Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa
File: 3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa (raw, json)
Hash identifier: kkVkmpNHvcID/+nAHJuvGP2F4j37+qiD5D3ULTLkKZU=
Subject key identifier: 74:FB:24:C9:29:6D:49:89:08:DA:2E:CB:20:BE:82:91:EA:85:86:48
Certificate issuer: /CN=11AA817D18185D6E73FF31CDBFCE8052A2753F1F
Certificate serial: 292CDBE7224785800237E99380170F8706247C20
Authority key identifier: 11:AA:81:7D:18:18:5D:6E:73:FF:31:CD:BF:CE:80:52:A2:75:3F:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11AA817D18185D6E73FF31CDBFCE8052A2753F1F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa
Signing time: Thu 23 Jan 2025 19:13:19 +0000
ROA not before: Thu 23 Jan 2025 19:08:19 +0000
ROA not after: Thu 22 Jan 2026 19:13:19 +0000
asID: 270962
IP address blocks: 187.84.120.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2c:db:e7:22:47:85:80:02:37:e9:93:80:17:0f:87:06:24:7c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11AA817D18185D6E73FF31CDBFCE8052A2753F1F
Validity
Not Before: Jan 23 19:08:19 2025 GMT
Not After : Jan 22 19:13:19 2026 GMT
Subject: CN=74FB24C9296D498908DA2ECB20BE8291EA858648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:42:93:fd:35:6d:62:1c:cf:e9:79:23:2b:
69:6a:fc:11:1c:a4:c8:9a:69:a3:5d:ce:df:d6:f6:
85:b0:0e:f7:7a:e9:d3:f7:b6:55:61:b7:85:75:e1:
45:cd:68:e5:5a:56:33:eb:5e:f9:95:86:1b:26:f7:
b3:d9:11:00:2e:a9:19:df:0d:7a:d2:e6:3b:c5:69:
19:41:a4:37:87:5e:ca:60:ef:9e:25:cb:91:af:7c:
3f:09:58:27:6b:72:29:4c:8b:0b:5d:2a:e5:9c:0d:
08:fe:54:b8:ad:b4:52:e4:b2:42:3c:23:f7:8b:11:
6b:83:a5:df:f8:b1:14:56:21:c7:9e:7e:ce:70:46:
2d:25:42:46:8a:23:aa:59:41:11:00:16:ce:cf:92:
51:0f:16:83:44:06:b6:2c:a5:19:f9:64:f1:8c:b4:
be:ac:78:03:b7:fb:02:7b:6e:1c:d6:8b:9e:81:52:
ea:45:77:91:1f:f0:43:ef:46:69:e0:c9:14:4e:7e:
eb:bb:e0:9e:cd:b1:82:95:83:d2:f7:ff:ba:ed:b9:
bc:2d:8b:ee:c4:04:1f:ef:61:39:ce:65:83:1e:84:
f4:75:dc:78:b3:e3:63:85:ba:03:73:d2:98:e8:30:
f6:ca:0f:ba:05:19:21:a8:84:42:9b:0f:ec:0e:5e:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FB:24:C9:29:6D:49:89:08:DA:2E:CB:20:BE:82:91:EA:85:86:48
X509v3 Authority Key Identifier:
keyid:11:AA:81:7D:18:18:5D:6E:73:FF:31:CD:BF:CE:80:52:A2:75:3F:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/11AA817D18185D6E73FF31CDBFCE8052A2753F1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11AA817D18185D6E73FF31CDBFCE8052A2753F1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.84.120.0/22
Signature Algorithm: sha256WithRSAEncryption
88:55:06:e0:e1:d7:e6:31:87:31:89:70:aa:c1:cc:1c:1f:5e:
07:3c:a8:cf:67:ba:ab:86:79:2a:3b:69:eb:f4:8e:3c:1f:d6:
c2:35:4d:b5:8f:fe:af:38:3d:f3:59:e2:93:66:68:30:19:7a:
68:3f:89:81:2b:55:71:14:b6:3c:66:26:15:7e:77:b5:f0:84:
60:47:1f:4c:df:db:7f:bd:91:29:ee:38:6b:69:75:b2:ca:90:
3e:82:c8:bc:7c:44:c5:41:25:28:d0:22:1e:ef:90:da:44:7b:
82:fb:46:02:a8:6c:a2:e6:40:5b:1e:a3:ad:52:27:8d:ca:b8:
55:04:ea:fb:2d:9a:ee:45:c4:30:cb:3d:1b:95:9a:ca:bd:0f:
7d:68:4f:e6:41:86:79:aa:52:73:fd:09:68:87:ae:b1:fa:c0:
7d:5f:c8:61:eb:8b:bb:b9:06:5c:a2:8d:04:8e:fe:05:72:4f:
a1:77:32:42:90:5a:c2:4a:95:77:e4:0b:72:45:83:2d:b4:bf:
93:08:0e:5b:da:0a:95:2b:56:0e:26:41:a6:8f:d5:8e:2e:2a:
4e:b2:1b:c1:2f:77:7c:70:67:76:5e:d2:8c:a0:5b:a6:bf:05:
25:40:d0:86:76:17:43:cd:24:23:f8:a3:83:66:07:80:18:7e:
fa:4f:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:53:21 2025 by rpki-client