Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3234203d3e203532363331.roa
File: 3137372e3132382e33302e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier: yA0lC+v0KfRglBdGCfB6I8ED1aiEehFICQjPI2kli0M=
Subject key identifier: 9F:47:07:89:5B:54:82:61:DA:96:E8:A4:CC:78:B7:2D:9F:B5:80:D8
Certificate issuer: /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial: 04534F8AFA52451DC78AFC072EE131C19CDED90F
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3234203d3e203532363331.roa
Signing time: Mon 10 Feb 2025 12:56:32 +0000
ROA not before: Mon 10 Feb 2025 12:51:32 +0000
ROA not after: Mon 09 Feb 2026 12:56:32 +0000
asID: 52631
IP address blocks: 177.128.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:53:4f:8a:fa:52:45:1d:c7:8a:fc:07:2e:e1:31:c1:9c:de:d9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
Validity
Not Before: Feb 10 12:51:32 2025 GMT
Not After : Feb 9 12:56:32 2026 GMT
Subject: CN=9F4707895B548261DA96E8A4CC78B72D9FB580D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cd:9b:e8:10:3a:35:a4:37:d8:1b:9d:f7:c6:
05:80:ff:9c:69:0b:df:82:bf:2a:25:13:ee:14:83:
00:af:10:43:d9:8b:77:e9:3e:73:5a:c5:bb:e5:b3:
28:d7:13:ed:d9:0e:0a:7f:8d:3e:79:16:ab:bb:36:
53:c8:ad:d5:68:af:75:e9:73:45:67:c1:18:b1:19:
18:60:d8:e7:46:e4:79:35:a8:07:b7:79:86:65:53:
3d:d0:f5:60:87:9f:dd:10:04:66:13:e9:21:45:9c:
0e:a0:55:d0:6f:21:fc:53:be:25:fe:91:3b:2a:a1:
8d:03:b2:d0:d2:ca:3f:c9:f4:4c:0b:42:52:47:8f:
48:f5:50:c6:c0:aa:71:07:5b:51:74:0d:3a:f5:6e:
e1:c5:3d:77:39:f9:aa:df:38:5a:7d:b0:04:b6:f6:
0c:d3:02:3d:66:b0:d0:b5:03:01:56:11:f4:ec:00:
a5:08:a8:d1:29:10:d6:c2:58:6d:50:86:7d:24:84:
b9:ba:e7:ce:0c:f1:98:57:b4:62:91:84:e5:a5:7a:
d9:03:8a:c3:51:cc:38:0a:b4:56:c3:52:46:a7:f4:
51:80:4d:fb:67:d2:88:64:e2:d1:4a:7d:23:fb:83:
28:11:5f:52:6f:b3:62:b4:fa:fe:e4:15:7b:59:60:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:47:07:89:5B:54:82:61:DA:96:E8:A4:CC:78:B7:2D:9F:B5:80:D8
X509v3 Authority Key Identifier:
keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3234203d3e203532363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.30.0/24
Signature Algorithm: sha256WithRSAEncryption
14:48:12:5e:cb:56:6a:60:12:8e:27:fe:81:47:ae:38:c1:5f:
c2:d8:18:c9:4a:29:94:89:7a:e9:32:99:8b:09:f5:5f:63:e1:
6b:ab:8b:5a:bb:1e:b1:c4:19:ea:0e:06:9e:d2:b6:bf:ea:10:
18:cb:63:a4:59:b9:75:5d:bd:1d:63:5c:75:ca:33:74:78:62:
16:97:07:2d:1d:ef:80:ac:14:18:4d:75:93:9b:70:0d:fe:1e:
71:8c:2c:ae:c4:a6:60:4d:76:f9:2a:06:ae:92:12:1e:0f:d5:
6e:b9:e4:ca:6a:02:f1:c9:17:02:06:f6:43:9f:c6:38:89:83:
c3:03:66:8d:a2:a3:e9:ef:0b:ec:41:82:c2:78:2c:b2:24:cd:
45:a6:b7:66:82:cd:61:d9:bd:15:b7:2d:e0:56:91:7b:2b:3d:
01:b3:52:29:59:82:9c:21:57:3f:18:fe:5e:54:4c:a0:13:b5:
2a:94:7f:3a:94:74:67:33:c1:8d:a1:39:e5:01:44:d8:03:78:
2a:36:0b:86:fa:a3:5a:0f:10:02:e6:de:c5:83:a6:31:13:5e:
7a:1a:c0:24:a4:47:8e:90:08:61:0a:aa:ee:9e:bc:57:14:b3:
1f:83:fa:ce:8f:e9:75:1f:c7:2c:9c:4b:b6:12:81:e7:27:2c:
78:25:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:46:10 2025 by rpki-client