Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133382e302f32342d3234203d3e20323731323037.roa
File: 3137392e34322e3133382e302f32342d3234203d3e20323731323037.roa (raw, json)
Hash identifier: t/KuNMfIS8q/fvrCpDDbaI1TGZsqrQjf9PAEHisM6ug=
Subject key identifier: 77:A1:34:7A:63:79:AA:F3:81:29:5D:34:AB:82:4C:9F:E4:3A:D9:AC
Certificate issuer: /CN=63D0CD7989A27283F0FE9C2C9601426AC969B1D3
Certificate serial: 33A91A4AB3B1C8CA2F999291A5B7AC1E6EF1BA0B
Authority key identifier: 63:D0:CD:79:89:A2:72:83:F0:FE:9C:2C:96:01:42:6A:C9:69:B1:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D0CD7989A27283F0FE9C2C9601426AC969B1D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133382e302f32342d3234203d3e20323731323037.roa
Signing time: Mon 10 Feb 2025 12:56:22 +0000
ROA not before: Mon 10 Feb 2025 12:51:22 +0000
ROA not after: Mon 09 Feb 2026 12:56:22 +0000
asID: 271207
IP address blocks: 179.42.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:a9:1a:4a:b3:b1:c8:ca:2f:99:92:91:a5:b7:ac:1e:6e:f1:ba:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63D0CD7989A27283F0FE9C2C9601426AC969B1D3
Validity
Not Before: Feb 10 12:51:22 2025 GMT
Not After : Feb 9 12:56:22 2026 GMT
Subject: CN=77A1347A6379AAF381295D34AB824C9FE43AD9AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:b6:cf:97:98:65:0a:51:bf:39:b9:63:23:
c7:62:01:d8:79:8c:42:03:ec:95:51:97:33:82:d3:
4b:47:a0:7d:19:11:ce:3f:46:eb:a5:44:57:04:d2:
ad:66:47:e7:b6:09:90:09:38:71:24:a2:92:6a:e4:
ab:fc:9f:dc:48:ae:3c:7e:55:41:0b:66:6c:df:f6:
6e:2e:77:e5:c7:6f:91:6d:50:4b:59:bc:db:b3:1b:
83:a1:3f:12:ae:b9:f7:99:87:ae:74:c4:f7:5e:e8:
55:c2:b9:98:a9:af:0c:92:de:bf:f7:8f:e7:b9:de:
5c:08:07:08:6a:d1:e6:c7:3e:14:39:18:e3:55:d6:
8b:11:10:fa:00:e8:86:96:fc:57:de:0e:54:e4:c5:
51:9c:86:c6:13:8e:2f:c3:01:de:83:9f:8e:00:96:
62:15:43:6a:c9:f2:cf:89:74:f5:e5:b0:df:6e:81:
27:d0:48:ce:89:4c:e0:a3:cb:4c:39:91:7f:03:9f:
e3:b0:1d:cb:ae:f2:d1:0d:f3:19:1e:69:0f:b7:d4:
c4:6c:d9:f1:f0:62:a8:20:32:a3:05:ac:87:97:46:
9f:d8:7b:be:ee:23:e0:08:a8:98:aa:78:b1:00:d3:
c0:0d:04:e8:b1:0a:35:76:6c:ec:34:de:57:0a:38:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A1:34:7A:63:79:AA:F3:81:29:5D:34:AB:82:4C:9F:E4:3A:D9:AC
X509v3 Authority Key Identifier:
keyid:63:D0:CD:79:89:A2:72:83:F0:FE:9C:2C:96:01:42:6A:C9:69:B1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/63D0CD7989A27283F0FE9C2C9601426AC969B1D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D0CD7989A27283F0FE9C2C9601426AC969B1D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133382e302f32342d3234203d3e20323731323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.42.138.0/24
Signature Algorithm: sha256WithRSAEncryption
13:cc:aa:09:ea:92:e0:18:ba:2f:d4:4f:3b:1f:ce:9d:0a:f5:
b9:35:3d:bb:db:a1:16:fa:b7:a8:4d:9b:e5:65:e0:89:28:ef:
6f:b0:ea:4d:bf:3f:e7:4b:18:f7:e1:93:a7:73:52:5a:28:23:
e5:75:c5:84:c8:08:3a:25:b5:b0:da:dc:ec:d5:b9:78:75:d1:
68:1c:2e:34:d3:80:a1:eb:3d:84:24:b5:57:69:cc:46:7b:04:
da:e5:e3:32:65:81:3a:01:c6:f5:51:1c:5e:f4:08:23:52:62:
63:52:ab:a5:c5:76:81:7b:67:e0:bd:3f:d7:68:f7:00:1f:09:
2a:24:07:1e:24:9a:68:f2:18:f8:b2:7a:ac:bb:72:e8:2d:58:
49:ed:7a:33:49:d2:c3:51:ba:91:61:d0:96:a2:88:5c:17:ab:
88:12:aa:d1:e2:81:34:e7:9d:a8:6e:3c:26:cc:51:d9:3a:05:
f7:7b:7e:88:94:04:c2:63:1b:71:bc:28:94:a7:c8:8e:cc:5a:
0b:e0:21:27:45:41:2a:89:b0:b6:8f:57:c1:2c:f7:fa:15:e5:
17:f0:2e:02:8c:11:85:e2:a4:60:f9:b3:ab:a9:03:c7:cb:3c:
86:cc:98:ee:61:b5:d8:60:d2:36:18:06:e2:23:bd:fe:6b:90:
c4:71:18:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:05:57 2025 by rpki-client