Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3137392e3130382e38302e302f32312d3234203d3e203533313538.roa
File: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (raw, json)
Hash identifier: rYYDvAwyGv1TrwvlF6zZdkFRQwmC93kFOfjgITu2fs0=
Subject key identifier: 46:0D:F1:82:50:30:60:BD:6D:EE:8D:2D:4F:AA:E1:50:DA:3E:7E:04
Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial: 159B930B750495B7BCF5A49C22521B919AB1B2D7
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3137392e3130382e38302e302f32312d3234203d3e203533313538.roa
Signing time: Fri 20 Dec 2024 14:57:54 +0000
ROA not before: Fri 20 Dec 2024 14:52:54 +0000
ROA not after: Fri 19 Dec 2025 14:57:54 +0000
asID: 53158
IP address blocks: 179.108.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9b:93:0b:75:04:95:b7:bc:f5:a4:9c:22:52:1b:91:9a:b1:b2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Validity
Not Before: Dec 20 14:52:54 2024 GMT
Not After : Dec 19 14:57:54 2025 GMT
Subject: CN=460DF182503060BD6DEE8D2D4FAAE150DA3E7E04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ba:b7:ac:09:32:ec:fa:a0:fb:e1:7e:43:15:
17:de:a3:50:e5:3b:d1:80:8f:f1:5f:0d:ec:d4:56:
75:82:71:fd:e4:a2:88:b1:09:38:9e:47:2a:54:ff:
c6:56:4b:44:3f:7a:f9:85:6e:f1:fb:b8:c0:9b:55:
64:17:f9:2a:c1:e0:27:18:91:27:18:5a:31:9a:80:
bf:f1:b3:f7:af:05:da:01:00:3b:74:fb:d1:06:cb:
c8:db:32:b3:b0:a2:36:f7:11:2b:1c:44:57:31:1c:
f8:3b:63:1a:a3:71:95:e1:b6:8d:af:f2:7f:db:92:
2c:31:20:5f:30:e2:53:8d:5f:9d:1e:e9:4f:b8:b6:
e4:0e:c6:5c:8c:dc:ee:4c:37:99:ce:4f:ae:26:3a:
2d:4f:3b:30:f9:37:1e:3e:27:c9:86:69:21:01:74:
bd:ac:32:75:99:e6:61:cd:ae:1a:ce:e0:0f:8b:75:
b4:83:98:0b:5b:d3:1c:7f:a5:78:ff:c2:4c:85:a4:
25:ba:3c:41:f5:34:86:a3:0b:3f:ec:a8:94:ff:90:
17:c8:27:2c:99:db:96:3f:c9:76:2f:32:f4:c7:db:
1e:9b:94:62:fb:b8:97:97:9a:bf:82:91:b6:74:57:
8a:75:1d:18:73:44:c8:57:53:d2:8b:16:b3:0a:67:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0D:F1:82:50:30:60:BD:6D:EE:8D:2D:4F:AA:E1:50:DA:3E:7E:04
X509v3 Authority Key Identifier:
keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3137392e3130382e38302e302f32312d3234203d3e203533313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.108.80.0/21
Signature Algorithm: sha256WithRSAEncryption
58:95:37:9e:a5:fb:3c:8f:1a:ad:09:e7:36:19:96:a7:63:4c:
94:17:bc:d7:27:0f:8b:99:e9:8b:ce:6b:33:62:68:8f:81:68:
4f:32:e0:18:e4:cf:bc:22:b7:88:f5:a9:d8:95:a1:05:9e:b3:
1f:53:ea:ee:d2:b9:2b:a2:cc:45:7c:99:eb:f9:96:69:15:7b:
e1:63:51:ed:d9:60:ac:b0:59:9d:f0:48:bb:13:45:8c:7f:18:
be:5d:a1:00:ab:a4:57:24:f0:05:bb:03:b9:20:88:1c:fe:37:
2b:8e:64:8f:a5:72:33:71:3e:10:e4:27:1b:71:ed:b6:7b:9f:
1c:ee:82:86:ab:09:49:2b:81:19:f2:61:98:75:7e:73:7b:7e:
a0:a4:a8:0f:51:0d:23:c0:81:16:8c:c2:bd:14:5c:dc:95:de:
c7:f7:29:e7:f5:4e:ff:9e:d2:82:1f:b1:de:84:60:ff:b8:d0:
bc:e4:30:94:67:d1:03:24:44:3a:5d:01:b4:fd:2e:c9:42:4e:
3a:09:23:07:19:9d:2f:58:d1:66:bf:f2:cb:12:75:31:6e:a8:
4b:c4:91:26:4f:52:96:ec:6e:27:5d:87:79:59:dc:4b:22:e3:
f0:68:c1:ec:da:29:f0:ed:a7:ad:c6:8c:f2:98:99:6f:e1:04:
8d:cf:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:24 2025 by rpki-client