Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138392e302f32342d3332203d3e203532353830.roa
File: 3137392e3139312e3138392e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier: i2JHRKRugH/O8QaoAMS28gMwxO4Bhgw2paQm6VgLaY8=
Subject key identifier: BF:F7:E7:DA:FE:47:90:42:19:3C:69:B3:80:A3:54:E7:37:E6:13:84
Certificate issuer: /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial: 5FD93D81D756C4E3294BE038B75821EC48A52E45
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138392e302f32342d3332203d3e203532353830.roa
Signing time: Fri 14 Feb 2025 19:17:19 +0000
ROA not before: Fri 14 Feb 2025 19:12:19 +0000
ROA not after: Fri 13 Feb 2026 19:17:19 +0000
asID: 52580
IP address blocks: 179.191.189.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:d9:3d:81:d7:56:c4:e3:29:4b:e0:38:b7:58:21:ec:48:a5:2e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
Validity
Not Before: Feb 14 19:12:19 2025 GMT
Not After : Feb 13 19:17:19 2026 GMT
Subject: CN=BFF7E7DAFE479042193C69B380A354E737E61384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e4:ed:0b:e6:48:4c:af:04:69:65:d4:99:bc:
44:5a:11:cc:e8:12:52:4c:96:b0:6a:4d:10:9f:a6:
12:a2:8b:72:de:a9:1c:6e:41:0d:bf:2f:02:92:b5:
54:98:3a:4c:bb:e9:22:a7:04:dd:f9:5f:41:bb:e4:
10:24:aa:12:bc:d5:80:30:c1:12:e3:1a:32:27:67:
1d:0c:8d:ae:48:ca:b4:72:22:9a:84:ec:e7:03:c1:
e6:68:84:7e:ee:29:a7:e4:73:3d:06:c3:4f:14:1f:
e4:66:97:f4:91:80:47:41:dc:c1:f5:14:6b:94:fa:
ed:bf:81:23:40:88:8e:8c:49:57:34:36:0f:8a:ea:
42:cc:1a:d2:03:5c:91:00:17:80:a1:1f:01:00:8d:
9f:6b:14:03:16:4d:0a:4b:bd:91:78:04:84:1d:84:
41:d7:cb:53:15:33:82:53:fe:68:f8:57:ba:6e:05:
4b:f2:20:f3:3c:c3:ec:5d:4f:cd:b4:cf:39:90:25:
1c:f8:92:cf:13:e0:28:39:6e:e8:d8:93:1e:fd:b6:
1a:39:09:53:06:eb:76:19:13:84:18:0c:10:f9:6c:
6d:15:ef:fa:5e:53:46:87:46:f0:ab:d3:1c:84:69:
c9:1f:5b:d2:fe:7f:83:f8:55:9f:a6:35:cf:59:fe:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F7:E7:DA:FE:47:90:42:19:3C:69:B3:80:A3:54:E7:37:E6:13:84
X509v3 Authority Key Identifier:
keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138392e302f32342d3332203d3e203532353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.191.189.0/24
Signature Algorithm: sha256WithRSAEncryption
01:32:9e:74:c9:49:a1:f5:b4:ad:74:21:5d:7b:f8:17:49:d5:
45:99:c0:c0:65:f7:a5:ff:cf:7c:56:6b:21:d3:70:0e:eb:71:
7f:89:9c:c7:f7:b7:64:d4:d5:51:e4:f2:62:b6:4f:f7:94:6d:
87:2c:a3:d4:e1:1b:1a:07:15:9c:5e:d5:8d:4f:96:d1:a3:a1:
72:e6:f1:60:26:1d:dd:ed:e6:81:07:a3:b9:83:26:ab:c5:14:
07:41:4f:d9:1b:33:84:f9:a4:61:89:f6:22:39:60:eb:14:50:
47:33:39:e4:e8:bc:31:07:19:13:33:3d:3c:7c:d8:44:31:02:
7d:cf:97:7d:d1:4b:91:8d:23:70:81:a5:fa:8f:14:a9:31:31:
19:fc:26:9d:d7:e4:8f:ac:72:c9:f2:2e:a6:2e:63:0e:a1:3d:
d3:35:76:13:dc:ae:f3:e4:17:3f:15:c7:66:25:02:9b:1c:08:
15:8a:a9:72:18:96:2f:a4:da:76:6a:93:ef:32:0c:50:48:7a:
1a:56:a5:5f:45:3b:c2:1b:b5:b4:0b:39:3e:70:00:18:5e:ae:
93:0b:c8:35:dd:f4:a9:00:cf:32:85:ab:14:1d:71:b5:8a:7e:
01:72:61:02:f1:2e:53:f8:58:f6:4b:73:7f:36:27:75:3c:8c:
57:23:7c:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX9k9gddWxOMpS+A4t1gh7EilLkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzNjE3M0UwOTcxNjlCQTA0NDUzOEI2NDI1ODAwMEI0
MkZBQkQ4QzAeFw0yNTAyMTQxOTEyMTlaFw0yNjAyMTMxOTE3MTlaMDMxMTAvBgNV
BAMTKEJGRjdFN0RBRkU0NzkwNDIxOTNDNjlCMzgwQTM1NEU3MzdFNjEzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv5O0L5khMrwRpZdSZvERaEczo
ElJMlrBqTRCfphKii3LeqRxuQQ2/LwKStVSYOky76SKnBN35X0G75BAkqhK81YAw
wRLjGjInZx0Mja5IyrRyIpqE7OcDweZohH7uKafkcz0Gw08UH+Rml/SRgEdB3MH1
FGuU+u2/gSNAiI6MSVc0Ng+K6kLMGtIDXJEAF4ChHwEAjZ9rFAMWTQpLvZF4BIQd
hEHXy1MVM4JT/mj4V7puBUvyIPM8w+xdT820zzmQJRz4ks8T4Cg5bujYkx79tho5
CVMG63YZE4QYDBD5bG0V7/peU0aHRvCr0xyEackfW9L+f4P4VZ+mNc9Z/hEHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUv/fn2v5HkEIZPGmzgKNU5zfmE4QwHwYDVR0j
BBgwFoAU/zYXPglxaboERTi2QlgAC0L6vYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9GRjM2MTczRTA5NzE2OUJBMDQ0NTM4QjY0MjU4MDAwQjQyRkFCRDhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzYxNzNFMDk3MTY5QkEw
NDQ1MzhCNjQyNTgwMDBCNDJGQUJEOEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzNzM5MmUzMTM5MzEyZTMxMzgzOTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzIzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzv70wDQYJKoZIhvcNAQELBQADggEBAAEynnTJ
SaH1tK10IV17+BdJ1UWZwMBl96X/z3xWayHTcA7rcX+JnMf3t2TU1VHk8mK2T/eU
bYcso9ThGxoHFZxe1Y1PltGjoXLm8WAmHd3t5oEHo7mDJqvFFAdBT9kbM4T5pGGJ
9iI5YOsUUEczOeTovDEHGRMzPTx82EQxAn3Pl33RS5GNI3CBpfqPFKkxMRn8Jp3X
5I+scsnyLqYuYw6hPdM1dhPcrvPkFz8Vx2YlApscCBWKqXIYli+k2nZqk+8yDFBI
ehpWpV9FO8IbtbQLOT5wABherpMLyDXd9KkAzzKFqxQdcbWKfgFyYQLxLlP4WPZL
c382J3U8jFcjfKI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:00:58 2025 by rpki-client