Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/3137372e35322e36342e302f32312d3234203d3e20323632343338.roa
File: 3137372e35322e36342e302f32312d3234203d3e20323632343338.roa (raw, json)
Hash identifier: K8PQUgh01LzhRhJHkugvECyuCRfTqjC9/MVn46/IUms=
Subject key identifier: 04:00:E3:B3:74:6B:4F:DF:A4:93:FF:E7:ED:7F:7C:AA:9C:8B:F4:40
Certificate issuer: /CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
Certificate serial: 1B3D6079308D23F13C5ACA1818F543B42C2BB58C
Authority key identifier: AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/3137372e35322e36342e302f32312d3234203d3e20323632343338.roa
Signing time: Mon 23 Dec 2024 16:08:57 +0000
ROA not before: Mon 23 Dec 2024 16:03:57 +0000
ROA not after: Mon 22 Dec 2025 16:08:57 +0000
asID: 262438
IP address blocks: 177.52.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:3d:60:79:30:8d:23:f1:3c:5a:ca:18:18:f5:43:b4:2c:2b:b5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
Validity
Not Before: Dec 23 16:03:57 2024 GMT
Not After : Dec 22 16:08:57 2025 GMT
Subject: CN=0400E3B3746B4FDFA493FFE7ED7F7CAA9C8BF440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:41:59:a0:ab:34:61:f9:a0:46:c9:2e:6f:
d3:04:e5:b1:0a:94:13:36:c0:e2:28:48:ef:86:ba:
76:ec:df:54:17:c5:ea:88:fc:2c:18:b3:1f:b0:74:
e5:87:43:42:38:c7:f6:c2:ba:5f:a5:1e:51:d8:b4:
0e:d1:13:7c:fc:48:84:03:0d:f8:a3:92:6c:01:23:
60:89:f9:41:55:17:e7:4f:c6:5f:3f:bf:be:99:aa:
bf:0a:5e:04:da:ff:e3:a2:36:4b:cf:19:64:36:33:
79:89:64:22:38:05:4b:e5:1c:49:74:02:da:cc:d6:
92:41:11:d4:81:68:dc:2e:3d:df:da:cb:98:4e:3f:
c6:3e:da:ea:ff:e1:15:76:0a:d7:a2:a1:fe:8b:9e:
97:43:42:5d:4b:37:9a:94:27:d9:2f:0d:c6:f7:22:
aa:fe:5f:54:dd:4b:91:f0:35:e8:2d:1b:7a:fb:42:
aa:e3:f4:30:85:a5:b9:63:49:64:3b:e6:91:ba:cf:
f3:7f:5b:d7:3d:33:ea:cf:d6:e3:ae:68:8e:e9:ad:
c1:36:d7:7c:07:02:17:ab:13:8e:a0:7e:77:b0:9a:
30:ea:bb:f2:f9:31:e9:61:fb:d7:73:db:ac:c8:51:
55:e9:55:d5:d7:2a:50:56:84:15:75:4e:e6:2b:4a:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:00:E3:B3:74:6B:4F:DF:A4:93:FF:E7:ED:7F:7C:AA:9C:8B:F4:40
X509v3 Authority Key Identifier:
keyid:AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/3137372e35322e36342e302f32312d3234203d3e20323632343338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.52.64.0/21
Signature Algorithm: sha256WithRSAEncryption
61:f3:86:52:a5:66:62:46:39:54:85:cf:b5:5a:8d:a5:8d:d9:
bc:04:7d:b1:c8:6c:aa:f7:4b:31:81:cc:71:07:c9:3d:5c:fc:
a0:7c:2c:5d:51:cf:41:93:56:6e:2d:f5:36:8b:8f:63:cd:a3:
15:2b:be:80:2c:01:31:e1:d1:06:f5:aa:d8:cc:93:a7:4c:83:
4f:4a:ac:fb:cc:44:2f:63:1c:d8:6b:3e:e5:15:ac:af:c6:53:
95:ba:ff:23:75:3e:ff:24:a7:a7:52:d6:19:f1:14:a8:ee:c8:
3e:a8:56:89:28:4d:c3:d2:67:22:41:43:79:c7:4a:78:9b:93:
fd:0f:c7:6c:a0:11:22:e3:38:65:13:5a:af:db:90:e5:d2:6e:
e7:e8:ef:e3:82:e6:8b:dc:8e:88:1c:ab:6b:04:1d:4b:99:fe:
d6:b1:fe:f4:bf:62:d5:27:3b:b5:32:de:2c:e0:5e:1e:60:bf:
f1:c5:44:a0:b0:a8:06:45:2a:87:33:73:42:74:bf:66:a9:98:
fd:6f:14:70:43:f3:ed:5b:a9:16:f3:c1:a0:2b:93:3d:2c:47:
31:fa:3e:85:6f:38:77:c4:21:cc:da:35:d6:9b:d9:22:d1:ff:
17:b4:54:78:dd:53:8f:76:6b:28:6c:ea:ef:e9:93:44:2a:5a:
6a:52:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:23 2025 by rpki-client