Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133392e302f32342d3234203d3e20323633353834.roa
File: 3137372e3132392e3133392e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier: LENqnVVVRdSqNc0qSUW72+mPFqGG4RiPxH4P4ccGaco=
Subject key identifier: C2:87:09:C1:97:20:15:9F:44:49:E8:5B:18:E0:63:90:CF:75:89:A8
Certificate issuer: /CN=A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B
Certificate serial: 50C568D3E20CD236DA9ED10EDA1348FBB55AA8B5
Authority key identifier: A7:CF:6A:D9:57:FD:96:A4:24:FF:83:F6:75:AC:AF:C7:EE:E7:EF:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133392e302f32342d3234203d3e20323633353834.roa
Signing time: Tue 10 Dec 2024 22:07:00 +0000
ROA not before: Tue 10 Dec 2024 22:02:00 +0000
ROA not after: Tue 09 Dec 2025 22:07:00 +0000
asID: 263584
IP address blocks: 177.129.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c5:68:d3:e2:0c:d2:36:da:9e:d1:0e:da:13:48:fb:b5:5a:a8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B
Validity
Not Before: Dec 10 22:02:00 2024 GMT
Not After : Dec 9 22:07:00 2025 GMT
Subject: CN=C28709C19720159F4449E85B18E06390CF7589A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:da:75:76:e6:f6:fc:11:36:df:aa:0a:44:
ba:d4:25:e7:11:42:4a:94:fc:75:8e:53:69:67:11:
46:ef:8b:c0:64:5b:73:ba:2a:3a:ac:69:3e:26:9b:
db:b8:5c:49:b8:4a:3f:1a:a5:24:74:27:6b:ef:bb:
45:0e:a0:04:e9:54:9c:10:1e:9d:02:2e:f6:26:7f:
e0:d2:5f:e6:79:d2:49:b8:82:7c:a9:9a:a2:da:e6:
72:46:57:ba:3f:6b:b7:3a:a2:cc:4e:a2:17:8a:90:
50:ce:70:20:9c:21:1d:38:24:e3:52:f2:35:16:60:
8c:ab:92:d7:26:6a:ff:1b:ae:b3:ec:37:14:d0:39:
e2:9b:50:07:6d:0a:41:b0:27:73:3c:00:da:39:67:
ce:89:2a:10:0b:64:2b:2f:c1:9a:49:36:18:25:f0:
7b:37:d6:f5:2d:a5:30:ed:37:0c:af:6a:f0:72:72:
f6:18:8d:9d:a6:37:88:4b:49:7f:13:64:d8:2a:bb:
2e:04:41:57:17:4b:a9:8b:da:cb:43:2f:ca:b1:98:
85:7f:57:ed:30:23:f9:f6:73:1c:a6:4b:df:e3:08:
f3:f2:c4:7e:c9:91:b0:44:5b:fd:3c:69:ba:3a:4d:
6c:a7:3e:12:5a:ad:90:8e:85:51:3e:0b:f7:20:8c:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:87:09:C1:97:20:15:9F:44:49:E8:5B:18:E0:63:90:CF:75:89:A8
X509v3 Authority Key Identifier:
keyid:A7:CF:6A:D9:57:FD:96:A4:24:FF:83:F6:75:AC:AF:C7:EE:E7:EF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133392e302f32342d3234203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.139.0/24
Signature Algorithm: sha256WithRSAEncryption
60:30:fa:57:92:7d:1a:39:fc:6c:fa:88:7e:58:65:2c:8f:a8:
42:60:df:3d:f2:57:bd:51:47:83:92:a2:6a:c0:21:82:aa:84:
44:bc:39:aa:dc:7c:de:e6:14:f9:62:75:18:0d:64:3f:38:5a:
56:75:bb:4e:69:7b:6c:c2:37:12:5a:a7:8a:fe:0e:a4:81:38:
83:02:75:d8:93:78:e0:6e:59:28:a6:9d:c8:44:87:60:b8:2f:
e1:7a:42:0b:a0:38:60:af:0d:ae:11:2d:19:bc:b8:e5:91:79:
59:fa:f8:91:12:b4:06:c9:8f:52:3d:b2:c6:09:c2:9c:09:40:
e8:6d:8e:3a:93:4a:4f:11:77:32:3e:09:86:ef:fd:21:bf:1a:
bf:19:fb:3e:3e:2e:a6:89:95:bf:00:ea:45:18:22:50:e0:49:
0a:9f:63:50:07:5f:e0:c3:90:bb:b0:60:33:b7:ca:9b:ab:f0:
fe:f9:d4:97:ec:b3:38:40:3c:45:3b:fd:7f:30:54:13:f7:ce:
fc:8d:83:f8:18:bb:e6:b9:c0:7d:11:7d:5b:f7:f7:f9:14:1c:
63:10:27:16:db:4d:b3:3a:f1:89:12:f6:21:f9:4d:9c:fa:47:
bf:1f:1a:26:c2:dc:1a:28:ba:d5:7f:02:5a:fb:47:02:8e:37:
78:47:86:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:43:52 2025 by rpki-client