Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3137372e37332e33362e302f32322d3332203d3e203532363934.roa
File: 3137372e37332e33362e302f32322d3332203d3e203532363934.roa (raw, json)
Hash identifier: OGK41uRpAQwllRubLCRfh+WKpYG39IFoFH08wloP1PA=
Subject key identifier: 5C:1B:83:DA:D0:83:88:2B:93:90:A9:40:F2:C5:1B:99:21:CE:44:C9
Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
Certificate serial: 792680AF906BFC8507C3E08A00E9F1EC2A781382
Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3137372e37332e33362e302f32322d3332203d3e203532363934.roa
Signing time: Fri 07 Mar 2025 00:13:25 +0000
ROA not before: Fri 07 Mar 2025 00:08:25 +0000
ROA not after: Fri 06 Mar 2026 00:13:25 +0000
asID: 52694
IP address blocks: 177.73.36.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:26:80:af:90:6b:fc:85:07:c3:e0:8a:00:e9:f1:ec:2a:78:13:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
Validity
Not Before: Mar 7 00:08:25 2025 GMT
Not After : Mar 6 00:13:25 2026 GMT
Subject: CN=5C1B83DAD083882B9390A940F2C51B9921CE44C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:5a:19:2a:85:44:d6:f4:12:f1:ff:24:fe:
c1:65:1e:17:44:96:c4:b5:c7:8b:6f:43:c7:16:0c:
9a:43:2e:40:2e:c9:db:68:0a:e8:4b:d1:a2:44:b7:
6f:0c:bb:2b:f5:e9:f1:7d:77:4b:14:7a:3e:4b:d7:
bc:ba:82:ca:49:d6:c2:ca:3b:bf:36:55:e4:42:d0:
4a:62:26:cb:f0:b3:fe:d7:1a:8d:46:64:60:ea:6f:
fb:1a:3a:c2:e2:5a:48:a0:57:92:67:6d:90:53:41:
bb:85:75:42:45:d0:eb:d7:1c:17:a4:27:72:84:33:
d4:71:32:d4:8a:79:8c:a6:e7:8b:04:77:65:e2:50:
1f:74:bb:4d:96:32:06:3e:a5:f4:cc:b6:d1:df:f8:
6b:41:fe:84:22:89:f1:01:de:67:d3:b6:69:3e:57:
c7:b7:eb:3e:3b:32:a0:69:dc:ea:a9:b4:34:d4:1f:
b7:29:e8:de:ab:fd:95:e8:35:7e:78:8e:21:9d:7a:
97:6e:e4:d1:24:c8:18:5c:59:a3:5f:13:fa:c1:99:
5b:53:8d:60:0f:cf:ad:22:53:31:9d:4b:34:0c:69:
dd:8a:09:55:21:74:ab:ce:2c:96:8f:03:b2:60:1b:
41:e0:a5:52:be:04:92:7d:a3:26:70:0d:20:b0:dd:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1B:83:DA:D0:83:88:2B:93:90:A9:40:F2:C5:1B:99:21:CE:44:C9
X509v3 Authority Key Identifier:
keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3137372e37332e33362e302f32322d3332203d3e203532363934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.73.36.0/22
Signature Algorithm: sha256WithRSAEncryption
98:99:d0:7d:86:2a:9e:cb:7a:5c:5b:df:d6:a0:6d:b3:3e:57:
d7:89:3f:d9:e7:83:4a:2e:c9:59:81:ba:96:b2:3c:1e:1a:fb:
06:15:a2:ab:b4:b0:ce:0b:79:9b:88:83:a3:65:ac:de:1d:d9:
fd:5f:da:38:f6:35:0b:d7:19:e4:50:10:a2:38:0f:45:7d:d4:
53:bb:a7:99:a2:c6:44:ba:3f:59:d5:49:44:e1:29:4a:1f:93:
f2:67:11:a5:ac:cb:73:7f:5a:2d:af:4f:37:ea:ae:5c:85:fc:
34:5b:09:3f:42:6c:f0:15:be:80:5a:96:a5:50:6b:f5:84:4a:
8f:fc:70:32:d6:ce:ec:1d:1b:0b:0a:ee:75:16:4c:19:e2:95:
53:b6:bb:46:64:3a:fb:f3:93:13:cf:b8:60:24:58:2f:91:90:
cc:04:ef:2d:1b:75:e2:3f:7d:10:d6:60:47:0a:50:a7:7e:1d:
69:11:28:7e:29:b1:e1:d3:ab:0a:6a:ed:5d:fb:c9:69:89:ae:
e8:d2:ff:df:93:6f:d0:34:1b:87:ca:5c:c2:3e:ce:5d:ad:db:
06:90:11:e5:b0:c4:e9:8e:b9:ad:53:1c:34:e0:80:69:df:2d:
a9:5a:9c:73:65:25:b1:3e:af:f2:0b:f3:52:63:21:56:2e:e0:
5e:0e:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:09 2025 by rpki-client