Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS28241.roa
File: AS28241.roa (raw, json)
Hash identifier: PniwsbqgBsmtKFRc/5aKNPEmWvW2zGrmhqSRKXuGzxo=
Subject key identifier: 03:3E:03:FB:F1:ED:98:48:72:9A:B0:23:31:77:DC:75:50:FB:FF:70
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 0C8876E44F1744EF92A13C3018C02E6DA30B2C0D
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS28241.roa
Signing time: Fri 03 May 2024 22:02:14 +0000
ROA not before: Fri 03 May 2024 21:57:14 +0000
ROA not after: Fri 02 May 2025 22:02:14 +0000
asID: 28241
IP address blocks: 177.70.80.0/20 maxlen: 24
187.0.176.0/20 maxlen: 24
2804:5d0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:88:76:e4:4f:17:44:ef:92:a1:3c:30:18:c0:2e:6d:a3:0b:2c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:14 2024 GMT
Not After : May 2 22:02:14 2025 GMT
Subject: CN=033E03FBF1ED9848729AB0233177DC7550FBFF70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:db:7a:91:22:cd:58:08:1a:2b:ba:65:71:
8d:75:5b:7f:f0:27:f1:32:12:b6:d4:9a:5c:2e:21:
1b:9c:89:8f:16:60:50:61:ea:d1:8b:3f:18:55:21:
0e:05:a7:a9:db:e2:48:9a:cb:0b:5c:96:bb:4b:61:
56:bb:fc:41:00:1a:32:4f:99:e3:9d:bc:b0:b8:e9:
f7:0d:e6:2e:d6:cc:62:70:4f:9f:45:e5:68:96:e0:
f8:e2:46:e2:e7:7a:ce:6a:e0:a9:b3:ac:5f:e4:ec:
db:f3:6f:41:b5:ea:25:fc:bf:20:c4:23:96:e9:5b:
11:41:cb:9a:f8:de:7e:e4:04:cd:ef:8e:55:38:78:
93:61:17:40:a7:eb:5e:ad:d6:59:d8:f1:c2:b3:a4:
b2:46:7c:b6:54:3d:10:94:ee:29:e1:40:f6:3f:97:
31:a1:8f:36:27:ae:34:7c:e9:33:0b:23:6f:53:6f:
c6:1c:16:8c:0f:95:42:cd:29:3a:26:73:b2:13:df:
c6:e8:6c:d7:d7:5b:13:b7:e6:d3:cd:06:21:e7:70:
78:99:d3:c9:ca:db:07:44:6a:9a:e6:d7:12:5a:21:
91:f9:ca:d0:a5:68:e6:35:e3:55:90:8e:35:32:30:
37:58:91:0f:d1:4c:5b:c0:48:de:cb:0c:ea:0e:97:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3E:03:FB:F1:ED:98:48:72:9A:B0:23:31:77:DC:75:50:FB:FF:70
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS28241.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.70.80.0/20
187.0.176.0/20
IPv6:
2804:5d0::/32
Signature Algorithm: sha256WithRSAEncryption
a7:16:d6:dd:56:87:69:d1:9c:6f:1a:17:63:cc:c3:51:ae:f8:
03:ef:16:c7:76:92:98:02:0c:5e:49:8a:c9:60:16:0d:63:be:
a5:47:ff:92:11:28:4e:e1:04:67:d4:20:0e:b4:09:fb:95:a0:
55:3e:5e:ac:97:36:ce:e1:71:d0:dc:a6:71:fe:88:0b:11:95:
08:6a:1a:c4:b5:f5:4b:d4:15:a6:ec:78:23:87:79:e6:4c:d5:
d0:a3:86:e6:eb:88:ee:e4:4f:2d:6a:70:58:06:73:73:1b:6e:
6e:07:56:f4:ba:b9:97:f7:04:9b:e9:ef:a9:96:0f:f4:f7:ec:
49:d8:c3:c4:e7:91:30:ee:05:3b:49:68:83:32:d9:e7:47:2f:
82:c7:7f:a3:48:3a:5e:ff:7c:9e:d6:6f:7d:93:9c:24:2a:ab:
fc:a5:3d:38:88:7a:91:71:f8:96:c4:6a:37:bf:fc:42:06:d1:
9a:5c:d8:3c:61:ab:d3:94:b8:74:e5:10:bc:4b:0f:8f:f4:3b:
a0:a8:9e:e7:77:8d:82:d8:b7:66:f6:99:00:c7:9b:4d:a3:e3:
34:ba:f5:8b:73:c6:77:5f:16:c4:1d:05:fd:9c:17:15:9e:ca:
8e:cd:dd:53:6c:28:31:0f:52:04:c3:93:a6:7f:f3:a6:86:9a:
19:ad:29:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:01 2025 by rpki-client