Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/3137372e3133362e37342e302f32342d3234203d3e20323633363036.roa
File: 3137372e3133362e37342e302f32342d3234203d3e20323633363036.roa (raw, json)
Hash identifier: qe7r9EMBuA8PVM6G5o8rjU41GVgMR7iCARGYFxajE9Q=
Subject key identifier: D4:A7:1C:28:F3:3A:84:1B:E9:1A:46:FB:D2:92:F8:0A:B4:9B:28:3C
Certificate issuer: /CN=561575F60242E48030BC35A771871EB47C6EFF55
Certificate serial: 658CDF634615413995B4D0B40C4CC7AE43813338
Authority key identifier: 56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/3137372e3133362e37342e302f32342d3234203d3e20323633363036.roa
Signing time: Sat 25 Jan 2025 14:21:52 +0000
ROA not before: Sat 25 Jan 2025 14:16:52 +0000
ROA not after: Sat 24 Jan 2026 14:21:52 +0000
asID: 263606
IP address blocks: 177.136.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:8c:df:63:46:15:41:39:95:b4:d0:b4:0c:4c:c7:ae:43:81:33:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561575F60242E48030BC35A771871EB47C6EFF55
Validity
Not Before: Jan 25 14:16:52 2025 GMT
Not After : Jan 24 14:21:52 2026 GMT
Subject: CN=D4A71C28F33A841BE91A46FBD292F80AB49B283C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:c2:1b:92:23:6b:a4:b7:6a:93:8d:7f:de:
22:4e:86:13:4f:65:b3:2a:95:1d:9c:aa:e4:bc:3e:
11:7e:b5:f2:2f:d3:a1:8a:b1:b2:33:b7:7e:35:52:
d6:1c:3a:f2:b3:68:5e:b5:f0:26:32:c2:b7:e6:5d:
56:5d:cd:4c:b9:27:97:02:e8:36:05:8b:44:af:9f:
6b:89:d1:b3:27:b3:19:81:75:f1:f2:3b:4e:e1:a2:
6a:35:ae:84:e4:77:9f:39:d4:64:c6:a9:a4:a8:6c:
ff:d7:b2:a5:09:3f:16:04:f5:23:37:e8:b1:7f:10:
dd:e9:1a:45:ee:c7:f2:0d:67:e3:8f:53:da:37:c1:
7c:1f:c1:f4:70:45:72:2c:4a:2e:33:ce:cf:e9:40:
1c:1d:c5:81:57:01:1f:b2:5f:63:45:7f:a9:f3:eb:
8c:4a:43:fe:1b:a9:d5:91:3e:d1:1b:3d:fd:27:a3:
6e:0d:34:ec:19:38:85:3d:a4:22:e5:c9:fa:d6:08:
52:56:5b:85:04:04:5b:10:89:54:24:a9:23:91:67:
12:38:4c:57:62:b5:87:1f:24:3d:6f:1a:9e:92:97:
de:ed:b4:5b:b8:82:0b:7e:32:6c:b3:30:a4:6e:a0:
cc:28:c7:e9:da:6d:d3:e9:65:55:98:e3:1a:9c:91:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A7:1C:28:F3:3A:84:1B:E9:1A:46:FB:D2:92:F8:0A:B4:9B:28:3C
X509v3 Authority Key Identifier:
keyid:56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/3137372e3133362e37342e302f32342d3234203d3e20323633363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.136.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:72:a7:3c:e8:d3:04:f1:b7:63:d3:89:5a:a5:4f:3c:c5:a4:
bb:7b:ab:ef:fe:97:7e:2b:d1:de:dd:fe:1f:e7:ca:f8:27:a4:
aa:24:36:4b:ed:8f:d0:05:56:80:6b:65:88:ba:a1:5b:5b:79:
f6:d4:60:91:eb:76:db:94:15:e8:c6:3a:8e:93:92:3f:69:88:
45:ac:82:32:ff:42:f4:24:7f:05:36:e6:cc:58:15:86:97:8e:
41:48:55:ea:d9:02:b5:b2:62:03:3c:f5:b6:fd:28:ea:8f:00:
25:1f:3c:ba:95:18:68:56:63:fe:1e:64:02:47:2d:6d:1b:c2:
4e:41:03:9d:b1:6b:bc:72:ff:93:40:44:ee:ab:84:1c:df:b0:
4d:5e:08:43:41:aa:22:0c:a0:13:8d:d9:4c:67:94:a0:9b:af:
f8:83:7f:3b:4c:84:04:6f:12:72:80:a1:26:39:95:5b:e9:29:
e6:b7:9f:c2:c5:59:3e:40:ba:0f:02:29:2e:3f:14:5d:72:33:
b5:11:22:cf:3f:e4:f8:8a:b9:f8:6b:fc:b0:eb:12:0c:fb:60:
1f:62:02:f9:1d:45:7d:2e:49:59:e9:bd:4f:8c:66:56:2a:88:
63:74:24:fe:53:35:c4:e2:b0:e3:e9:c0:4b:3c:f8:d6:e1:52:
95:f8:7e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:24:36 2025 by rpki-client