Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133382e302f32342d3234203d3e20323731323037.roa
File: 3137392e34322e3133382e302f32342d3234203d3e20323731323037.roa (raw, json)
Hash identifier: HkAHbjqkTMWIBkr1udNeimsctVcUATBe/3nY0rf+5ZQ=
Subject key identifier: EA:9C:3D:3B:14:0F:A1:B1:33:90:F6:95:17:0C:C2:DC:31:C7:F5:AE
Certificate issuer: /CN=84A0648C9B9519DD03662E46C02F5297FC855EEE
Certificate serial: 6E61A4810F4CC92102EE04E96B0FE71071F84C28
Authority key identifier: 84:A0:64:8C:9B:95:19:DD:03:66:2E:46:C0:2F:52:97:FC:85:5E:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A0648C9B9519DD03662E46C02F5297FC855EEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133382e302f32342d3234203d3e20323731323037.roa
Signing time: Tue 14 Jan 2025 13:55:45 +0000
ROA not before: Tue 14 Jan 2025 13:50:45 +0000
ROA not after: Tue 13 Jan 2026 13:55:45 +0000
asID: 271207
IP address blocks: 179.42.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:61:a4:81:0f:4c:c9:21:02:ee:04:e9:6b:0f:e7:10:71:f8:4c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84A0648C9B9519DD03662E46C02F5297FC855EEE
Validity
Not Before: Jan 14 13:50:45 2025 GMT
Not After : Jan 13 13:55:45 2026 GMT
Subject: CN=EA9C3D3B140FA1B13390F695170CC2DC31C7F5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:fd:af:d2:ce:ae:00:27:bd:3e:99:f8:71:
39:bd:78:dc:08:f1:7d:e6:4e:b4:7a:bc:f2:fc:24:
c2:a3:bb:68:e9:91:51:b2:3a:c5:30:62:11:aa:aa:
05:cd:ce:6b:3a:90:78:cc:e0:eb:04:69:69:95:1a:
7f:6d:33:88:20:c0:3f:d6:2d:1f:91:e3:9d:a3:8c:
2a:e6:6f:05:52:f9:e2:1c:df:e2:1a:b3:da:eb:d1:
b8:4e:01:cf:38:35:78:0d:dc:cf:26:d1:97:81:7e:
5d:d6:fe:79:67:07:cd:8a:73:8f:ee:1d:05:74:d8:
87:6a:16:dd:44:2a:7f:83:61:cc:51:92:36:77:9d:
9d:e9:fd:a6:4b:fc:ac:9b:e0:2a:01:f6:a2:e2:07:
51:69:3b:65:95:d2:ab:ac:48:27:35:05:24:cb:2f:
12:62:37:6b:9c:b8:91:70:dc:21:63:1e:d5:f9:90:
cd:75:53:dd:ca:17:43:58:e0:a2:f8:0b:f7:ab:74:
c7:e1:64:f7:66:04:e2:03:b8:33:e3:35:c1:19:be:
af:80:7a:49:81:5a:2c:5b:3b:32:28:85:b5:19:9f:
c3:e2:27:f6:5e:28:d8:1e:30:fe:5a:be:bc:1d:b4:
d8:a4:96:86:67:ce:78:31:e7:aa:d9:bd:d9:75:d8:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9C:3D:3B:14:0F:A1:B1:33:90:F6:95:17:0C:C2:DC:31:C7:F5:AE
X509v3 Authority Key Identifier:
keyid:84:A0:64:8C:9B:95:19:DD:03:66:2E:46:C0:2F:52:97:FC:85:5E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/84A0648C9B9519DD03662E46C02F5297FC855EEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A0648C9B9519DD03662E46C02F5297FC855EEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133382e302f32342d3234203d3e20323731323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.42.138.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d5:92:ef:98:11:02:8a:f2:df:9a:a3:68:57:36:fe:b7:9c:
54:86:6b:3a:0b:b6:be:c9:d1:6b:e7:37:07:70:c2:3d:26:42:
c0:3d:69:13:6e:95:81:6b:82:a1:45:d5:2f:75:39:00:f0:d9:
19:76:e9:da:7d:34:5b:57:ab:2c:22:0d:c8:35:d3:18:4f:57:
01:ac:60:15:5c:20:ab:c9:82:6f:8b:5d:f7:1d:de:b3:a2:35:
5a:8e:45:3d:ca:3c:ce:7a:ea:70:04:44:1a:78:c3:74:76:d1:
12:19:9f:76:6e:72:78:91:53:16:d3:29:2c:56:5e:2a:df:c5:
07:59:7a:49:75:d2:a4:ce:b0:31:39:33:4d:a0:4f:de:c1:77:
ba:ca:e1:cf:63:ea:b4:d4:bd:8a:4f:4c:39:8b:4c:0f:dd:ce:
0a:b2:27:cc:05:cf:56:08:33:0c:d4:04:aa:9f:ce:34:96:e3:
23:f7:fa:cf:b9:58:c4:ed:72:3d:28:e8:d9:85:28:da:47:83:
e3:a6:64:58:db:a7:62:9d:b9:a9:ba:7e:b3:6a:12:df:95:49:
ca:c8:ba:1e:1a:d1:97:4d:8a:69:3a:0a:53:37:01:ad:41:aa:
a5:f9:ab:7f:e4:a8:3a:65:2c:79:69:6f:36:a4:e6:23:da:21:
97:50:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:39:42 2025 by rpki-client