Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37392e302f32342d3234203d3e20323731323136.roa
File: 3137372e33362e37392e302f32342d3234203d3e20323731323136.roa (raw, json)
Hash identifier: 9l7jsr4vre5Kv1NA/pql2WboVjtwlNGQAnaQQljxduo=
Subject key identifier: 4D:B1:15:30:6B:91:09:2B:67:68:3E:AE:DD:69:73:C6:51:07:86:35
Certificate issuer: /CN=3B323E2B6F70952EDC5BF6F9E68B220D04C813CB
Certificate serial: 0F463ABDB20BD1719542840702CDB75D3FBB64C5
Authority key identifier: 3B:32:3E:2B:6F:70:95:2E:DC:5B:F6:F9:E6:8B:22:0D:04:C8:13:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37392e302f32342d3234203d3e20323731323136.roa
Signing time: Thu 02 Jan 2025 18:52:14 +0000
ROA not before: Thu 02 Jan 2025 18:47:14 +0000
ROA not after: Thu 01 Jan 2026 18:52:14 +0000
asID: 271216
IP address blocks: 177.36.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:46:3a:bd:b2:0b:d1:71:95:42:84:07:02:cd:b7:5d:3f:bb:64:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B323E2B6F70952EDC5BF6F9E68B220D04C813CB
Validity
Not Before: Jan 2 18:47:14 2025 GMT
Not After : Jan 1 18:52:14 2026 GMT
Subject: CN=4DB115306B91092B67683EAEDD6973C651078635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6f:5b:94:2d:a7:73:a6:4a:d3:c6:b8:64:4d:
cd:2a:64:03:92:3b:1f:1c:11:4b:12:ab:62:be:bb:
bb:b0:e5:36:c0:37:e2:fa:83:16:21:01:94:ff:be:
aa:e2:3c:bc:4d:a8:33:7b:88:04:52:8f:da:9f:91:
9d:8e:ab:8c:23:09:42:6b:02:49:7c:6f:3b:7b:99:
27:40:2e:db:cd:6d:a8:aa:60:0f:59:4b:73:ad:29:
51:ff:be:16:e6:42:92:2d:99:bf:f8:78:a4:98:a0:
af:04:6b:0b:d1:38:c5:88:5e:8c:86:41:59:36:26:
aa:70:08:2c:33:ae:c2:da:af:3e:1c:72:3b:1d:b4:
17:9e:36:a7:30:36:41:1c:a1:3d:f1:39:f5:d6:67:
ff:d3:c4:b0:4c:d4:5c:98:65:f9:9e:af:cc:ba:aa:
6c:43:09:67:06:27:22:98:18:29:55:a7:2d:9e:82:
0a:0a:b3:11:24:64:69:c7:b8:59:ea:f3:02:a7:8e:
6b:15:c6:27:4d:f9:b2:09:53:38:02:1c:ef:0e:b2:
37:29:52:05:ca:c5:a6:b5:e4:59:1f:dc:11:4f:20:
9e:ab:55:a1:d8:84:2f:4e:30:e8:b6:e7:dc:0a:f9:
be:a2:10:b1:31:6e:b8:93:4b:b4:d1:6f:05:74:47:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B1:15:30:6B:91:09:2B:67:68:3E:AE:DD:69:73:C6:51:07:86:35
X509v3 Authority Key Identifier:
keyid:3B:32:3E:2B:6F:70:95:2E:DC:5B:F6:F9:E6:8B:22:0D:04:C8:13:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37392e302f32342d3234203d3e20323731323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.79.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c0:67:35:09:df:9a:60:2d:9b:02:37:c7:8d:4e:7c:e8:40:
92:cb:98:4b:ee:f1:f0:b4:d7:ee:87:d7:ce:be:a0:ee:e9:cd:
2e:3f:aa:36:3c:ad:61:f8:f7:a9:49:b7:db:30:49:bf:5b:f1:
5b:8a:c5:06:55:d6:72:0d:f2:2c:4e:4a:8e:b1:5b:ef:66:b2:
e4:57:99:06:fa:41:72:b7:41:ca:11:d8:ce:2d:98:20:3a:ec:
82:ec:69:ed:90:e8:3e:63:79:ea:b1:98:fa:68:83:ae:95:fd:
a9:6b:65:2e:07:59:62:fd:92:f1:49:88:f6:99:00:67:a4:f0:
05:e5:9f:f6:4a:71:4d:af:7a:76:16:b8:3f:9f:c7:88:d1:e6:
8e:22:09:7d:ac:49:55:10:22:46:5a:d3:e7:c8:10:ae:8e:32:
85:6b:62:aa:d8:3c:77:21:11:df:57:83:7f:22:e6:67:9d:00:
68:ac:22:4f:70:aa:7a:41:8b:0d:de:1d:75:95:8b:e1:8d:d7:
98:2c:ca:df:43:d4:77:63:21:79:8a:b9:b2:83:7b:36:ac:b7:
e6:a3:e7:3f:d8:65:70:53:3f:98:e0:bd:eb:10:28:ac:b3:dc:
5c:09:fd:a0:84:5e:7b:01:21:67:e5:e1:09:1e:ca:92:27:d7:
25:c0:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:50:04 2025 by rpki-client