Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa
File: 3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa (raw, json)
Hash identifier: hVPMPT3rLci3Eo5VcOIwxFrCMUhAvmWkw2c/ttHER6I=
Subject key identifier: 42:0D:72:05:F6:5D:AF:DB:9A:53:C9:B6:F0:5B:8C:DD:DE:67:F0:13
Certificate issuer: /CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
Certificate serial: 588C4F5F679AAF2093945A72E32944638E148797
Authority key identifier: 38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa
Signing time: Wed 20 Dec 2023 15:04:10 +0000
ROA not before: Wed 20 Dec 2023 14:59:10 +0000
ROA not after: Wed 18 Dec 2024 15:04:10 +0000
asID: 263566
IP address blocks: 177.44.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:8c:4f:5f:67:9a:af:20:93:94:5a:72:e3:29:44:63:8e:14:87:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
Validity
Not Before: Dec 20 14:59:10 2023 GMT
Not After : Dec 18 15:04:10 2024 GMT
Subject: CN=420D7205F65DAFDB9A53C9B6F05B8CDDDE67F013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:b4:d9:16:7c:47:12:07:d1:56:f8:c9:41:
f1:70:b2:b1:62:37:27:43:19:f2:09:fd:98:5b:de:
6c:d4:53:20:aa:ec:02:1b:21:13:86:7d:0e:51:6b:
b0:a6:41:ac:5e:82:13:e5:c9:f4:7e:b5:f5:e7:37:
d3:8c:2a:5c:b1:3d:5a:af:f7:08:db:77:98:40:a7:
62:30:40:b7:68:7b:f5:aa:6d:0e:32:bc:44:b4:5f:
ff:dd:97:83:a0:cc:8d:93:11:34:37:6e:a2:b3:2d:
aa:e8:6c:96:42:89:bc:87:75:d3:5a:ff:be:fe:47:
e2:0c:7a:c5:19:b4:fb:fb:93:80:8c:ed:c5:ca:20:
3e:60:27:b7:38:b9:75:48:a8:88:fa:ad:65:4d:52:
b0:2c:08:c5:81:cc:e1:50:4e:49:02:eb:dc:03:9c:
4d:ed:65:cb:d7:a6:d6:9e:27:7b:48:37:14:10:5e:
7e:e7:74:04:4a:6c:3b:ec:40:62:52:8a:22:34:0a:
99:d6:00:7a:bf:80:ce:a0:12:60:21:de:6c:e9:d1:
84:3a:4c:c0:45:93:60:1d:c3:47:3c:40:61:7a:24:
fd:30:25:98:9f:7d:70:d4:2a:fb:3e:11:39:a4:8e:
8f:d3:57:7d:c0:ad:2a:0e:f4:a9:65:ca:19:b3:6c:
07:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0D:72:05:F6:5D:AF:DB:9A:53:C9:B6:F0:5B:8C:DD:DE:67:F0:13
X509v3 Authority Key Identifier:
keyid:38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.44.216.0/22
Signature Algorithm: sha256WithRSAEncryption
14:79:c7:01:47:c9:d2:5a:3f:74:aa:77:7b:09:4a:f7:10:55:
13:fe:52:82:29:33:c4:9e:b8:0f:60:04:4e:19:4e:e8:d7:7e:
66:a5:7c:f3:14:fc:ac:3f:9f:1e:75:03:b7:08:4d:8c:0d:dd:
e4:0e:74:0b:49:83:32:5a:a4:df:92:dc:9d:1e:6d:d6:34:93:
3e:6a:5b:a4:90:f4:2c:02:70:03:cb:d7:90:e1:25:ae:5c:28:
e2:83:f5:28:c1:de:da:74:2d:50:22:cf:71:12:5b:04:10:12:
40:58:50:f6:42:01:6f:21:77:17:24:0f:a6:8b:80:98:1f:30:
50:7a:7d:99:bc:d2:63:1b:f7:aa:47:46:40:bb:7a:61:5a:ce:
e3:aa:7b:f4:2a:06:a1:69:06:e1:3e:48:79:ce:02:c0:b8:0e:
bd:43:8d:a9:99:56:9d:7c:88:34:3f:3c:f2:7a:df:83:d2:01:
66:ac:f0:92:49:8d:8b:4c:ce:fc:ca:25:e9:9a:7a:7d:db:94:
e7:2d:ab:58:95:f9:6d:a4:e7:6a:03:3d:95:c7:39:f2:d5:5c:
49:42:d0:4f:73:92:d3:d4:a6:b6:f8:46:d1:ec:0a:22:a3:b2:
1d:dc:1c:db:a4:54:3a:2a:56:50:eb:4e:f5:e1:a9:a6:b2:33:
d7:54:3c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:33 2025 by rpki-client