Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136382e302f32342d3234203d3e20323634343337.roa
File: 3133312e3232312e3136382e302f32342d3234203d3e20323634343337.roa (raw, json)
Hash identifier: 5LuosYPErgvlOpkrtZAxJZiHzv6i8uCR5sxy6dc3RNM=
Subject key identifier: 88:5E:2E:12:1C:95:8E:DE:B1:A0:28:56:CE:FA:0C:91:21:C0:AA:0F
Certificate issuer: /CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Certificate serial: 108FA5147C6A97D81EE04DA4C28014003339C45F
Authority key identifier: 4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136382e302f32342d3234203d3e20323634343337.roa
Signing time: Thu 21 Sep 2023 11:25:34 +0000
ROA not before: Thu 21 Sep 2023 11:20:34 +0000
ROA not after: Thu 19 Sep 2024 11:25:34 +0000
asID: 264437
IP address blocks: 131.221.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:8f:a5:14:7c:6a:97:d8:1e:e0:4d:a4:c2:80:14:00:33:39:c4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Validity
Not Before: Sep 21 11:20:34 2023 GMT
Not After : Sep 19 11:25:34 2024 GMT
Subject: CN=885E2E121C958EDEB1A02856CEFA0C9121C0AA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:8e:52:f1:e1:a3:6f:96:e4:df:c9:3f:fd:
d4:a1:73:bd:ca:d0:14:8d:cd:9d:c5:64:a4:e8:e9:
69:d8:23:75:02:36:5b:9b:ea:3f:cb:f1:04:49:71:
8c:a2:48:b2:6f:ad:f6:4c:95:dd:9c:4e:0a:d5:02:
b2:25:ae:07:86:f9:cc:70:72:9d:0e:04:6a:b6:31:
47:5a:56:bf:16:3a:45:ae:40:b1:1f:06:a6:a9:61:
ea:d8:a5:70:f1:e6:e4:ad:8f:e0:c9:5c:08:c7:e7:
a2:4e:e7:35:1c:3e:29:88:4b:a2:71:20:b2:78:85:
e7:3e:33:03:62:5e:25:aa:a1:b7:dd:dd:7e:32:9d:
e8:2d:3b:be:4b:5c:8b:f1:10:25:91:af:3f:63:f3:
86:c1:a9:91:ed:dc:d3:eb:4b:c4:eb:b5:2b:a3:5c:
68:8a:d9:56:c8:c5:91:8a:04:6a:78:19:6b:37:cc:
35:e1:ab:93:21:e1:f9:39:7a:86:d3:a3:41:a5:bf:
8b:01:c6:32:eb:fc:08:9b:c8:2c:cd:8f:ae:0a:e8:
e6:8c:63:46:71:9d:b7:53:91:04:41:c7:b6:a5:bf:
82:b8:34:ad:be:56:10:d4:f2:cd:7d:f3:0b:be:3d:
92:a4:ae:3c:c4:56:0f:e7:dd:9b:67:a4:78:43:6c:
1b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5E:2E:12:1C:95:8E:DE:B1:A0:28:56:CE:FA:0C:91:21:C0:AA:0F
X509v3 Authority Key Identifier:
keyid:4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136382e302f32342d3234203d3e20323634343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.168.0/24
Signature Algorithm: sha256WithRSAEncryption
26:18:c8:5c:fe:4a:79:55:de:fe:ba:ef:cb:4b:bf:4c:f6:4b:
5f:b6:42:08:c1:eb:94:68:f3:65:f1:4f:f7:3c:f1:cc:9f:38:
dd:c3:e1:4f:fb:a2:ec:48:3c:85:95:a7:aa:3f:88:f5:e0:e3:
f2:97:20:c7:aa:b4:84:4e:1f:c8:7a:03:e6:e5:23:e5:b3:a8:
c3:72:9e:15:6e:60:ef:0f:12:eb:02:da:31:63:88:f5:1d:61:
a7:92:2f:65:c4:ad:9a:80:20:f7:9e:8a:62:04:6c:9b:38:83:
1c:ae:01:2b:01:06:aa:f8:03:1e:42:ac:af:c0:2d:3c:4c:2d:
78:ed:c6:93:9e:6b:f7:7b:12:be:39:76:b1:a1:a1:f5:f7:52:
d0:a8:49:cc:c2:2f:6a:d7:e9:ba:fa:81:13:e8:a1:71:3d:e0:
ec:0b:ea:9c:e7:65:0f:3a:4e:aa:a9:6f:9d:57:2c:e6:2f:7a:
57:2a:5f:b2:24:d4:86:35:1a:44:20:8c:59:c9:64:3a:bd:fe:
c4:c7:67:4a:7d:e6:bb:d3:e0:a6:20:6b:52:af:41:64:b9:3a:
cf:4d:52:95:34:ed:e0:76:79:46:1a:ff:4b:ae:e7:97:23:7d:
e0:38:b9:8d:5f:19:a8:b9:17:36:d5:a9:f1:31:db:84:d3:b7:
55:7a:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:24 2025 by rpki-client