Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37372e302f32342d3234203d3e20323731323136.roa
File: 3137372e33362e37372e302f32342d3234203d3e20323731323136.roa (raw, json)
Hash identifier: rHNRBWQAATJtczVWtcclfCO04B7kbq/O0c0IAcIwa3Q=
Subject key identifier: 8E:97:44:5A:90:B0:F8:58:8F:15:1E:73:E6:8A:FB:BB:3D:2C:D5:3B
Certificate issuer: /CN=3B323E2B6F70952EDC5BF6F9E68B220D04C813CB
Certificate serial: 1C6A294356326AC4D203EAD8D88F13E099590454
Authority key identifier: 3B:32:3E:2B:6F:70:95:2E:DC:5B:F6:F9:E6:8B:22:0D:04:C8:13:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37372e302f32342d3234203d3e20323731323136.roa
Signing time: Thu 02 Jan 2025 18:51:42 +0000
ROA not before: Thu 02 Jan 2025 18:46:42 +0000
ROA not after: Thu 01 Jan 2026 18:51:42 +0000
asID: 271216
IP address blocks: 177.36.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:6a:29:43:56:32:6a:c4:d2:03:ea:d8:d8:8f:13:e0:99:59:04:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B323E2B6F70952EDC5BF6F9E68B220D04C813CB
Validity
Not Before: Jan 2 18:46:42 2025 GMT
Not After : Jan 1 18:51:42 2026 GMT
Subject: CN=8E97445A90B0F8588F151E73E68AFBBB3D2CD53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:1a:2c:e9:86:80:55:2f:02:0f:b9:f2:21:
32:64:11:b1:80:51:0d:99:d1:9f:81:b6:b3:49:ce:
15:e9:fb:9c:2e:58:03:08:58:1a:e1:73:e9:66:4c:
5b:c1:b1:bc:4c:7a:bd:3a:89:bf:ba:71:c7:32:2f:
34:69:6c:24:6c:d1:10:31:e7:8d:b2:be:e3:b3:8e:
1c:20:c8:08:d1:75:63:a3:8b:7c:af:14:7a:e3:3a:
af:46:9f:d1:dd:0b:7f:64:63:a8:3b:a3:02:0e:d0:
53:f1:c9:ba:71:fc:75:82:d6:15:e5:36:12:c1:6c:
f2:7b:0c:cb:61:ce:f8:1a:79:30:49:40:c1:ee:b4:
f7:5f:d5:cb:21:a1:95:2b:a0:03:82:db:9d:a3:ff:
be:1e:ce:a8:be:47:ef:80:80:a2:de:fb:e7:a7:c3:
f9:55:34:0f:71:bc:49:19:f7:16:1b:d0:2d:c1:3b:
39:c1:b6:96:4d:35:d7:40:81:6d:aa:97:fd:e0:ac:
03:67:79:a7:7b:e4:96:77:bf:2b:c2:b6:b9:89:80:
ce:ab:e0:d2:b7:0a:13:a8:ae:4f:df:33:36:1a:4a:
e2:f1:b4:58:a1:08:b6:94:fd:ca:3b:e0:de:fa:e5:
de:48:78:62:0b:f5:97:5f:66:52:a6:3c:90:89:85:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:97:44:5A:90:B0:F8:58:8F:15:1E:73:E6:8A:FB:BB:3D:2C:D5:3B
X509v3 Authority Key Identifier:
keyid:3B:32:3E:2B:6F:70:95:2E:DC:5B:F6:F9:E6:8B:22:0D:04:C8:13:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37372e302f32342d3234203d3e20323731323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.77.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e7:c9:d7:7d:77:4a:7b:3c:80:28:7f:fe:52:65:7b:64:a6:
b5:51:f5:7a:f7:ab:6c:76:09:57:59:0e:7c:a3:35:c0:7e:ec:
5c:53:05:e8:15:3c:b0:c7:53:17:fd:1d:01:22:c3:7a:64:73:
9c:ea:47:69:7e:c1:92:7e:54:fc:00:c5:0a:13:0b:1c:b3:d4:
51:9a:95:ea:24:f4:ec:a8:48:be:b2:71:be:99:e5:d1:2e:a2:
73:13:c0:e0:87:0d:ee:7c:a4:8a:51:fb:60:5e:1e:63:04:09:
21:b0:32:4b:83:7a:e4:c2:93:ef:e2:c5:97:46:27:16:71:68:
d7:f8:ac:9d:f6:5e:2f:ce:6a:fd:b2:b2:b5:82:46:6d:25:a7:
9a:ec:c3:57:d2:d7:b3:e5:4f:1d:7c:91:29:2f:f2:c1:78:8f:
3d:96:eb:55:e3:6f:4d:a0:55:94:0a:1c:62:0a:1d:94:73:29:
66:99:ae:cd:f3:dc:c6:18:9c:f9:e1:c2:5c:32:e8:1d:a5:35:
e9:dc:30:9b:54:32:9a:f7:cf:e4:3f:1f:eb:46:00:af:32:be:
93:91:46:33:94:60:c2:53:9f:3a:5e:bc:ec:f3:16:d2:84:3d:
d4:53:4c:3f:73:63:75:53:5c:e3:92:22:ff:e6:15:a1:ad:88:
c6:f3:1b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:47:43 2025 by rpki-client