Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/3133312e3130302e3132302e302f32322d3332203d3e203631363336.roa
File: 3133312e3130302e3132302e302f32322d3332203d3e203631363336.roa (raw, json)
Hash identifier: ZOBNW+9s0NvWjVCfcF7AbBf9AerqaVYsNK1orMmj0uU=
Subject key identifier: F2:AA:72:EB:C8:4A:B7:02:AB:56:78:73:88:40:F1:21:AB:DA:DB:3D
Certificate issuer: /CN=D725162E18A463E8576032287F7EEDA7CF72075D
Certificate serial: 759B0390DAEDEE196AE338E5FBEEA437270FD4BC
Authority key identifier: D7:25:16:2E:18:A4:63:E8:57:60:32:28:7F:7E:ED:A7:CF:72:07:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D725162E18A463E8576032287F7EEDA7CF72075D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/3133312e3130302e3132302e302f32322d3332203d3e203631363336.roa
Signing time: Fri 14 Feb 2025 14:50:10 +0000
ROA not before: Fri 14 Feb 2025 14:45:10 +0000
ROA not after: Fri 13 Feb 2026 14:50:10 +0000
asID: 61636
IP address blocks: 131.100.120.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:9b:03:90:da:ed:ee:19:6a:e3:38:e5:fb:ee:a4:37:27:0f:d4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D725162E18A463E8576032287F7EEDA7CF72075D
Validity
Not Before: Feb 14 14:45:10 2025 GMT
Not After : Feb 13 14:50:10 2026 GMT
Subject: CN=F2AA72EBC84AB702AB5678738840F121ABDADB3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:99:ff:fc:d5:b1:22:73:d5:08:c8:ed:91:a2:
8d:59:b5:2a:4c:79:dd:9a:6d:1c:06:48:1b:77:29:
e9:36:7e:47:f4:dc:a4:78:a6:76:50:1f:5f:8a:d0:
c0:27:64:21:df:ff:7d:45:47:07:6d:75:fc:d1:a7:
c8:9b:1c:99:02:49:db:27:ce:bc:f5:7e:7b:dd:76:
87:9c:5a:1e:5b:1f:81:2a:36:9c:e8:4a:3b:d2:7d:
21:d7:06:32:fe:1d:0f:1d:e6:89:40:be:a9:ce:5a:
bc:09:66:1c:d2:d5:f6:9c:7e:e8:79:63:cb:b8:f9:
4e:a5:91:89:f4:10:0f:ba:a9:64:3c:14:02:3d:ff:
bf:05:83:13:ea:15:5b:a6:ac:ea:61:08:b7:01:b1:
a1:1f:50:ce:a9:29:6b:c7:a6:ba:2e:c9:27:80:9d:
d7:f3:ab:dc:4e:2f:cf:d5:aa:e7:64:f3:21:a1:5a:
d3:e0:11:85:eb:67:c1:ed:6b:96:ff:0a:90:33:bd:
a0:2d:80:e2:96:c5:6c:7d:f7:26:98:3c:f1:ff:23:
70:ad:19:c3:92:3c:5c:d9:93:e4:4e:b1:e0:dd:76:
54:e6:72:04:f4:10:dc:74:86:33:dd:14:fa:cf:18:
59:61:53:89:db:48:d4:5a:29:b8:e1:b8:07:10:31:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AA:72:EB:C8:4A:B7:02:AB:56:78:73:88:40:F1:21:AB:DA:DB:3D
X509v3 Authority Key Identifier:
keyid:D7:25:16:2E:18:A4:63:E8:57:60:32:28:7F:7E:ED:A7:CF:72:07:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/D725162E18A463E8576032287F7EEDA7CF72075D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D725162E18A463E8576032287F7EEDA7CF72075D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/3133312e3130302e3132302e302f32322d3332203d3e203631363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.120.0/22
Signature Algorithm: sha256WithRSAEncryption
11:73:24:2c:73:5b:f8:d0:56:62:a8:d5:58:67:81:b0:89:74:
89:54:8f:87:92:51:ae:3a:ec:65:2c:a9:d8:75:ed:62:1e:d9:
80:ca:ef:31:5d:ed:a4:f6:98:e9:3b:3a:bc:32:b4:76:1e:88:
b9:17:ee:84:e9:0d:b3:f1:19:4a:de:05:4f:62:2c:86:45:26:
2f:5f:ef:83:87:04:c4:b8:2d:b7:6a:13:6d:df:ff:dd:a7:a5:
52:72:8a:32:43:84:8e:a7:ca:87:39:29:f7:0c:aa:65:95:29:
a9:d2:82:90:d8:3c:49:75:20:0f:df:fd:c6:c9:53:c3:b9:1f:
3d:fa:50:9f:39:81:f5:da:e6:95:e6:8a:2a:b9:43:2a:ce:00:
0d:ad:a0:b7:d9:ab:6a:c6:cf:ac:c1:fb:97:b8:54:17:f3:dd:
57:fc:70:e5:4b:9e:88:df:93:fb:8a:34:38:08:ec:e1:cf:34:
b6:6e:35:df:f1:d4:40:3b:08:af:c0:4c:76:bc:d6:55:4f:0c:
9a:8a:52:e2:0e:73:ac:f5:ac:78:f7:f7:30:02:eb:77:47:60:
a3:eb:b1:c8:73:f6:89:b1:74:6b:c1:4c:2d:bf:c4:4e:4c:40:
80:60:17:8f:eb:1c:58:6c:4f:0f:d0:ba:ed:f5:7d:ff:c8:9b:
e6:b8:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:10:19 2025 by rpki-client