Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e203238323730.roa
File: 3133312e3232312e36382e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: kck8jnAVlFi3BE8jM7YP2BvwAtlaEqSCaXKepu7gmMY=
Subject key identifier: F1:49:EE:09:24:8F:8C:44:5C:07:A9:F0:43:6D:CA:64:71:7E:7F:6D
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 155D35FE9FAD61363D0FF96F98D04AEA7438E438
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:16 +0000
ROA not before: Thu 07 Nov 2024 20:35:16 +0000
ROA not after: Thu 06 Nov 2025 20:40:16 +0000
asID: 28270
IP address blocks: 131.221.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:5d:35:fe:9f:ad:61:36:3d:0f:f9:6f:98:d0:4a:ea:74:38:e4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:16 2024 GMT
Not After : Nov 6 20:40:16 2025 GMT
Subject: CN=F149EE09248F8C445C07A9F0436DCA64717E7F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:61:d5:4c:bb:54:90:60:61:a7:20:8b:aa:
b3:30:15:82:7f:3b:2d:f9:36:01:55:b2:a5:c0:92:
de:a2:9a:65:28:f6:f1:1c:a4:39:c0:24:fe:96:15:
29:0b:2a:4c:6f:cd:58:bb:e5:9b:50:ee:52:d2:e5:
cd:92:a4:83:12:d2:c2:02:20:a0:3d:b4:de:62:2a:
e6:00:d5:f7:09:d7:02:aa:6e:e9:99:df:d7:b4:78:
c9:4e:4d:1d:53:15:02:31:06:09:70:f8:c2:6d:c6:
11:18:6f:0a:a7:70:ac:7f:9d:8b:97:76:2c:56:ba:
64:f8:f4:40:00:af:48:c0:fb:04:a2:eb:28:a1:dd:
03:63:97:22:b6:e6:0d:e5:32:51:a4:5d:14:71:c2:
82:5f:39:c1:63:91:2b:a7:c8:ca:30:78:c0:c1:46:
79:fa:60:8f:21:58:5a:0b:7c:51:fc:5f:6c:e6:11:
75:e7:f0:51:05:f2:44:96:de:a0:ae:ef:fd:bb:41:
9c:61:03:75:ce:4f:cc:cd:50:50:13:21:63:79:05:
fb:90:1d:ef:dc:cb:36:18:83:e0:04:b3:19:71:1e:
8f:fc:41:98:96:c0:e5:e6:c8:0a:97:07:95:a5:39:
0b:d7:3a:e6:2d:de:6a:e2:42:61:3e:5f:1f:8f:25:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:49:EE:09:24:8F:8C:44:5C:07:A9:F0:43:6D:CA:64:71:7E:7F:6D
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:7b:0f:2e:d7:8d:81:c6:d5:20:4c:d7:94:df:4a:50:96:85:
e0:97:f3:fd:b9:d0:86:99:70:c3:54:b0:6d:51:76:ca:3f:c9:
89:38:5f:11:c2:c6:80:c5:31:89:53:e3:8a:16:8b:20:d0:f6:
d1:fb:3b:a8:b8:ef:3e:69:51:22:7a:ef:cb:9b:8b:8d:70:16:
54:e2:c6:7b:6e:70:0e:ce:90:05:09:20:b9:25:07:7c:66:fa:
a7:0c:20:22:7d:8c:cc:a0:b1:58:41:4d:8e:98:4a:58:76:48:
91:53:ed:3b:27:9f:05:cd:d5:08:b5:9a:0c:fa:41:db:11:0f:
d3:6f:7e:cc:88:16:d3:aa:5b:fa:1e:af:29:82:df:67:77:6f:
28:c3:d1:61:94:1e:27:d5:77:eb:4a:e5:f6:a3:4c:21:7c:43:
d2:52:72:54:6e:61:a7:13:4f:aa:fa:54:58:a9:99:72:e3:43:
b3:b3:fe:e0:0e:e0:fa:07:e5:55:85:c6:9f:89:96:fa:45:f3:
d7:ac:b3:0f:3c:14:a0:d0:dc:56:bf:02:e1:08:72:50:9b:7e:
8d:bd:b8:09:33:2f:53:71:49:4b:ec:f6:2a:43:12:39:bb:f6:
ec:4d:aa:10:d7:08:fc:3e:76:95:72:ff:90:d7:2d:ba:f2:f9:
36:2b:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:51:39 2025 by rpki-client