Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39362e302f32322d3234203d3e203631373236.roa
File: 3133312e37322e39362e302f32322d3234203d3e203631373236.roa (raw, json)
Hash identifier: E0/5Th/E0SqC8RcqthB2hgqzJ0OojZADIZTfEpTv6rg=
Subject key identifier: D9:C9:20:D8:2C:B3:8C:67:9D:06:E1:21:BA:13:B9:59:CE:0B:A0:F4
Certificate issuer: /CN=A8C004C19E02B376E4BE3D4C7FAC47C17F858EDA
Certificate serial: 571ACCB3C9BFFA2F57C059CF5A42440E94CE83E6
Authority key identifier: A8:C0:04:C1:9E:02:B3:76:E4:BE:3D:4C:7F:AC:47:C1:7F:85:8E:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8C004C19E02B376E4BE3D4C7FAC47C17F858EDA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39362e302f32322d3234203d3e203631373236.roa
Signing time: Mon 01 Apr 2024 12:13:12 +0000
ROA not before: Mon 01 Apr 2024 12:08:12 +0000
ROA not after: Mon 31 Mar 2025 12:13:12 +0000
asID: 61726
IP address blocks: 131.72.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1a:cc:b3:c9:bf:fa:2f:57:c0:59:cf:5a:42:44:0e:94:ce:83:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8C004C19E02B376E4BE3D4C7FAC47C17F858EDA
Validity
Not Before: Apr 1 12:08:12 2024 GMT
Not After : Mar 31 12:13:12 2025 GMT
Subject: CN=D9C920D82CB38C679D06E121BA13B959CE0BA0F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cb:9c:f3:68:49:fa:9f:b1:af:0c:4a:8c:ba:
04:47:c8:18:4d:24:84:30:55:6b:9e:a8:60:f7:47:
63:a3:54:95:ea:95:3d:37:24:56:b1:09:38:a7:bd:
55:58:4a:c8:55:68:f1:60:00:e7:6f:b4:f7:ba:c3:
ed:b7:d5:52:35:49:08:70:7b:16:f9:75:93:f1:f8:
1d:6e:43:b0:f5:18:72:c1:ad:df:31:ef:20:be:8b:
86:25:a0:8b:ac:bb:5c:73:c4:6a:19:70:48:8c:fe:
cc:80:d0:d4:bf:cb:14:0a:33:47:90:60:51:fd:07:
a2:0c:f3:b8:ab:fc:7c:23:50:41:aa:9e:88:a1:37:
fb:c0:bc:2f:bb:4b:82:d5:3b:cd:47:f0:c2:77:e1:
3b:ff:47:32:01:e1:09:7c:5b:64:bb:3e:f4:92:06:
b3:ac:18:ab:45:1f:e4:7d:47:e1:9b:18:ca:b7:e6:
16:fd:95:51:ee:a2:5a:d2:53:6a:89:88:06:50:d7:
b5:8f:88:a8:2e:f7:bc:4d:6e:ae:5a:82:1d:c1:75:
51:fc:5c:50:05:7b:40:50:f6:a5:58:95:53:c1:b9:
2a:b7:0a:b5:ec:05:52:52:b9:40:87:e3:2e:d6:da:
fb:79:87:62:40:98:54:81:98:3d:b1:0f:ab:bb:72:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C9:20:D8:2C:B3:8C:67:9D:06:E1:21:BA:13:B9:59:CE:0B:A0:F4
X509v3 Authority Key Identifier:
keyid:A8:C0:04:C1:9E:02:B3:76:E4:BE:3D:4C:7F:AC:47:C1:7F:85:8E:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/A8C004C19E02B376E4BE3D4C7FAC47C17F858EDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8C004C19E02B376E4BE3D4C7FAC47C17F858EDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39362e302f32322d3234203d3e203631373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.96.0/22
Signature Algorithm: sha256WithRSAEncryption
36:96:e2:f7:4e:4b:9f:18:e4:90:b6:fd:d0:23:a1:bb:5e:06:
eb:ab:3c:11:c0:74:77:3b:29:a5:70:fc:18:64:71:ff:93:7f:
8e:e4:7f:c4:8a:b4:75:f0:e2:9d:dc:df:dd:6a:3c:ce:1e:03:
5c:d3:52:29:df:73:3d:49:9f:59:ee:b7:60:b7:f4:20:62:94:
cc:0f:d7:7b:cf:b5:ac:bf:13:fa:84:33:d7:80:a0:e1:1d:2b:
26:4c:20:fe:88:de:34:d6:d8:7d:70:d4:52:46:de:e7:6f:6b:
f7:28:de:7a:a0:0d:dd:75:50:df:a3:5f:6f:d8:bb:05:1f:95:
03:6d:04:e7:76:49:f7:90:b7:6d:5b:57:c6:96:9a:b2:6a:a9:
98:59:7a:e4:0e:6d:3b:7a:c0:ce:d3:28:04:09:03:3e:74:e9:
d6:c6:86:8d:11:c5:49:a5:f8:58:c4:f6:fb:4c:09:ec:bb:b9:
77:4a:46:6f:65:bb:00:72:7d:f5:46:03:74:42:78:fa:ee:dc:
ca:d9:9d:4a:13:54:80:6f:7b:a1:ab:3f:0a:cd:47:a1:3d:d2:
68:08:79:a0:e4:b7:8c:fc:4f:84:30:b5:37:0f:90:2c:3f:d6:
51:a7:d0:f6:11:28:3d:cf:bd:c8:31:ed:e1:82:a6:74:ad:90:
57:40:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org