Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3137372e3132352e3230342e302f32322d3234203d3e20323632333436.roa
File: 3137372e3132352e3230342e302f32322d3234203d3e20323632333436.roa (raw, json)
Hash identifier: YZtmvbF49fC0v80TI4bTrJw6IoY2TdVLTk7MfrGxgzc=
Subject key identifier: F2:0E:47:3E:D9:5A:72:62:17:DB:8E:9B:56:13:A8:62:DF:27:A1:B2
Certificate issuer: /CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
Certificate serial: 2C9909B8B57DC359E37C4EDA9EFDC395072F4408
Authority key identifier: 17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3137372e3132352e3230342e302f32322d3234203d3e20323632333436.roa
Signing time: Thu 27 Mar 2025 18:16:16 +0000
ROA not before: Thu 27 Mar 2025 18:11:16 +0000
ROA not after: Thu 26 Mar 2026 18:16:16 +0000
asID: 262346
IP address blocks: 177.125.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:99:09:b8:b5:7d:c3:59:e3:7c:4e:da:9e:fd:c3:95:07:2f:44:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
Validity
Not Before: Mar 27 18:11:16 2025 GMT
Not After : Mar 26 18:16:16 2026 GMT
Subject: CN=F20E473ED95A726217DB8E9B5613A862DF27A1B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:05:44:21:c4:43:8d:67:70:10:a8:32:8d:
2c:61:63:12:94:2d:e9:c3:c6:79:20:88:83:f3:21:
82:21:7a:10:40:7c:95:58:06:6c:75:a8:aa:3b:f9:
d7:2d:08:76:66:a3:99:73:ab:7e:d8:b3:1b:a9:20:
d5:6a:3e:9e:ed:c5:f1:93:39:96:ab:b7:a2:bb:51:
63:9e:f2:63:c9:47:2e:3e:ea:98:d7:85:c7:40:26:
8e:2a:5d:82:42:03:14:32:db:96:22:ba:0a:b6:58:
2f:f7:22:c9:f6:54:e1:d4:a0:21:9c:f1:17:c4:43:
9e:1d:cc:45:22:11:8a:78:87:c5:7c:7d:0d:fa:06:
bc:43:ef:f2:1c:39:e9:ee:fb:b2:c0:5d:a3:41:42:
a3:47:61:99:c3:d9:7c:a3:48:39:79:bf:b2:df:f6:
81:a1:e3:c1:7b:46:b3:e2:2a:73:c4:16:f7:e9:95:
01:84:32:a2:a2:55:77:c3:f7:ac:5f:76:dc:70:ec:
20:fb:31:c6:c9:06:d5:d1:2f:24:f6:4a:58:5f:1d:
46:87:d1:d6:92:d9:9d:cd:fc:01:d8:96:5e:ce:bc:
69:50:75:08:e3:60:00:ab:a3:47:b3:9d:5b:b3:bf:
38:5e:8c:48:17:17:46:ca:dd:9c:b1:4e:89:f3:da:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0E:47:3E:D9:5A:72:62:17:DB:8E:9B:56:13:A8:62:DF:27:A1:B2
X509v3 Authority Key Identifier:
keyid:17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3137372e3132352e3230342e302f32322d3234203d3e20323632333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:fe:1e:60:23:11:8b:01:ba:ca:76:81:ea:21:38:60:1c:84:
4a:c5:ff:55:ef:61:7d:f3:0f:44:a5:c0:5b:99:e5:68:1b:fc:
cf:50:b2:a8:c0:bc:33:f3:28:4f:a9:e7:3f:06:37:e6:5a:eb:
f4:4b:37:d4:39:e0:c0:38:e8:8d:ba:65:ce:68:67:47:e6:5f:
e2:6b:3d:1d:e2:90:43:e8:e2:af:08:b8:d9:6d:54:a6:a1:ed:
38:80:98:04:bd:93:25:9b:d2:88:fd:c8:97:64:c9:81:0e:76:
fc:cf:9d:e8:d2:3d:19:a5:f7:01:97:81:c9:07:ad:17:e3:17:
d7:d6:e8:ec:f0:c6:02:48:06:c4:d5:db:8c:09:3b:90:15:fd:
83:5f:b7:e9:e7:7c:9f:63:6f:b2:7a:be:c2:3c:5f:b3:91:05:
ab:ba:b9:2c:9d:aa:6e:5b:f3:2f:be:07:8d:a3:25:bb:37:bb:
7c:60:fa:22:bd:dc:fd:62:83:62:89:cf:c8:de:da:5c:ef:fb:
5e:80:11:05:8d:d2:50:5a:38:ba:05:55:34:35:68:75:0d:db:
d0:8e:0a:37:13:00:c1:02:8d:3c:c9:89:f5:7a:9d:51:f2:24:
c6:e4:bc:8c:ad:1e:9a:0e:da:3f:ac:f4:b4:b9:fc:c3:ad:d9:
12:88:03:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:09:23 2025 by rpki-client