Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/3137372e31312e3136382e302f32312d3234203d3e203532393033.roa
File: 3137372e31312e3136382e302f32312d3234203d3e203532393033.roa (raw, json)
Hash identifier: P3MNsJJyzbQ4+cWSD6hSkZ54bOqzx44uvy9vvt818K0=
Subject key identifier: 10:8B:85:82:BB:FE:64:9F:6F:69:9A:F3:B4:CA:5C:CD:DE:FA:26:78
Certificate issuer: /CN=36ECAA0A83F15C768CBF66E950397B9929964174
Certificate serial: 59FEBF6C08CA04A819B4734D4EF6C6A511EBE1D4
Authority key identifier: 36:EC:AA:0A:83:F1:5C:76:8C:BF:66:E9:50:39:7B:99:29:96:41:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ECAA0A83F15C768CBF66E950397B9929964174.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/3137372e31312e3136382e302f32312d3234203d3e203532393033.roa
Signing time: Thu 04 Apr 2024 08:00:34 +0000
ROA not before: Thu 04 Apr 2024 07:55:34 +0000
ROA not after: Thu 03 Apr 2025 08:00:34 +0000
asID: 52903
IP address blocks: 177.11.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fe:bf:6c:08:ca:04:a8:19:b4:73:4d:4e:f6:c6:a5:11:eb:e1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ECAA0A83F15C768CBF66E950397B9929964174
Validity
Not Before: Apr 4 07:55:34 2024 GMT
Not After : Apr 3 08:00:34 2025 GMT
Subject: CN=108B8582BBFE649F6F699AF3B4CA5CCDDEFA2678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:74:f5:95:0d:cc:f5:70:ac:a3:08:f7:6e:
41:81:b9:bf:34:ce:87:9d:80:ec:31:c3:44:7a:7c:
62:b8:6f:8c:6e:ef:ca:c7:18:9b:1b:3f:0a:ca:6f:
84:02:8b:77:2d:7f:57:4f:dd:94:49:f0:d3:d9:0e:
38:4a:0f:6d:42:30:ec:8d:e8:49:bd:54:fe:66:75:
64:f4:23:93:71:95:65:05:58:78:3f:ec:79:3e:5f:
41:f4:a5:6a:07:6b:80:dc:79:03:80:9b:72:a4:3e:
47:ca:af:3e:67:4a:b6:bc:5e:37:96:77:41:97:09:
c8:bb:15:bd:50:2b:d0:6a:c2:fb:d8:07:4d:44:50:
b2:22:7d:83:9e:82:73:d9:ae:bd:a4:10:9a:e8:de:
1d:37:fa:f7:fa:49:18:a0:e1:09:8a:69:61:40:12:
f0:cc:77:25:aa:17:b7:6a:b9:a0:9c:71:9e:a0:36:
d2:ca:70:a6:77:11:9e:d9:07:50:f7:36:87:34:b3:
35:94:6c:e9:2b:32:92:0f:d2:95:9c:55:37:4f:b3:
4c:89:fc:e2:64:11:fc:41:78:48:a3:df:3a:f8:5b:
fa:1e:ad:99:24:85:56:d5:2a:11:aa:c1:07:c4:d9:
b6:c9:8c:76:23:a2:7d:42:b9:c3:66:b5:df:e9:03:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8B:85:82:BB:FE:64:9F:6F:69:9A:F3:B4:CA:5C:CD:DE:FA:26:78
X509v3 Authority Key Identifier:
keyid:36:EC:AA:0A:83:F1:5C:76:8C:BF:66:E9:50:39:7B:99:29:96:41:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/36ECAA0A83F15C768CBF66E950397B9929964174.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ECAA0A83F15C768CBF66E950397B9929964174.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/3137372e31312e3136382e302f32312d3234203d3e203532393033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.11.168.0/21
Signature Algorithm: sha256WithRSAEncryption
00:08:44:3f:df:50:ae:3f:95:e2:16:fb:a7:71:53:3b:d6:34:
87:af:6d:3e:89:59:51:2b:a1:f0:4e:4c:40:6e:56:23:ae:56:
e5:a3:1c:a7:7e:ae:0c:5f:62:9d:6c:b5:25:cd:57:cc:0b:67:
ee:a0:dd:6b:1c:44:50:a3:72:57:ef:b1:79:53:f1:16:b0:2c:
0a:b1:3a:04:7a:d6:a4:c1:85:0d:04:ed:40:f4:35:49:4f:5a:
1a:78:e5:8a:91:4a:18:27:18:38:e9:ac:4f:b5:92:98:9c:66:
fb:f1:8c:bd:86:69:69:4e:f2:0f:f7:60:c7:b0:4a:d5:5f:8e:
2b:d6:58:40:e8:ad:ad:2f:af:50:13:68:db:1f:4e:8b:9e:13:
a3:02:9a:57:38:2c:09:44:31:51:91:5d:b2:61:d1:1a:c8:12:
fd:0b:aa:6f:04:07:e3:a6:b2:12:51:7f:10:f1:fc:2e:cb:ee:
ef:b4:60:9e:8c:c3:c3:6a:47:15:01:34:de:0f:1c:b1:bb:fe:
58:49:e7:21:ce:d8:87:aa:10:89:59:22:ec:9c:49:e8:00:76:
ca:cf:24:67:a3:65:6a:79:fe:d5:89:14:de:a7:8a:f3:7b:e4:
a2:c5:3e:38:a8:5d:31:3c:8b:78:48:31:58:3d:75:da:7e:75:
68:1b:d5:79
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWf6/bAjKBKgZtHNNTvbGpRHr4dQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFQ0FBMEE4M0YxNUM3NjhDQkY2NkU5NTAzOTdCOTky
OTk2NDE3NDAeFw0yNDA0MDQwNzU1MzRaFw0yNTA0MDMwODAwMzRaMDMxMTAvBgNV
BAMTKDEwOEI4NTgyQkJGRTY0OUY2RjY5OUFGM0I0Q0E1Q0NEREVGQTI2NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVZHT1lQ3M9XCsowj3bkGBub80
zoedgOwxw0R6fGK4b4xu78rHGJsbPwrKb4QCi3ctf1dP3ZRJ8NPZDjhKD21CMOyN
6Em9VP5mdWT0I5NxlWUFWHg/7Hk+X0H0pWoHa4DceQOAm3KkPkfKrz5nSra8XjeW
d0GXCci7Fb1QK9BqwvvYB01EULIifYOegnPZrr2kEJro3h03+vf6SRig4QmKaWFA
EvDMdyWqF7dquaCccZ6gNtLKcKZ3EZ7ZB1D3Noc0szWUbOkrMpIP0pWcVTdPs0yJ
/OJkEfxBeEij3zr4W/oerZkkhVbVKhGqwQfE2bbJjHYjon1CucNmtd/pA0alAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEIuFgrv+ZJ9vaZrztMpczd76JngwHwYDVR0j
BBgwFoAUNuyqCoPxXHaMv2bpUDl7mSmWQXQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEE1ZDk3cG9zWEwyOUNidVN0dlZ2M1hBQ2ZSMmM3clhiZERUQ1hpQ0VS
cVgvMS8zNkVDQUEwQTgzRjE1Qzc2OENCRjY2RTk1MDM5N0I5OTI5OTY0MTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2RUNBQTBBODNGMTVDNzY4
Q0JGNjZFOTUwMzk3Qjk5Mjk5NjQxNzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRBNWQ5N3Bvc1hMMjlDYnVTdHZWdjNYQUNmUjJjN3JYYmREVENYaUNFUnFYLzEv
MzEzNzM3MmUzMTMxMmUzMTM2MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMy
MzkzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsQuoMA0GCSqGSIb3DQEBCwUAA4IBAQAACEQ/31Cu
P5XiFvuncVM71jSHr20+iVlRK6HwTkxAblYjrlbloxynfq4MX2KdbLUlzVfMC2fu
oN1rHERQo3JX77F5U/EWsCwKsToEetakwYUNBO1A9DVJT1oaeOWKkUoYJxg46axP
tZKYnGb78Yy9hmlpTvIP92DHsErVX44r1lhA6K2tL69QE2jbH06LnhOjAppXOCwJ
RDFRkV2yYdEayBL9C6pvBAfjprISUX8Q8fwuy+7vtGCejMPDakcVATTeDxyxu/5Y
SechztiHqhCJWSLsnEnoAHbKzyRno2Vqef7ViRTep4rze+SixT44qF0xPIt4SDFY
PXXafnVoG9V5
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:45 2025 by rpki-client