Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32322d3332203d3e203631373132.roa
File: 3133312e37322e34342e302f32322d3332203d3e203631373132.roa (raw, json)
Hash identifier: 43Ko1BP947k+EmXHTwSaZVE8IVfFQOeey/GbPjSvIeM=
Subject key identifier: 35:1E:2E:2D:B3:BD:40:77:4E:86:29:1C:9C:79:AB:41:98:59:4B:7E
Certificate issuer: /CN=7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D
Certificate serial: 293B5177F57C11CCDB04B9C06C41066CF4CD96EB
Authority key identifier: 7B:D5:45:6E:3A:04:8C:FE:2F:62:F6:F7:BF:D2:F0:DC:D1:F8:5B:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32322d3332203d3e203631373132.roa
Signing time: Sat 09 Mar 2024 12:39:04 +0000
ROA not before: Sat 09 Mar 2024 12:34:04 +0000
ROA not after: Sat 08 Mar 2025 12:39:04 +0000
asID: 61712
IP address blocks: 131.72.44.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3b:51:77:f5:7c:11:cc:db:04:b9:c0:6c:41:06:6c:f4:cd:96:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D
Validity
Not Before: Mar 9 12:34:04 2024 GMT
Not After : Mar 8 12:39:04 2025 GMT
Subject: CN=351E2E2DB3BD40774E86291C9C79AB4198594B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:e1:50:5f:1c:2c:74:55:b9:0f:aa:eb:a7:
24:a7:28:da:5a:57:be:3a:f4:3b:bd:94:2a:83:98:
bc:ed:fb:97:6c:89:33:ae:89:13:a2:a7:86:d8:12:
24:34:9a:9a:f8:18:4f:df:be:7b:b3:cd:d6:e9:44:
f3:33:bd:b7:79:cc:b9:b7:b7:7d:c6:dd:7a:e5:90:
a0:f4:6c:95:25:8e:03:15:a5:3d:14:22:bf:76:82:
3e:16:b8:47:ec:73:83:67:5e:d8:b8:c0:fc:94:4b:
7c:da:08:d5:b8:8e:ab:f5:af:85:ea:b0:71:a4:56:
e8:16:11:a0:e0:3d:ef:2d:2b:1e:f8:09:06:7c:ac:
0b:3c:e0:ca:cd:5b:bb:eb:ae:f9:67:0f:fe:fc:24:
18:38:2e:01:1f:e4:b8:71:7a:9a:52:0b:17:8a:10:
fe:71:4b:13:37:78:f6:60:27:54:97:cb:ca:41:25:
23:ce:f2:8f:6e:5a:f4:cb:fa:a8:45:b4:0c:8d:5d:
5b:69:f5:c9:13:76:1b:d4:94:36:c9:1a:e1:42:25:
a2:d7:b2:f9:09:3d:6f:8b:a2:46:4f:fd:1f:48:dd:
d0:9e:97:85:ee:7b:cb:cb:5b:14:79:e4:23:6b:ef:
f4:17:6c:01:81:51:57:a8:a5:d3:ed:51:34:cd:6b:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1E:2E:2D:B3:BD:40:77:4E:86:29:1C:9C:79:AB:41:98:59:4B:7E
X509v3 Authority Key Identifier:
keyid:7B:D5:45:6E:3A:04:8C:FE:2F:62:F6:F7:BF:D2:F0:DC:D1:F8:5B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32322d3332203d3e203631373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.44.0/22
Signature Algorithm: sha256WithRSAEncryption
35:a0:25:a3:57:43:87:16:ce:64:94:3f:9e:c4:bc:ae:2a:77:
59:98:ec:af:8e:31:e5:43:8d:d2:db:ff:5b:b7:a0:4f:58:7e:
58:12:25:22:f0:d9:0c:ea:73:40:21:0b:c5:a5:22:8f:25:0f:
44:7f:ec:11:4c:41:8b:92:11:8c:79:34:0b:4b:9d:d2:99:3a:
11:70:54:7a:b7:76:8c:4d:a5:f5:93:dd:20:7d:0f:8f:ec:3b:
f8:b0:ed:76:31:c9:7c:34:f8:95:ef:5e:77:53:a1:67:15:fd:
cb:3c:3a:f0:37:d2:ab:a3:bd:69:80:92:8f:0f:31:a6:ae:ae:
c5:1a:6b:b9:e3:a0:23:e2:e3:00:3a:82:b9:b7:84:b3:1c:33:
47:45:ef:4a:9f:32:ce:92:1f:e0:44:66:1a:65:89:02:cc:4a:
a4:a3:89:1d:87:65:5e:02:63:be:ef:e7:b0:f1:d8:57:2c:00:
22:40:90:83:d7:4f:b8:2e:51:0d:1a:f8:4a:82:f3:2a:51:fb:
0a:82:3e:f9:66:19:ed:d7:71:27:51:9b:67:cc:a5:72:a6:5b:
d8:d4:c2:b5:50:0a:a3:c6:1e:7d:62:5f:32:a3:0e:fe:ad:70:
46:8d:ee:8d:d5:35:2d:e6:7f:7e:66:95:6f:b0:c9:19:1e:56:
8a:08:21:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org