Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa
File: 3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa (raw, json)
Hash identifier: DnFblIX3+9i0WjN3O/+VrT2VgNgjMl6Kwkdk6xP9/pM=
Subject key identifier: EC:99:37:11:97:4D:19:BE:67:2F:C2:D9:AF:79:11:B9:AC:EF:EE:CC
Certificate issuer: /CN=7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229
Certificate serial: 68DC23A38DF9ACA458B436BDB42C6B5B2F8A17CE
Authority key identifier: 7A:7B:FD:21:EA:E2:D0:E0:F9:46:4F:A2:63:AC:6E:47:AC:D7:C2:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa
Signing time: Fri 22 Mar 2024 19:05:35 +0000
ROA not before: Fri 22 Mar 2024 19:00:35 +0000
ROA not after: Fri 21 Mar 2025 19:05:35 +0000
asID: 264404
IP address blocks: 131.161.228.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:dc:23:a3:8d:f9:ac:a4:58:b4:36:bd:b4:2c:6b:5b:2f:8a:17:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229
Validity
Not Before: Mar 22 19:00:35 2024 GMT
Not After : Mar 21 19:05:35 2025 GMT
Subject: CN=EC993711974D19BE672FC2D9AF7911B9ACEFEECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7a:96:b8:df:fa:b4:cc:23:93:df:48:f2:77:
b3:d9:f9:d8:28:a6:1b:0c:d0:fe:af:18:5e:7f:2b:
1d:7a:fd:78:be:30:8f:67:df:06:ec:b2:19:91:c1:
18:ff:be:02:af:b5:b1:59:a1:6e:e1:d2:c9:fe:02:
40:c4:98:71:d6:d7:8e:67:9c:17:dc:9c:c9:2b:87:
1a:6d:f6:70:cf:c0:00:c9:10:da:a4:3e:ab:ec:31:
73:2b:bd:40:51:4d:0e:e3:b4:53:4d:3d:05:af:41:
1b:a8:cb:69:0b:e5:9c:26:3a:23:b1:e4:23:07:09:
7b:88:d2:f1:bd:d0:3f:e5:cd:6b:f4:4c:66:d7:0e:
dd:e1:3a:c4:1d:59:41:e5:3e:1b:1d:22:e8:e8:c3:
93:39:c1:c2:d3:bb:49:18:50:ac:73:36:50:64:15:
d9:dd:15:aa:58:3c:45:77:6c:76:f0:d7:6d:73:af:
75:dc:6f:d2:57:54:0e:0b:22:cb:3b:24:8a:ae:c4:
72:db:b5:b4:75:db:01:71:95:cb:dd:47:d8:14:be:
21:2c:88:33:31:07:3d:21:78:ef:eb:52:f0:81:85:
6c:ad:81:28:28:c3:35:bd:2b:af:41:24:bf:5a:d6:
59:35:9a:74:40:80:fa:4d:9d:5c:3d:14:ec:92:5a:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:99:37:11:97:4D:19:BE:67:2F:C2:D9:AF:79:11:B9:AC:EF:EE:CC
X509v3 Authority Key Identifier:
keyid:7A:7B:FD:21:EA:E2:D0:E0:F9:46:4F:A2:63:AC:6E:47:AC:D7:C2:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.228.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:52:4a:a3:93:03:82:54:7c:d9:93:76:53:9b:6d:5a:75:2c:
74:58:b6:5b:56:4c:b1:a8:dc:a8:e5:ad:2b:c6:92:fe:53:2c:
b8:32:bc:36:b1:f7:a6:86:9c:38:ba:f5:e6:bf:13:6c:cd:91:
71:21:34:4e:b6:41:c4:f4:8e:3b:18:e5:0e:9c:0c:7e:60:7d:
74:3b:75:72:9d:9e:b9:bb:07:1f:10:30:17:c8:88:41:d7:7e:
9b:93:79:ee:d3:cd:e0:03:99:51:52:f2:01:9a:3c:84:e0:e2:
86:a5:d2:22:d8:37:ec:c9:90:2b:4d:95:c6:68:f0:91:17:90:
4c:79:47:25:96:80:13:e4:6c:af:3f:b8:43:7b:fd:30:86:02:
f2:c4:89:ab:44:c9:62:72:b0:9e:bc:6f:54:7d:f9:ad:3e:ae:
8a:ec:7d:e8:c6:e6:55:2e:b0:b2:be:29:ac:de:65:54:7a:72:
42:10:16:b9:6b:57:ba:2f:ac:96:c7:40:14:56:8b:d6:83:25:
e6:a8:8a:83:32:b7:79:00:01:c8:b4:43:68:26:3e:cd:c8:94:
8e:80:a1:ad:92:74:a7:72:5a:df:42:ec:ac:30:f6:32:03:ca:
52:88:6f:9f:28:cb:b7:dc:d4:ef:14:3d:b6:23:c8:cc:b2:ce:
36:20:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org