Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32332d3233203d3e20323633363034.roa
File: 3137372e37312e38382e302f32332d3233203d3e20323633363034.roa (raw, json)
Hash identifier: iggzNMqXaD/nAgXmNrV675taAV1TaQDqUJh+OeyHvLc=
Subject key identifier: 46:35:F4:47:36:11:E5:EE:EF:A7:35:17:4E:AA:B1:9C:24:81:71:1C
Certificate issuer: /CN=B5416A429171B4A07910A6737C6538DE6D5E9EB7
Certificate serial: 3CE0DFE3327E5D0D4C2DB9727A961D449772BDF3
Authority key identifier: B5:41:6A:42:91:71:B4:A0:79:10:A6:73:7C:65:38:DE:6D:5E:9E:B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5416A429171B4A07910A6737C6538DE6D5E9EB7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32332d3233203d3e20323633363034.roa
Signing time: Wed 30 Apr 2025 17:43:28 +0000
ROA not before: Wed 30 Apr 2025 17:38:28 +0000
ROA not after: Wed 29 Apr 2026 17:43:28 +0000
asID: 263604
IP address blocks: 177.71.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e0:df:e3:32:7e:5d:0d:4c:2d:b9:72:7a:96:1d:44:97:72:bd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5416A429171B4A07910A6737C6538DE6D5E9EB7
Validity
Not Before: Apr 30 17:38:28 2025 GMT
Not After : Apr 29 17:43:28 2026 GMT
Subject: CN=4635F4473611E5EEEFA735174EAAB19C2481711C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:7c:b5:7f:c0:00:0a:2b:ad:6b:51:16:1b:
33:b2:e8:4d:03:14:5d:eb:dd:54:34:8c:42:24:7f:
57:08:75:55:5e:d0:24:9b:47:24:d5:a2:00:d3:7e:
e7:e5:e4:f0:7e:ca:17:11:5e:28:4d:93:32:48:8b:
66:9b:fb:b1:d0:76:7f:34:fd:7f:52:59:22:50:af:
79:d8:76:9b:b7:6c:33:41:5a:af:30:0b:49:c9:34:
75:31:1d:a6:a2:91:a0:e9:3c:85:66:bd:f3:77:ee:
14:0b:f2:84:09:6f:7c:ac:a6:6e:81:24:eb:20:d0:
43:c0:72:e6:52:0a:0b:e7:39:62:d9:f7:e5:e5:32:
de:12:b9:13:fd:4c:8b:5d:7a:cf:82:80:84:bb:5d:
fc:fe:2e:61:99:a1:4d:19:d6:e4:7f:14:e3:f8:e5:
98:40:06:5c:cd:10:d6:99:bd:55:b2:c9:52:31:e7:
a4:d3:a9:2d:bd:19:eb:30:cd:81:f8:aa:f8:c7:71:
ab:31:4a:49:08:6f:18:a1:9e:5d:1c:75:11:2e:49:
80:7f:af:be:3b:75:d0:0b:d8:5d:c6:c4:71:b2:b7:
bd:89:ed:c2:bf:21:38:b4:ee:64:a8:77:18:be:81:
23:bc:a0:d9:03:2f:80:b0:e9:1a:d7:3d:b4:e3:49:
b8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:35:F4:47:36:11:E5:EE:EF:A7:35:17:4E:AA:B1:9C:24:81:71:1C
X509v3 Authority Key Identifier:
keyid:B5:41:6A:42:91:71:B4:A0:79:10:A6:73:7C:65:38:DE:6D:5E:9E:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/B5416A429171B4A07910A6737C6538DE6D5E9EB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5416A429171B4A07910A6737C6538DE6D5E9EB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32332d3233203d3e20323633363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.71.88.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:a6:e4:5b:0a:e1:4d:cb:a6:42:46:71:10:93:be:7f:c8:ca:
f3:a1:22:b0:5a:71:78:6b:86:6c:57:b6:89:31:be:15:47:4a:
39:3d:a4:54:90:b9:12:e9:b6:64:6a:c9:26:a4:ba:6d:e3:35:
e4:c8:a8:04:c2:32:da:e0:4e:f7:74:02:a4:b1:f1:23:51:92:
63:5a:a4:b4:f6:da:12:5e:0b:00:b0:12:5a:02:fc:c7:0a:6d:
8e:c2:c1:e3:1a:3a:fc:6c:7b:bf:5b:ac:d5:88:77:2f:04:fc:
35:c4:da:70:e3:32:91:12:b6:7a:8a:3b:cc:7d:ab:b8:54:63:
47:9c:00:9f:1d:e5:f0:57:56:fa:f1:0b:33:43:24:36:8a:9c:
1e:c1:2a:98:10:74:2d:a8:84:26:d6:bc:b2:20:70:c8:77:85:
af:b4:3d:bd:59:66:b3:a0:b5:75:64:22:ab:93:a8:34:ba:dd:
7d:3f:87:49:5b:c0:02:ae:df:09:f7:cc:19:c3:bf:2d:82:eb:
43:09:4e:e2:ae:e4:f2:12:a3:31:bf:a6:c5:70:10:11:9e:2c:
26:ff:fd:3b:a4:02:3d:28:e5:45:e1:a2:62:7f:41:df:18:12:
6e:84:81:05:27:01:7d:3a:03:26:86:f3:4a:96:a7:94:f7:82:
c7:a5:c8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:53:17 2025 by rpki-client