Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34372e302f32342d3234203d3e203532383731.roa
File: 3137372e3133362e34372e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier: nyAQFmutHEu6ST3Dg4i0lJyJL7HEaE3xHE3ADVEDKEo=
Subject key identifier: AB:CC:35:63:D3:36:B3:E2:D5:AC:92:83:08:FF:54:C7:E4:DA:DF:1B
Certificate issuer: /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial: 14CE3242CFDBFEFB20D5C360D3004D8037E5A36F
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34372e302f32342d3234203d3e203532383731.roa
Signing time: Wed 03 Apr 2024 23:12:24 +0000
ROA not before: Wed 03 Apr 2024 23:07:24 +0000
ROA not after: Wed 02 Apr 2025 23:12:24 +0000
asID: 52871
IP address blocks: 177.136.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ce:32:42:cf:db:fe:fb:20:d5:c3:60:d3:00:4d:80:37:e5:a3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Validity
Not Before: Apr 3 23:07:24 2024 GMT
Not After : Apr 2 23:12:24 2025 GMT
Subject: CN=ABCC3563D336B3E2D5AC928308FF54C7E4DADF1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:43:0d:a7:45:d2:10:12:d9:4d:72:7c:ac:
81:3b:28:bf:c8:31:20:eb:93:99:0a:d9:d7:71:77:
cc:88:02:13:f6:81:e3:21:fe:bb:52:90:b2:d3:7b:
d3:8d:30:dc:92:ae:62:bc:65:1e:9d:c6:9c:44:ee:
3e:6a:43:c5:01:04:c9:04:61:8e:91:04:93:bd:af:
f9:4a:db:02:bb:e3:3e:95:19:f7:28:14:49:b9:0a:
5e:20:5a:8b:b5:cd:9a:58:46:3e:81:10:e0:56:34:
7b:a6:fc:81:68:da:77:79:e5:2e:fc:cb:2f:27:44:
7d:cd:b1:49:04:b7:58:e6:f0:3b:e9:d5:a0:7b:9a:
ac:2f:fd:59:34:f8:2e:57:b3:31:a5:46:23:2e:7b:
c8:7f:53:36:a0:99:5e:53:f5:51:f3:14:64:93:50:
76:f0:0a:e3:0b:40:74:73:15:34:a1:66:d0:54:db:
cd:6f:23:18:eb:3d:63:8f:86:6d:b8:e1:8a:bc:11:
96:52:39:95:54:80:2e:93:53:a6:49:84:af:ab:44:
28:13:de:a2:3d:1a:b1:a7:a6:98:a7:df:e1:31:98:
5a:c9:61:d3:38:3d:76:db:eb:bd:d9:e4:1b:fe:5e:
5a:ff:39:a1:87:ee:0b:26:8a:40:3e:7a:c0:22:f9:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CC:35:63:D3:36:B3:E2:D5:AC:92:83:08:FF:54:C7:E4:DA:DF:1B
X509v3 Authority Key Identifier:
keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34372e302f32342d3234203d3e203532383731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.136.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:dd:e7:3b:5a:66:9b:05:33:1e:16:77:21:b1:34:37:2e:92:
2c:31:c6:b3:15:40:8a:f9:82:9b:5b:9f:8b:cb:01:0f:ef:db:
ba:a4:12:23:20:b1:e2:a8:03:d3:f2:9c:18:80:d9:ed:30:f2:
cb:85:ca:59:7d:35:25:17:ab:dd:85:16:d9:63:34:fa:f5:4e:
71:db:4f:73:36:f8:d4:fc:95:9a:49:2b:32:ab:a4:e8:3c:62:
46:2a:68:be:18:74:3e:38:e9:e5:1b:2f:41:59:c5:09:fd:c9:
4c:83:08:2d:d9:c3:08:77:d0:ff:fb:73:ed:4e:10:e1:a1:ea:
b4:35:71:f6:a3:ed:52:81:25:35:78:73:be:19:fb:3d:0e:c4:
d5:32:ff:ba:40:fd:16:24:6e:f1:71:36:08:e4:b3:fc:2b:e8:
d6:2e:8a:40:7f:f9:2e:e3:e8:0c:2a:cc:ff:39:f4:2b:34:01:
fd:d6:63:b2:64:9f:13:64:4c:c4:e2:e4:35:5b:17:6c:9e:80:
fe:3d:7a:b2:0c:f4:60:9f:09:4f:b2:37:1b:a6:c6:47:6b:0d:
fc:07:35:a3:a7:00:71:63:b2:2f:ff:c7:46:c9:4d:94:66:bb:
8b:1d:56:93:bc:61:5a:ac:9b:16:ed:f7:10:ce:13:56:06:da:
6b:90:0a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:32:06 2025 by rpki-client