Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/3230312e3133312e3137362e302f32322d3234203d3e203631383230.roa
File: 3230312e3133312e3137362e302f32322d3234203d3e203631383230.roa (raw, json)
Hash identifier: B/o9wVavcCUC1ySaCJONcmcID3CB+P6JT4EicUWspYc=
Subject key identifier: 29:D0:B4:88:51:50:8E:5B:9E:D3:31:B1:53:E4:5F:C1:99:AD:90:96
Certificate issuer: /CN=21EAE9DD029A47329610D791B5D8984393ADCD7C
Certificate serial: 239C2FBE20B3DD88740C17EFC3FF11DAC5931102
Authority key identifier: 21:EA:E9:DD:02:9A:47:32:96:10:D7:91:B5:D8:98:43:93:AD:CD:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21EAE9DD029A47329610D791B5D8984393ADCD7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/3230312e3133312e3137362e302f32322d3234203d3e203631383230.roa
Signing time: Fri 22 Dec 2023 14:25:09 +0000
ROA not before: Fri 22 Dec 2023 14:20:09 +0000
ROA not after: Fri 20 Dec 2024 14:25:09 +0000
asID: 61820
IP address blocks: 201.131.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9c:2f:be:20:b3:dd:88:74:0c:17:ef:c3:ff:11:da:c5:93:11:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21EAE9DD029A47329610D791B5D8984393ADCD7C
Validity
Not Before: Dec 22 14:20:09 2023 GMT
Not After : Dec 20 14:25:09 2024 GMT
Subject: CN=29D0B48851508E5B9ED331B153E45FC199AD9096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:70:51:0b:7c:22:55:05:db:ad:7f:4b:f5:
3f:80:43:41:2c:c7:f5:09:a1:ea:60:d3:16:0a:a6:
e5:8c:7a:95:50:6c:38:47:f8:82:8e:e2:eb:86:fa:
bd:4c:ec:4b:db:35:ca:8a:07:55:61:cb:ff:95:1f:
57:4c:8d:f6:73:1b:e7:bf:fd:80:b3:5b:3e:dd:3b:
9b:2f:cf:c7:00:99:1f:ec:7c:d3:55:c6:9f:da:fb:
cb:51:b6:49:b6:cb:da:f1:19:61:c2:ce:2c:d8:ac:
1c:24:28:b8:59:29:94:2c:5d:9f:fe:47:e8:7b:4c:
e2:b1:1d:4b:94:a7:a1:11:c0:93:f7:99:ea:02:52:
cc:74:96:44:1c:8f:a5:0a:b8:4d:70:d4:51:dc:22:
18:57:91:3a:2c:ec:2a:b2:33:26:55:7d:08:af:f1:
2a:45:a9:b7:69:69:ef:3e:f8:68:83:df:4d:55:f0:
b4:ac:55:7e:af:4d:44:00:97:97:d1:0f:7c:11:fe:
f4:0d:e0:79:8e:8f:d9:0b:43:8e:88:c2:70:d7:64:
f0:b9:06:11:6d:40:8d:f4:d4:b8:cd:2f:7e:33:ef:
f6:ce:12:62:1c:76:6b:51:8e:ae:74:84:37:05:fd:
d4:11:74:73:ab:fa:dd:ea:b9:fd:d7:f5:64:a9:37:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D0:B4:88:51:50:8E:5B:9E:D3:31:B1:53:E4:5F:C1:99:AD:90:96
X509v3 Authority Key Identifier:
keyid:21:EA:E9:DD:02:9A:47:32:96:10:D7:91:B5:D8:98:43:93:AD:CD:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/21EAE9DD029A47329610D791B5D8984393ADCD7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21EAE9DD029A47329610D791B5D8984393ADCD7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/3230312e3133312e3137362e302f32322d3234203d3e203631383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.176.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:05:5b:48:01:d7:17:e1:a1:9f:5c:ca:11:2c:26:bf:12:d1:
d8:a8:60:12:ae:28:4f:f3:13:c9:a0:93:84:3d:2e:9d:43:f6:
7c:2c:41:18:3f:f1:ae:f2:2a:bf:ac:95:03:3c:0a:b7:dc:74:
d7:dc:52:44:d1:63:b0:c7:cc:42:98:03:6d:29:4f:e0:10:4d:
1b:a1:e1:18:06:f5:da:63:1d:9c:60:39:20:28:6a:d7:a6:d9:
26:14:f6:bc:c9:65:5c:09:bf:67:48:78:94:4d:73:96:04:2e:
df:46:ec:7e:e3:5f:c1:1c:93:68:c5:be:76:a9:46:79:2a:d4:
a0:3f:9e:61:3c:d2:19:ab:59:98:3f:53:16:36:eb:81:a8:22:
dc:d1:fd:e2:0f:d9:0c:c1:ac:5c:a8:8c:61:41:cb:b3:ea:1c:
d6:8d:91:b7:2c:0c:8e:a4:0a:d6:df:aa:46:99:56:f2:da:28:
2d:f2:78:64:cc:3a:28:88:10:9a:fc:d8:ba:91:51:6e:c0:03:
67:5d:5a:f5:79:57:e3:bf:35:7a:90:64:64:10:b9:c6:4c:be:
ab:3c:f4:8d:55:03:31:d1:c5:d7:5f:5f:eb:d8:47:c0:80:2c:
36:f1:97:9c:e2:18:e6:b1:47:7b:6c:a4:d1:96:b3:ca:75:8f:
b3:72:01:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:14 2025 by rpki-client