Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e20323632353039.roa
File: 3137372e36372e302e302f32312d3231203d3e20323632353039.roa (raw, json)
Hash identifier: HzbmdSzhjgYcB/om/3AExvObEeyZaS9+jvTJIFmbSto=
Subject key identifier: 36:87:4A:4A:25:DF:17:FB:26:5A:21:D0:D4:A9:05:82:2F:96:0A:C2
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 05E6DE9A83643B09B5402E288A6FBE77DDE2351E
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e20323632353039.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 262509
IP address blocks: 177.67.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e6:de:9a:83:64:3b:09:b5:40:2e:28:8a:6f:be:77:dd:e2:35:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=36874A4A25DF17FB265A21D0D4A905822F960AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:e4:6b:21:b4:35:1c:15:25:3e:fd:c0:2e:
db:e6:11:37:78:ca:15:82:63:85:93:93:bd:23:f8:
44:e7:0f:df:0d:18:86:4c:e1:16:1d:3d:42:13:d4:
70:b5:14:9c:d0:c2:d5:16:9a:39:31:83:81:f6:c3:
f0:54:31:7d:12:dc:65:37:eb:07:e1:ea:5a:89:69:
31:31:82:d0:53:76:94:a3:02:c8:d5:d5:2f:d0:b9:
1d:68:e8:7d:33:60:c3:e1:03:2b:0c:c1:d4:0b:04:
25:25:10:05:58:d8:c1:d8:e9:f0:cc:00:6f:2d:75:
7a:ea:9d:e6:85:13:57:92:fe:cc:8d:b0:f6:22:da:
6b:7e:82:99:7f:ec:ec:9b:92:ce:9f:bb:40:80:18:
4e:7f:16:31:40:a3:4d:70:9f:80:d5:7b:5a:ae:f0:
e9:a0:a3:65:3e:4c:c1:94:70:61:b2:6d:3a:0b:af:
a2:a1:20:02:60:26:5e:d4:63:37:26:ef:3f:92:de:
c3:dc:a7:08:4c:fc:fa:06:6e:6a:63:ef:ab:79:5a:
c9:98:a3:59:1d:3a:42:de:be:fb:4e:fc:90:89:93:
96:f6:b3:45:75:32:c9:2a:83:89:4a:ae:4a:c0:15:
ec:1e:28:44:44:22:ac:db:c5:ab:95:6c:8d:28:ef:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:87:4A:4A:25:DF:17:FB:26:5A:21:D0:D4:A9:05:82:2F:96:0A:C2
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.0.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:64:39:af:f6:b8:e8:4b:0d:1b:48:8a:37:76:54:71:e5:3f:
71:24:fe:10:07:92:fe:90:1d:07:0a:72:4d:05:ab:c3:d8:4f:
ae:64:e3:44:c0:ec:a3:b4:e7:86:d7:1d:ef:67:23:55:96:42:
10:1b:b2:f0:4c:81:d3:dd:e1:dd:24:9f:7a:11:11:1e:48:d4:
bf:bc:5a:df:3b:fe:2b:ee:42:ec:48:27:cc:d0:56:3c:0e:26:
4f:84:7b:63:69:e4:68:3d:6e:c0:af:a0:f1:21:8d:da:78:5d:
00:c4:66:ed:c7:b1:38:46:24:35:25:25:04:91:c7:27:12:bc:
a3:3b:0c:28:2a:17:32:8c:5c:6f:e3:f4:b2:91:ea:e0:a9:23:
2d:bf:c6:04:c9:68:68:ab:e1:4f:66:91:fe:44:a5:21:2b:eb:
41:2a:6c:3c:ae:31:8b:e0:12:da:7c:79:0b:f9:bc:b7:bb:b4:
96:12:84:85:13:85:e2:cb:ba:c2:9c:42:8a:4a:dd:6e:22:a7:
d5:6b:3f:3d:2f:de:d5:d0:25:ac:29:cf:4c:8c:d7:49:11:dc:
18:c7:fc:b7:36:7d:38:23:43:44:8f:c4:e1:7d:10:70:6a:0c:
89:82:9b:e8:dd:b5:df:36:2f:bb:44:5b:68:e4:3e:e1:0d:a4:
8e:cb:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:39:19 2025 by rpki-client