Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa
File: 3133312e3139362e37362e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: MKfrBMhMwxwibNHmKJ2uJHLBdoIHLmruQLsNVUYddUI=
Subject key identifier: F4:1D:EF:C7:C8:5E:39:F4:2C:A4:C2:B3:90:9D:4B:BF:52:D9:6B:0A
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 3281757960EE4DB0C30E309AC511470D35672ED3
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 28270
IP address blocks: 131.196.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:81:75:79:60:ee:4d:b0:c3:0e:30:9a:c5:11:47:0d:35:67:2e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=F41DEFC7C85E39F42CA4C2B3909D4BBF52D96B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:fb:7e:9a:38:94:51:17:4a:1c:52:fa:c8:
c8:2a:7b:7f:23:29:a3:8f:77:df:80:d9:4e:fd:6a:
79:9b:76:f8:87:c5:21:00:92:14:b6:2b:1b:17:3f:
c3:d4:ab:75:5d:f9:f9:5a:19:38:32:89:1d:a3:f5:
77:64:41:a6:11:e7:8b:60:25:0c:9c:a2:46:55:72:
0d:16:d7:13:48:fc:20:6d:a8:35:6a:e1:7a:8a:60:
89:4a:30:41:56:ad:c5:c0:30:b6:8a:9f:bd:71:9f:
8c:d0:9e:aa:fb:03:64:3c:ca:e1:05:b2:0b:6d:91:
ee:fa:65:f6:4f:c8:97:45:db:8c:89:52:00:62:2f:
c9:2f:1f:0c:12:b9:9c:b8:16:2c:32:58:dc:ad:b7:
01:07:22:00:87:d0:c7:62:c0:c0:97:65:67:02:46:
5f:f8:a4:19:53:e4:cf:44:05:22:0a:48:7d:5e:9c:
72:64:cf:2e:29:1a:42:89:ae:35:1a:21:f0:29:b1:
7f:1b:2c:1f:c8:7c:14:39:4e:c1:cf:99:61:b0:fc:
ae:c3:3b:bf:f5:50:e5:25:4d:36:ac:49:4b:0b:cc:
92:fd:c0:0c:37:57:fd:4f:69:81:4d:e4:d7:53:cc:
05:45:7b:d0:1c:62:c8:0e:e0:70:fb:50:b7:f7:0c:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:EF:C7:C8:5E:39:F4:2C:A4:C2:B3:90:9D:4B:BF:52:D9:6B:0A
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.76.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:4b:d5:4e:ea:3c:2b:9f:e7:bf:f2:e2:0e:b6:7a:ac:bc:da:
87:39:2a:06:30:5f:59:28:c8:42:f8:52:d7:1c:bb:25:f8:6c:
be:d5:f6:ea:e9:9a:5a:fe:4d:a9:80:be:98:22:5e:72:d6:b3:
17:6d:83:f2:4c:f3:89:a6:55:14:bd:61:8f:00:13:ef:7e:7d:
04:f7:16:7d:0b:4d:81:fa:c1:76:2b:f0:2a:04:2e:14:a6:44:
83:10:5b:fd:45:92:94:76:26:8c:2b:f7:cc:34:43:f5:b9:11:
e5:e0:20:30:fc:5e:d3:d1:ef:94:2c:d6:6c:60:cd:99:ab:4a:
96:da:e1:69:55:e1:fd:a2:80:22:4a:d2:42:27:72:b3:0c:c4:
1b:02:56:a6:1b:33:f9:9c:c7:fb:b7:99:09:be:53:38:ab:d4:
e5:f1:47:ca:76:4f:9d:ce:a2:68:c6:a2:c3:a2:ce:d1:14:15:
03:f3:3d:4c:16:65:23:92:26:a7:89:97:04:5d:ab:75:90:a8:
4e:58:0b:e8:74:30:fd:c1:01:9f:dd:8e:d5:58:c6:10:48:d8:
f1:8a:c1:26:1d:2f:b4:3e:cc:71:c3:99:0f:18:af:b7:6a:97:
5d:c6:47:b9:3a:55:f8:48:56:4c:0d:82:b3:61:d6:e2:6c:69:
20:20:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:48:07 2025 by rpki-client