Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
File: 3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: aazSo9JDB5UiSe398D+c46Na4IZrRCcy/KEeJZrzv30=
Subject key identifier: 74:9D:7A:22:E8:E6:79:D5:A7:7A:D0:73:60:FE:62:4C:3A:01:F9:9C
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 4401A4F4EB46BC1BC5530ABC8DFFD0FB3C38DDEE
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
Signing time: Mon 14 Oct 2024 01:49:50 +0000
ROA not before: Mon 14 Oct 2024 01:44:50 +0000
ROA not after: Mon 13 Oct 2025 01:49:50 +0000
asID: 271724
IP address blocks: 131.221.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:01:a4:f4:eb:46:bc:1b:c5:53:0a:bc:8d:ff:d0:fb:3c:38:dd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:50 2024 GMT
Not After : Oct 13 01:49:50 2025 GMT
Subject: CN=749D7A22E8E679D5A77AD07360FE624C3A01F99C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:aa:4b:a7:96:a2:9e:d3:a6:07:a3:69:8f:
b7:93:4a:47:ca:89:8a:44:a5:be:b0:aa:a5:6e:4f:
b3:1c:fc:e0:11:53:f6:88:2c:e1:53:6b:65:21:65:
fd:d5:96:aa:fc:cc:7e:27:79:67:b4:ed:de:ba:0c:
12:e4:78:53:d8:33:85:f1:b5:8f:b3:5a:e1:01:ed:
f0:50:2c:4b:6b:13:b2:fa:0e:0e:ab:cb:e2:a3:9a:
c5:22:6a:91:b9:27:e1:d3:d2:fb:e7:63:50:b1:5a:
0c:7f:13:bd:a7:b7:e2:71:02:4e:80:54:36:93:f9:
e4:52:6b:ed:0a:d2:40:ef:62:06:f0:d1:d0:26:22:
14:84:84:5e:3f:ab:e1:4f:4e:40:4b:ad:31:38:37:
d6:19:d5:3b:a7:73:e7:0c:a9:21:5e:3b:d0:75:ab:
3f:95:d5:68:d9:86:79:9e:12:14:da:fa:6a:16:88:
73:3e:4c:75:3d:e6:3c:4a:78:f8:99:83:10:29:03:
51:e7:0a:be:9c:9d:c5:40:d7:77:1f:0c:b9:eb:45:
2c:5b:d5:1c:cb:bd:4f:ee:a2:66:b7:7f:58:7b:8b:
c1:87:96:66:96:18:0f:75:2e:cf:2b:57:b1:f3:a1:
02:17:60:ac:5d:41:3b:37:ae:c7:03:ef:c4:69:65:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9D:7A:22:E8:E6:79:D5:A7:7A:D0:73:60:FE:62:4C:3A:01:F9:9C
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.68.0/22
Signature Algorithm: sha256WithRSAEncryption
86:0d:bc:6a:39:68:cf:18:d2:4c:52:75:89:28:b6:a3:e9:21:
33:c1:57:91:4f:dd:cf:a4:d4:de:6c:80:3e:d6:37:3e:8d:81:
6b:f3:b5:0f:10:ee:bb:18:86:d0:8e:a3:11:fa:9f:49:9b:f7:
72:63:d1:bb:d6:91:86:ea:4a:2c:bf:fd:ff:ff:3e:05:97:37:
64:90:52:4c:c7:f1:89:25:4c:4a:ff:e4:bd:98:61:a1:21:f7:
41:2e:be:ea:00:1c:90:32:29:f6:0c:c0:b6:4a:d8:9f:04:93:
b4:1f:57:a4:20:40:5b:97:a8:12:13:96:63:9b:a7:ba:8f:c6:
89:6a:be:16:8e:55:f8:07:34:5d:6c:59:b2:cd:86:05:90:60:
e9:11:55:a2:44:af:ef:44:ac:f9:e3:13:67:ec:e3:b7:aa:47:
48:40:29:18:9f:3b:24:a6:7e:04:87:52:4d:88:e3:9b:e5:2a:
0a:16:c4:0a:61:91:c6:ec:d3:6d:fd:85:d4:6b:45:6e:7b:6a:
59:00:a0:22:a5:90:29:55:a4:0d:ea:43:38:aa:18:fa:04:6a:
c5:64:c1:3f:05:9f:27:35:72:dc:32:6a:2e:9e:96:93:28:80:
a4:f6:88:07:d7:c5:52:51:c4:5f:47:4f:1d:f0:b4:18:be:31:
70:d1:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:13:19 2025 by rpki-client