Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e38352e34382e302f32312d3231203d3e203238323130.roa
File: 3137372e38352e34382e302f32312d3231203d3e203238323130.roa (raw, json)
Hash identifier: H4TzAnDBGx8ujTQKGwacWiwu7EIUiNDRAX/BjMaNDtc=
Subject key identifier: 9C:EA:ED:BE:76:20:8D:FF:36:CC:41:2D:39:02:60:98:63:1B:FE:D4
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 2BDBD2B5E2CF36C4831A701067C2BF46C09AB081
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e38352e34382e302f32312d3231203d3e203238323130.roa
Signing time: Thu 04 Apr 2024 04:37:49 +0000
ROA not before: Thu 04 Apr 2024 04:32:49 +0000
ROA not after: Thu 03 Apr 2025 04:37:49 +0000
asID: 28210
IP address blocks: 177.85.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:db:d2:b5:e2:cf:36:c4:83:1a:70:10:67:c2:bf:46:c0:9a:b0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Apr 4 04:32:49 2024 GMT
Not After : Apr 3 04:37:49 2025 GMT
Subject: CN=9CEAEDBE76208DFF36CC412D39026098631BFED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:8e:16:40:ad:be:30:d3:46:35:6b:d8:f2:
64:96:ae:0f:9d:c7:6e:a2:e4:3d:ef:fd:7c:f8:79:
9d:9b:75:85:71:2a:ec:74:15:31:71:16:83:a5:af:
02:a2:95:45:5d:0a:e4:65:5b:c8:9f:41:f5:db:f2:
fc:6b:59:25:94:3d:d3:d8:e6:cb:21:f4:a5:65:ba:
34:38:b4:fa:9f:e6:72:a2:35:ba:5c:9d:3d:cf:cb:
53:6b:15:8a:1c:bf:79:bb:03:1d:f8:85:64:91:6c:
fa:93:23:6a:30:00:94:69:4b:d3:af:62:e2:2f:2a:
25:ef:58:aa:80:56:64:ab:21:b2:cf:c9:bf:65:eb:
01:95:79:0e:bb:b2:a5:0b:a5:c9:1c:b9:99:74:e0:
b5:6d:0a:c9:d7:ee:7c:86:e8:2d:a2:58:12:39:6f:
4b:90:3f:d3:ca:11:15:57:a5:ce:1a:a9:4c:74:8b:
f7:a2:39:40:bd:4e:0c:64:42:d5:9b:57:be:1f:e4:
97:59:81:39:c4:79:ac:ba:14:0f:99:ce:6a:7c:44:
ac:1c:d0:b6:ea:31:81:21:30:b4:3f:f2:fd:5a:38:
e8:2a:5e:3b:81:e3:b6:87:15:e6:a4:18:83:da:1a:
99:6b:64:0c:b4:e5:6d:67:f5:33:5d:61:d2:5e:00:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:ED:BE:76:20:8D:FF:36:CC:41:2D:39:02:60:98:63:1B:FE:D4
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e38352e34382e302f32312d3231203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.48.0/21
Signature Algorithm: sha256WithRSAEncryption
19:ad:37:be:9c:b6:c0:1b:94:01:cc:22:6f:7c:70:9c:8d:10:
8a:71:db:2b:f7:d7:31:7f:88:a8:1d:d0:ce:2e:96:af:17:db:
63:f5:7a:74:63:8b:14:6f:e6:41:f7:71:22:fd:cb:ed:c0:90:
82:08:02:a0:f6:d0:f8:b4:ed:5f:06:ba:cd:e9:21:2e:95:5d:
52:b3:d4:0d:23:c9:72:51:d0:39:4d:6d:e8:73:05:52:32:5d:
ee:44:14:93:29:96:4d:b1:64:0b:f3:62:7e:31:87:95:ab:de:
c7:19:07:d6:b0:13:1a:e6:32:e1:f6:7f:7f:f1:e5:d1:2f:57:
66:f6:41:1c:c8:90:b3:20:ed:26:95:e8:97:f6:e2:4e:b6:0d:
06:d6:44:f6:6c:19:06:03:ca:5a:06:a9:43:1b:63:7d:31:d0:
c5:34:87:14:42:20:09:d1:6f:82:ef:6d:35:bd:e7:bf:4b:ea:
9c:50:10:93:aa:62:9e:ed:66:68:42:f5:9d:d5:4e:fa:a6:9a:
29:58:97:95:46:7c:0b:30:6e:36:bd:a2:5c:92:7f:55:19:00:
41:52:cd:94:7f:78:48:64:2b:96:fb:50:bd:6e:2d:5d:2a:90:
8d:a2:d0:43:69:05:68:36:f2:31:d1:f5:c6:0f:bf:62:a3:d7:
ac:27:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:13:59 2025 by rpki-client