Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/3136382e3139352e302e302f32332d3234203d3e20323635343130.roa
File: 3136382e3139352e302e302f32332d3234203d3e20323635343130.roa (raw, json)
Hash identifier: knJGUn0Kczg1YZE3usASfMCeuy2PJCN2kjBiXuHpN90=
Subject key identifier: 72:E7:BF:9C:0F:2A:EB:D6:B4:06:C2:1A:5D:ED:3E:7C:D5:7C:76:A6
Certificate issuer: /CN=54C4052D39431D563CCB2D911DC264CD61964490
Certificate serial: 275C4F6F9FA833F319F6677423FCA7D12415BD7F
Authority key identifier: 54:C4:05:2D:39:43:1D:56:3C:CB:2D:91:1D:C2:64:CD:61:96:44:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54C4052D39431D563CCB2D911DC264CD61964490.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/3136382e3139352e302e302f32332d3234203d3e20323635343130.roa
Signing time: Tue 12 Mar 2024 13:46:39 +0000
ROA not before: Tue 12 Mar 2024 13:41:39 +0000
ROA not after: Tue 11 Mar 2025 13:46:39 +0000
asID: 265410
IP address blocks: 168.195.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:5c:4f:6f:9f:a8:33:f3:19:f6:67:74:23:fc:a7:d1:24:15:bd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54C4052D39431D563CCB2D911DC264CD61964490
Validity
Not Before: Mar 12 13:41:39 2024 GMT
Not After : Mar 11 13:46:39 2025 GMT
Subject: CN=72E7BF9C0F2AEBD6B406C21A5DED3E7CD57C76A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:ec:83:70:a5:53:d7:b8:11:b9:0d:96:6c:
42:cf:0d:85:c6:14:37:7f:28:54:48:2d:ed:03:11:
d3:31:d1:c3:a2:d8:3f:58:f9:9a:cb:ae:4d:d2:13:
bb:45:a6:44:d8:d5:2c:15:6d:23:7c:f7:b9:f7:79:
00:83:b1:46:08:c3:53:9b:c2:a7:63:9c:e9:40:54:
6a:d4:71:96:06:59:e1:35:64:a1:5d:84:2e:30:d0:
ee:37:5e:a7:27:9f:9b:8e:52:f6:e2:cd:9f:0d:71:
86:25:4f:0e:db:7b:e4:be:5d:13:9c:21:61:a7:34:
9f:10:5b:15:c6:0f:81:e5:42:48:af:cc:1c:40:2b:
d6:b8:51:85:d3:d3:b6:c7:7f:c6:8c:9b:71:8a:6d:
7f:73:4e:b6:e6:99:07:d0:df:cf:b6:4a:b8:65:6d:
ff:4b:37:7d:25:3d:35:55:56:95:b0:5e:ac:5b:1b:
df:f2:b0:6b:96:ab:3b:b5:cf:38:05:f7:1b:81:d6:
13:ce:a5:5a:37:dc:80:82:e8:c8:df:08:b4:16:74:
16:82:fb:c8:8d:a1:70:4d:b1:f6:0a:43:28:d5:99:
58:b1:79:bd:58:38:e2:52:09:fa:35:a7:84:b7:ec:
dd:66:de:06:a9:b8:a3:d5:89:32:fb:0f:a8:96:0e:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E7:BF:9C:0F:2A:EB:D6:B4:06:C2:1A:5D:ED:3E:7C:D5:7C:76:A6
X509v3 Authority Key Identifier:
keyid:54:C4:05:2D:39:43:1D:56:3C:CB:2D:91:1D:C2:64:CD:61:96:44:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/54C4052D39431D563CCB2D911DC264CD61964490.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54C4052D39431D563CCB2D911DC264CD61964490.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/3136382e3139352e302e302f32332d3234203d3e20323635343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.0.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:81:6a:d3:b3:62:68:b0:be:5a:86:a4:02:6d:2c:ce:fb:ee:
32:ab:e2:dc:70:98:17:24:de:40:14:31:8d:1c:2a:3a:8a:55:
7e:57:4a:51:5f:d8:65:c2:6f:1e:6a:72:a5:39:9a:06:51:3c:
33:99:54:14:ca:b5:44:3a:34:31:4f:e3:4c:47:c4:d6:d9:05:
be:93:22:4b:6d:b6:e6:9c:4c:9c:90:ce:eb:b9:c6:5b:6c:29:
dc:37:54:98:b9:29:bb:2f:6f:9a:fb:43:83:42:0d:8c:be:fe:
5b:56:14:46:47:ba:21:5b:4f:e0:06:2e:0f:99:b8:d5:be:b4:
48:77:ed:ad:e8:2e:88:39:96:9f:8a:a3:e7:78:2a:55:93:c4:
6e:39:3a:74:d6:42:ac:55:a9:f6:43:8f:20:aa:bf:39:0b:86:
a3:26:cc:02:18:06:4b:f0:38:70:5d:17:45:4c:88:79:dd:de:
52:59:38:d9:77:f2:ef:70:d2:c2:cd:47:bd:2f:2f:f9:07:11:
24:b8:80:46:94:b3:c5:de:9f:ab:c0:ea:6c:7b:5d:68:5e:82:
4b:0b:64:42:3e:71:19:aa:f6:f7:44:34:0d:59:61:0f:47:95:
e1:20:f7:8c:81:96:c1:a1:5e:2d:7d:f0:3e:06:3d:9a:71:8e:
d8:85:a0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:06 2025 by rpki-client