Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa
File: 3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa (raw, json)
Hash identifier: GDa9RHeLLD+9TAgWgn71vFe1Y13k/9tVURsuevId9KY=
Subject key identifier: 75:A4:48:89:19:B5:63:86:8A:0C:FE:AE:AA:E0:D6:DF:BF:6E:0A:9C
Certificate issuer: /CN=84A0648C9B9519DD03662E46C02F5297FC855EEE
Certificate serial: 0545352776938806C436E53DDBF179CF7B6F85A1
Authority key identifier: 84:A0:64:8C:9B:95:19:DD:03:66:2E:46:C0:2F:52:97:FC:85:5E:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A0648C9B9519DD03662E46C02F5297FC855EEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa
Signing time: Tue 14 Jan 2025 13:55:45 +0000
ROA not before: Tue 14 Jan 2025 13:50:45 +0000
ROA not after: Tue 13 Jan 2026 13:55:45 +0000
asID: 271207
IP address blocks: 179.42.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:45:35:27:76:93:88:06:c4:36:e5:3d:db:f1:79:cf:7b:6f:85:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84A0648C9B9519DD03662E46C02F5297FC855EEE
Validity
Not Before: Jan 14 13:50:45 2025 GMT
Not After : Jan 13 13:55:45 2026 GMT
Subject: CN=75A4488919B563868A0CFEAEAAE0D6DFBF6E0A9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:f7:e0:30:a2:62:0b:8f:ca:f0:80:cc:8d:
1d:85:a6:16:70:fd:c9:fb:8e:62:8c:b4:9b:cb:51:
ae:e2:41:7c:3d:6e:0e:90:f2:16:c0:5e:55:20:74:
e6:42:36:fd:41:e0:a8:e5:16:14:77:7e:fb:3a:61:
45:8f:c1:3a:6c:8a:fb:c4:0a:f6:ff:96:86:1f:d7:
fb:e8:2e:84:3f:96:35:b4:10:64:f2:eb:f0:2c:78:
76:40:e9:02:09:45:aa:5b:3f:67:d1:6c:b4:3e:f4:
0b:07:43:af:38:95:ea:f5:d7:67:0e:98:ef:64:fc:
a6:08:05:de:79:2e:03:c9:a0:a9:26:fd:af:05:06:
52:d9:a8:66:45:51:32:d9:52:f8:e5:6e:75:59:7f:
e1:5c:97:88:26:80:58:33:f4:7f:2c:0f:d2:de:4b:
eb:2d:04:30:5a:18:15:d5:ef:6f:07:66:cc:5e:a5:
e0:93:95:f6:43:74:4a:aa:2f:b9:ea:93:8f:93:ba:
a0:6e:46:bb:42:24:f9:37:20:db:ba:cf:62:07:15:
37:e1:a2:47:21:e2:be:8e:93:63:70:82:43:f1:bb:
de:31:7b:e4:7c:93:fc:97:eb:1c:b1:72:cc:aa:32:
46:7a:60:bf:9f:fd:16:06:77:83:2a:06:12:71:6c:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A4:48:89:19:B5:63:86:8A:0C:FE:AE:AA:E0:D6:DF:BF:6E:0A:9C
X509v3 Authority Key Identifier:
keyid:84:A0:64:8C:9B:95:19:DD:03:66:2E:46:C0:2F:52:97:FC:85:5E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/84A0648C9B9519DD03662E46C02F5297FC855EEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A0648C9B9519DD03662E46C02F5297FC855EEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.42.137.0/24
Signature Algorithm: sha256WithRSAEncryption
50:9a:f4:22:af:95:d3:69:a8:2f:c3:54:1c:82:4a:4a:ae:95:
33:59:58:6f:ab:2d:d5:b6:ec:ee:b1:03:9b:85:17:65:a6:5e:
68:bf:55:31:41:a1:31:86:cf:53:0e:cf:c7:23:3e:7c:a1:fc:
59:94:aa:b4:a2:33:d1:cc:5d:5a:74:13:4b:99:07:09:0b:f8:
4f:85:27:97:33:73:4d:13:eb:c2:bd:84:e6:42:3d:a8:bf:b4:
c1:23:e3:8f:39:67:8e:46:26:e1:fd:f0:bc:c0:e9:41:cb:57:
76:3d:33:54:91:2a:5c:e4:c0:43:1b:49:77:fc:cd:e7:5d:45:
9c:2d:c8:af:e4:2d:23:6b:b9:9c:6a:c7:37:ac:94:03:c4:15:
9c:05:21:b3:25:da:c7:93:4a:62:de:c6:e6:bc:99:e7:7e:43:
ae:ac:34:ea:af:dc:20:01:a3:de:d6:b8:f4:a0:66:da:07:2c:
8e:9e:dd:31:8e:59:3f:f1:26:2c:ea:bd:b7:a1:d8:96:48:68:
a3:43:bc:52:a5:fb:1b:21:1e:67:0e:c1:97:55:db:d3:22:50:
15:b6:48:26:90:13:1e:a1:b7:f8:96:6b:80:82:aa:b0:ae:75:
fe:22:a3:32:8f:92:a7:66:a0:ec:80:da:cb:d7:9d:b3:68:e7:
5d:5f:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:12:44 2025 by rpki-client