Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3133312e3235352e3132342e302f32322d3234203d3e20323633323937.roa
File: 3133312e3235352e3132342e302f32322d3234203d3e20323633323937.roa (raw, json)
Hash identifier: 6CzUNCOWSnx2MpFcAuh2Fzcl1nPxQkOZ4sf2FOGbjfE=
Subject key identifier: 1A:96:20:4E:01:51:2C:B9:2B:7B:3C:D3:F7:A7:D7:2E:D8:7C:15:20
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 40F3E88913C9DDCB9BDE1F7944FEC7BFA18B634E
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3133312e3235352e3132342e302f32322d3234203d3e20323633323937.roa
Signing time: Fri 03 May 2024 21:52:17 +0000
ROA not before: Fri 03 May 2024 21:47:17 +0000
ROA not after: Fri 02 May 2025 21:52:17 +0000
asID: 263297
IP address blocks: 131.255.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f3:e8:89:13:c9:dd:cb:9b:de:1f:79:44:fe:c7:bf:a1:8b:63:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:47:17 2024 GMT
Not After : May 2 21:52:17 2025 GMT
Subject: CN=1A96204E01512CB92B7B3CD3F7A7D72ED87C1520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:c0:5d:b2:21:54:92:7c:28:af:2c:c8:06:
b2:a8:b3:ae:d7:f2:c8:c0:0c:01:fd:e4:d1:6a:2f:
82:9e:1d:9b:a5:38:45:e1:af:48:17:ad:71:9c:4f:
fe:67:3e:ce:1d:23:57:62:0d:2b:aa:c0:99:0e:9d:
d2:53:a6:94:7c:3e:e4:95:a5:64:f2:a2:f0:db:2d:
cf:b0:19:46:86:f0:4e:d9:83:b1:b4:e7:52:1e:47:
6b:22:64:20:05:6b:ce:67:22:54:13:29:c3:c8:a6:
34:03:3d:3f:6d:2a:1c:58:5f:3a:47:bb:97:e5:89:
b8:32:58:a7:20:d4:bf:a1:28:fe:01:d4:ec:77:d1:
a0:2e:69:e8:0e:74:13:f4:c1:5b:94:59:73:ba:0a:
db:72:f7:8d:d7:6b:86:26:a6:6e:0e:ff:21:fc:c9:
fd:4f:a9:8d:d5:6d:57:f4:a8:c7:2b:e7:a6:4b:97:
e2:06:54:0b:19:26:58:99:6e:38:7a:1f:eb:63:c3:
9e:0d:62:d4:90:ce:18:fb:e2:de:bb:b6:f8:b9:22:
ce:8b:6e:42:be:a4:76:46:c9:f8:95:ef:78:17:ba:
f9:f4:43:db:26:e9:a3:52:c2:5b:a6:27:c8:8e:70:
16:12:52:6c:aa:2d:88:70:03:7a:1e:da:f5:57:62:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:20:4E:01:51:2C:B9:2B:7B:3C:D3:F7:A7:D7:2E:D8:7C:15:20
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3133312e3235352e3132342e302f32322d3234203d3e20323633323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.124.0/22
Signature Algorithm: sha256WithRSAEncryption
41:d4:87:25:d5:68:a6:46:5f:ce:56:ce:79:8c:3e:7c:a0:14:
d0:44:01:1b:0a:ee:fc:c4:0d:7a:a3:dc:02:51:d1:26:8c:4a:
b6:0c:31:77:e8:8f:8b:3d:fa:94:7f:0b:01:fe:bf:cd:55:56:
ad:2d:1e:35:a8:d8:5b:98:25:25:15:56:e6:d2:59:3c:0a:71:
b4:e0:f6:61:cb:68:75:72:70:e2:d7:96:4c:3f:4b:65:df:66:
13:97:e5:31:4b:e5:03:66:d6:ad:b7:6b:b2:90:65:7c:52:63:
46:68:14:16:fc:49:5b:8b:43:60:2c:49:f0:dd:b8:b1:15:e7:
46:32:16:ff:56:4b:b4:40:f6:5d:ad:6e:cb:a6:63:6b:61:9f:
65:87:4e:d4:2f:30:a0:72:d8:9f:7d:55:61:ac:66:3e:98:bd:
c5:71:2a:24:7d:33:e9:9c:9a:19:f7:55:52:aa:61:66:3f:fd:
e8:e4:f4:99:a3:53:ca:51:39:29:0b:0c:af:26:58:51:4b:1c:
d5:ff:1c:ed:0c:ce:40:8d:65:37:bf:e6:1b:df:a1:d1:b6:ea:
b2:ae:0d:43:5e:28:1a:b7:47:c1:04:20:8d:93:3f:4b:f7:e0:
8d:f9:5a:4f:98:59:1f:36:25:03:d3:90:f4:8b:6b:39:b8:57:
94:2e:fc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:26:25 2025 by rpki-client