Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137372e31312e37382e302f32342d3234203d3e20323633363033.roa
File: 3137372e31312e37382e302f32342d3234203d3e20323633363033.roa (raw, json)
Hash identifier: xNFwGXAn8Rf9manJjtj7Qp3dueGmaa8KfN0akOvrTf4=
Subject key identifier: 5C:3C:12:3E:C8:02:6F:4A:99:63:5D:09:71:77:D1:AB:0B:24:7F:1A
Certificate issuer: /CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Certificate serial: 5BBEF3C325414A24EE5DE67856AF1614BEDE8773
Authority key identifier: 39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137372e31312e37382e302f32342d3234203d3e20323633363033.roa
Signing time: Thu 20 Feb 2025 17:53:44 +0000
ROA not before: Thu 20 Feb 2025 17:48:44 +0000
ROA not after: Thu 19 Feb 2026 17:53:44 +0000
asID: 263603
IP address blocks: 177.11.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:be:f3:c3:25:41:4a:24:ee:5d:e6:78:56:af:16:14:be:de:87:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Validity
Not Before: Feb 20 17:48:44 2025 GMT
Not After : Feb 19 17:53:44 2026 GMT
Subject: CN=5C3C123EC8026F4A99635D097177D1AB0B247F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:7a:4d:a0:62:bd:39:ea:14:4c:f1:04:68:
98:5a:0b:fc:d6:02:5d:38:68:23:e3:92:c4:81:7d:
a7:8e:d0:e0:aa:ce:c4:a6:bb:77:a8:a9:06:ab:ca:
97:68:8c:2e:ab:a0:3a:84:ef:78:9f:77:88:6d:3c:
06:37:61:7b:32:dd:87:8e:ef:42:50:07:f6:c8:0b:
ad:84:cf:53:a5:d0:1c:6a:72:fd:3d:57:af:42:74:
39:f9:58:11:dd:3c:79:de:8c:b1:38:f6:ec:ac:5a:
7d:52:7a:78:10:84:a9:31:cf:20:0b:80:ea:93:01:
57:b3:28:8b:14:24:be:b4:85:9a:1e:58:b8:f7:92:
49:4f:59:db:71:8c:9e:af:eb:72:de:6e:36:f3:bf:
33:76:aa:fb:a1:6c:b4:7d:65:55:96:76:2e:b7:8c:
89:a2:ac:d0:ee:f9:87:af:cf:79:4a:f1:a8:91:36:
83:fd:21:18:fb:43:d3:37:cc:62:87:e9:e7:96:21:
ec:4a:b6:1a:91:f7:13:2c:a3:48:64:3e:5f:0f:b0:
dd:e7:e0:4d:8a:a5:4b:b7:bf:53:e2:20:f1:6a:73:
40:5c:7d:b5:39:13:f6:94:25:21:84:f2:fa:f2:5e:
6c:29:61:e5:6e:f6:ef:0f:7d:f3:3d:77:fc:9b:c2:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3C:12:3E:C8:02:6F:4A:99:63:5D:09:71:77:D1:AB:0B:24:7F:1A
X509v3 Authority Key Identifier:
keyid:39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3925EED4443902E12DF7A9A139E25CB34974D01A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3137372e31312e37382e302f32342d3234203d3e20323633363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.11.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9f:0a:c8:f6:0e:7f:40:58:85:06:ec:af:96:48:3d:bf:c5:
36:ea:79:02:3c:90:cd:1e:3d:3f:8b:c6:76:21:f0:36:e3:13:
b2:19:40:ac:02:5b:b1:4c:60:01:39:b5:01:a0:9e:89:6c:62:
85:a6:51:e3:c9:44:4a:25:24:b5:cf:2e:c8:76:ab:fa:04:c0:
bb:ae:25:91:d3:6b:8b:40:1a:1a:8c:4f:90:6f:26:4c:80:3e:
32:2c:18:ed:83:8e:d4:9b:dd:cc:e6:ee:d4:44:c7:b3:f0:26:
cd:9f:52:bd:bf:26:99:a0:26:31:2d:76:6e:c5:5c:15:bb:f3:
88:37:0a:25:5b:01:3a:2c:06:da:35:62:37:c9:f7:c5:9b:7a:
35:66:0b:42:15:48:d8:76:06:22:6c:08:04:11:21:c0:62:46:
98:d6:f4:f3:ca:ca:3f:61:bd:ab:77:09:45:be:0c:89:13:1d:
db:d4:18:00:06:0c:ee:b1:a0:ab:b8:eb:79:25:94:7f:27:16:
aa:57:02:40:70:e2:09:67:28:94:c9:41:21:54:d2:b8:de:a5:
75:5f:22:56:38:8c:76:09:b2:e2:3a:d6:cb:a8:f5:3d:2b:30:
18:62:75:a5:1c:bb:58:61:6a:9f:fc:a8:46:e8:a5:83:3d:64:
cd:d9:c4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:09:51 2025 by rpki-client