Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3230382e302f32312d3231203d3e203532383438.roa
File: 3137372e38352e3230382e302f32312d3231203d3e203532383438.roa (raw, json)
Hash identifier: v29eLUWMIFVoLhjuA/HBO8u9D27I96j927prTaZoNII=
Subject key identifier: 74:2F:95:5F:D0:A9:6A:91:64:FB:47:DA:0C:E8:EE:5D:17:DD:65:05
Certificate issuer: /CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
Certificate serial: 4F133A002F6DD1582B488A43FE535C17F4240DD2
Authority key identifier: F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3230382e302f32312d3231203d3e203532383438.roa
Signing time: Wed 18 Dec 2024 17:32:40 +0000
ROA not before: Wed 18 Dec 2024 17:27:40 +0000
ROA not after: Wed 17 Dec 2025 17:32:40 +0000
asID: 52848
IP address blocks: 177.85.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:13:3a:00:2f:6d:d1:58:2b:48:8a:43:fe:53:5c:17:f4:24:0d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
Validity
Not Before: Dec 18 17:27:40 2024 GMT
Not After : Dec 17 17:32:40 2025 GMT
Subject: CN=742F955FD0A96A9164FB47DA0CE8EE5D17DD6505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:20:9b:49:dd:b0:08:65:0a:21:b3:bf:ec:
56:e2:21:b7:7b:a9:20:b4:77:44:69:10:da:e7:25:
2f:56:61:64:ee:45:79:a9:e6:4e:dc:f7:ac:bf:5b:
18:0f:b0:63:6b:ef:ac:1c:a6:29:b3:86:44:96:e9:
6e:c5:32:f0:a4:52:68:ea:45:45:05:81:9c:be:81:
9c:17:25:94:a9:01:29:cd:75:46:42:75:97:5b:a7:
85:7d:de:4d:a7:ab:fb:4c:39:12:10:27:8f:1b:86:
a4:b4:9f:6e:e0:d8:c3:ad:fb:6f:06:ad:4c:60:b7:
44:e2:91:5b:ab:a7:c4:08:5f:e2:d2:1d:c6:d1:3e:
3e:d5:62:a9:10:da:64:00:e9:23:b7:1d:28:6f:2d:
68:99:03:8f:8d:6a:94:fb:5e:ff:aa:c5:22:a5:f7:
14:00:f4:49:96:f6:4c:97:ab:ee:5f:5a:2e:e0:c4:
3b:ef:49:3b:8b:7c:d5:08:59:56:d4:08:e7:b6:b4:
1b:ad:59:17:e9:ba:6d:dc:1e:10:84:27:e2:72:08:
e5:ba:60:ee:a4:9d:b0:e5:9d:01:e5:9a:06:28:25:
0a:d7:87:de:5b:07:0a:3a:b6:55:d0:9a:1a:02:50:
67:26:6d:fb:d4:bd:6b:c8:83:0e:fb:a9:14:70:71:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:95:5F:D0:A9:6A:91:64:FB:47:DA:0C:E8:EE:5D:17:DD:65:05
X509v3 Authority Key Identifier:
keyid:F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/F805B6A0C0363F0117691C0481A12D30CEF456BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3230382e302f32312d3231203d3e203532383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.208.0/21
Signature Algorithm: sha256WithRSAEncryption
09:23:a8:42:9f:b3:20:28:d9:9b:4b:4d:1e:c9:9f:bf:67:37:
e0:01:31:1a:21:31:be:84:a7:07:1d:89:f2:de:c7:2c:3f:e9:
88:fb:f6:94:17:67:c8:11:ad:ec:a5:87:4f:88:e3:85:87:26:
e4:a3:44:c2:61:39:11:01:7e:a8:86:09:08:a5:d6:fe:52:c3:
78:8e:08:df:6f:76:8d:e9:38:cb:49:9a:9f:b6:14:b8:0b:12:
44:ca:70:18:a1:30:bf:36:37:c0:dd:13:da:9a:31:ec:d2:e1:
41:de:3f:8f:b6:19:a9:00:22:6c:4e:f3:9a:74:a6:92:7a:80:
f5:2d:1c:e3:c6:ec:df:cd:c6:d7:fb:36:a1:bb:a9:3d:86:55:
a1:d5:a3:75:ad:da:06:80:6a:30:16:35:f8:4d:01:b4:b3:9d:
c2:44:56:99:c1:dc:cc:79:00:60:92:6b:f9:d0:33:92:80:53:
f8:1b:57:f5:f7:62:be:5a:e3:dd:55:40:69:4e:c8:dc:c2:4e:
80:22:cf:aa:be:e6:96:0a:e5:71:e8:db:dc:5b:79:e6:c4:21:
4e:53:5f:20:1c:da:9a:33:d8:4b:ac:d9:8b:ed:71:20:4b:e0:
2c:b3:8f:f4:d5:31:ce:2f:87:a6:de:c1:e0:4e:77:87:fb:de:
3c:df:78:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:14 2025 by rpki-client