Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3137372e37332e38302e302f32322d3332203d3e203533303239.roa
File: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (raw, json)
Hash identifier: Qek/xs/EKmEb9IFoScEonrCyzkJUGy3pixZFP0HNsFI=
Subject key identifier: 31:F8:14:7C:83:84:52:7A:5B:DB:48:4B:6D:82:FC:7E:B2:21:BE:7F
Certificate issuer: /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial: 045D17C749F530FC23E7AC0AF777F7E9A8B3CF41
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3137372e37332e38302e302f32322d3332203d3e203533303239.roa
Signing time: Thu 06 Mar 2025 14:53:30 +0000
ROA not before: Thu 06 Mar 2025 14:48:30 +0000
ROA not after: Thu 05 Mar 2026 14:53:30 +0000
asID: 53029
IP address blocks: 177.73.80.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:5d:17:c7:49:f5:30:fc:23:e7:ac:0a:f7:77:f7:e9:a8:b3:cf:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Validity
Not Before: Mar 6 14:48:30 2025 GMT
Not After : Mar 5 14:53:30 2026 GMT
Subject: CN=31F8147C8384527A5BDB484B6D82FC7EB221BE7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ad:10:ae:48:a1:5d:b9:6c:33:b2:e3:41:4d:
2d:35:30:4f:97:e0:4e:9c:e0:25:80:d1:c2:49:09:
43:bb:fb:6f:e2:b6:6a:de:f7:56:94:50:05:6f:9b:
e1:b1:4a:c5:da:d5:a8:ce:39:1b:15:4e:23:d2:60:
8a:a0:53:2f:c5:ac:c0:4e:04:30:60:5b:2c:b0:a3:
7a:92:9b:35:4b:52:98:8c:61:54:b6:8f:1f:19:4e:
f3:6e:c0:a4:f4:64:b2:09:a3:f8:3a:71:c4:c7:38:
a4:38:7e:f6:a3:ed:8b:54:92:44:a7:70:29:cf:ac:
0e:16:1b:46:bc:78:0d:2f:88:06:fe:0a:b5:b8:ab:
40:0f:20:82:31:6c:9d:74:73:19:a9:dd:d3:71:3d:
c0:da:c8:3d:44:b9:76:0c:1d:13:cf:e4:42:7c:84:
bf:48:1d:30:18:8f:46:37:3e:28:43:da:f1:b6:48:
f5:95:07:da:3a:07:4f:93:2e:4e:2f:8b:a2:6f:b1:
ec:60:2c:df:3c:d9:ee:7d:9f:47:89:b1:05:3c:49:
64:2c:b2:a3:df:60:a8:54:2e:ef:c1:f0:ef:28:d0:
39:b0:ef:47:ee:a2:00:80:ab:19:dd:2c:eb:fd:04:
36:62:4e:77:64:a9:51:3f:8d:ee:8b:c9:31:10:d6:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F8:14:7C:83:84:52:7A:5B:DB:48:4B:6D:82:FC:7E:B2:21:BE:7F
X509v3 Authority Key Identifier:
keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3137372e37332e38302e302f32322d3332203d3e203533303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.73.80.0/22
Signature Algorithm: sha256WithRSAEncryption
21:48:79:3f:48:79:eb:cf:39:33:dc:45:69:2c:7d:41:ed:b0:
25:54:17:51:4b:3e:d6:5c:51:1a:f6:36:5f:51:2b:75:54:6b:
bf:63:00:b3:8c:0e:ab:d7:cb:ec:08:70:b0:05:8c:d2:d1:88:
c1:eb:7c:c0:7d:4e:d0:bb:91:0f:4a:c1:42:fb:51:ee:38:7c:
19:eb:f0:81:15:a6:74:52:a2:3c:83:f4:1b:a8:59:3b:03:88:
ec:d6:b7:37:9c:d4:6c:9b:84:ad:2a:e0:c1:b6:f1:e1:4f:b8:
dd:0e:2f:7b:db:54:ab:d1:2f:9d:57:87:ec:f0:a8:ba:df:75:
1f:cd:6a:11:85:49:ff:5b:c1:21:1a:0f:73:da:42:fb:c6:69:
88:b8:34:0a:6f:46:f7:74:27:5e:7c:7f:89:8a:e0:14:37:2b:
5e:79:f3:7c:83:33:f7:53:5e:28:fa:ba:83:54:1f:b2:73:12:
cf:6b:02:70:d7:49:02:a9:cf:db:57:53:11:33:30:9b:29:7f:
8f:c3:e9:f7:59:d4:88:f4:c2:18:52:06:bb:f0:27:eb:ed:28:
c1:f7:d1:55:1f:76:25:5e:44:39:0f:e7:ac:e5:30:78:3c:17:
88:3b:ba:86:42:cd:fc:03:95:c2:cd:85:2d:e7:7a:56:89:95:
04:84:74:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:41 2025 by rpki-client