:24:7e:dc:
fe:c6:c7:21:dc:b6:f8:37:7f:3a:69:55:08:35:99:92:18:98:
f7:b0:ca:13:51:81:2c:67:e3:f3:82:29:68:58:0c:62:5e:46:
e1:1d:08:b3:f2:be:cf:08:4c:67:c3:b9:bc:54:7a:93:88:b6:
fc:6d:8c:f6:7a:33:5a:94:d2:99:58:be:1a:fb:4d:fc:61:64:
2a:ca:37:d1:aa:76:b2:ee:a9:35:53:ad:cf:49:78:4c:cb:e8:
df:97:a6:ea:5b:b2:ef:47:e7:ac:87:5c:82:ec:d7:90:34:66:
3d:70:6d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:49 2025 by rpki-client