Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa
File: 3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (raw, json)
Hash identifier: HXu5G76PoDswbja89zEnvWItivYXQ47CjdxozDjgRyo=
Subject key identifier: 5F:A2:91:0E:61:04:5F:1B:B7:39:EF:A9:1F:CC:A5:9F:48:C8:A8:E7
Certificate issuer: /CN=3B323E2B6F70952EDC5BF6F9E68B220D04C813CB
Certificate serial: 3D3FD5DE64922B07C898802A12CC8D9E804BBDFB
Authority key identifier: 3B:32:3E:2B:6F:70:95:2E:DC:5B:F6:F9:E6:8B:22:0D:04:C8:13:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa
Signing time: Thu 02 Jan 2025 18:52:54 +0000
ROA not before: Thu 02 Jan 2025 18:47:54 +0000
ROA not after: Thu 01 Jan 2026 18:52:54 +0000
asID: 271216
IP address blocks: 177.36.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:3f:d5:de:64:92:2b:07:c8:98:80:2a:12:cc:8d:9e:80:4b:bd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B323E2B6F70952EDC5BF6F9E68B220D04C813CB
Validity
Not Before: Jan 2 18:47:54 2025 GMT
Not After : Jan 1 18:52:54 2026 GMT
Subject: CN=5FA2910E61045F1BB739EFA91FCCA59F48C8A8E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:be:4c:8b:31:39:f2:42:ad:2c:25:5e:28:
44:ec:fe:df:81:bb:b3:92:fa:f3:74:03:aa:e9:cd:
c8:0a:64:1a:12:a6:a0:3d:45:f6:55:c9:13:29:fc:
8f:52:bd:cd:98:53:66:55:fd:11:56:da:e6:cf:fb:
55:54:a8:a2:52:14:e1:0e:81:6f:50:52:a8:e9:90:
ed:bf:a8:84:3f:b1:8f:ae:0a:14:c9:6a:2e:74:f1:
55:8b:e6:8b:16:a0:a5:17:fb:5b:fe:6e:a4:c3:e3:
a3:54:80:19:e0:c1:c2:54:3b:23:6d:b1:68:5a:8a:
f9:9d:ad:09:6a:c4:ab:a3:0b:8c:ec:56:d8:16:23:
e0:54:0b:13:23:f1:74:e3:bc:22:ba:90:e6:a6:74:
84:94:53:5e:ba:2d:97:57:e1:a5:2b:d0:9d:83:f6:
ac:66:a9:b5:b9:c0:47:46:f9:f1:4a:d1:f1:ca:95:
61:35:17:c3:b6:2a:94:63:d8:c5:45:e7:b3:ca:4b:
ea:a0:f6:e6:4f:79:39:3b:1a:27:ff:a7:74:91:cb:
9f:ed:55:ce:0a:92:55:7c:23:3e:5d:7c:f1:e6:fb:
76:66:e0:7c:c8:d7:d9:82:94:81:da:d0:35:b0:3e:
fe:c8:9d:6b:5e:99:a0:c2:8b:5d:a2:96:c0:4c:24:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A2:91:0E:61:04:5F:1B:B7:39:EF:A9:1F:CC:A5:9F:48:C8:A8:E7
X509v3 Authority Key Identifier:
keyid:3B:32:3E:2B:6F:70:95:2E:DC:5B:F6:F9:E6:8B:22:0D:04:C8:13:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.36.76.0/23
Signature Algorithm: sha256WithRSAEncryption
18:7d:3a:55:5f:44:46:81:fe:9f:7a:28:1a:4b:35:82:7d:e3:
9b:0a:63:58:19:3b:5a:67:8e:4b:c1:44:04:31:4a:23:12:5c:
0f:c3:f6:60:21:38:44:8b:66:ef:77:39:2c:4b:57:78:9e:23:
77:a4:bf:78:02:fb:53:fd:7e:bc:af:f8:f1:67:11:df:40:83:
59:b9:82:24:a6:94:91:de:b7:bf:18:0b:1b:93:87:a9:8d:f9:
5e:90:b6:ac:0f:c6:80:6c:e5:42:a3:3d:16:26:7b:78:96:78:
da:94:be:2f:13:60:6d:91:9a:75:53:77:07:16:2d:fd:98:5f:
f2:04:7e:33:57:0f:43:0c:1d:69:b9:b3:9a:18:f2:7b:9d:e0:
ab:7c:41:3e:44:1c:82:1a:b4:69:7b:c9:85:2a:e6:4a:82:a7:
ec:b2:77:18:53:a3:a8:35:ea:ab:88:72:50:6a:b7:89:e7:fc:
bb:a6:e9:ba:d3:5f:a6:da:6a:e9:8d:11:6f:2f:dc:d8:3e:d3:
ce:c1:97:06:df:81:f3:d0:8e:86:df:c0:f7:5b:29:14:c2:b0:
74:2f:37:ea:f3:e1:13:d6:ef:87:fd:74:f7:ec:43:d2:6a:ab:
6a:47:e6:7c:fd:e1:93:ed:81:ca:f0:ba:42:f5:95:6b:7a:bd:
ba:e1:bd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:52:46 2025 by rpki-client