Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3332203d3e203238363536.roa
File: 3139302e35322e37322e302f32322d3332203d3e203238363536.roa (raw, json)
Hash identifier: V2/jtHjgYMI5JuSQArM1ORsWYKpLk3KxBX9LWzjXnHA=
Subject key identifier: 1D:51:F4:1E:E7:C2:8E:AD:87:F6:81:88:10:6D:BC:61:C3:86:73:91
Certificate issuer: /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial: 734B3D73AEEEF8021A6E4C1AB6BCC7B5D60E2B6A
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3332203d3e203238363536.roa
Signing time: Mon 27 Mar 2023 17:57:37 +0000
ROA not before: Mon 27 Mar 2023 17:52:37 +0000
ROA not after: Mon 25 Mar 2024 17:57:37 +0000
asID: 28656
IP address blocks: 190.52.72.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:4b:3d:73:ae:ee:f8:02:1a:6e:4c:1a:b6:bc:c7:b5:d6:0e:2b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Validity
Not Before: Mar 27 17:52:37 2023 GMT
Not After : Mar 25 17:57:37 2024 GMT
Subject: CN=1D51F41EE7C28EAD87F68188106DBC61C3867391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:a3:78:5e:48:21:a7:b3:ca:88:d4:89:69:
e2:a4:4a:68:26:2e:4a:c6:65:f6:38:4d:67:45:05:
78:e7:41:0c:81:a3:7d:42:18:7f:06:ad:52:5c:78:
bc:95:ac:15:4d:5d:e8:46:3b:b9:61:7a:25:c5:a8:
a9:36:d8:16:ae:59:d3:f9:19:fd:df:d2:da:cd:6f:
89:ba:d5:6d:b7:70:a1:8c:83:2b:fe:6e:f3:bf:dc:
fc:05:eb:72:b1:5b:b8:5d:c9:82:9d:ad:d3:63:7c:
7e:4b:8e:fa:4b:5e:27:a7:a3:03:cc:24:2e:d9:e2:
5e:8a:65:7b:56:8f:92:65:18:b4:4c:a3:c9:b1:7a:
7e:9e:03:28:f7:18:4d:c2:a7:e1:28:76:b5:21:6b:
d7:e3:44:23:15:2a:c7:2d:66:ab:53:e4:c5:14:1c:
57:3e:f6:f3:be:55:bb:d8:54:2e:35:83:8c:90:62:
e6:11:23:b8:a2:e9:00:ff:52:ac:d8:bf:4a:e0:39:
15:73:c8:b6:cd:79:5b:94:f5:80:f2:9b:74:0b:75:
05:26:3f:ba:b2:ff:59:a3:85:f2:c8:b1:8a:f6:ed:
ca:cb:c1:03:b6:a6:24:84:43:9b:6e:7b:ca:bb:20:
72:01:2d:22:1e:97:4f:db:dd:40:ec:f4:85:c6:8c:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:51:F4:1E:E7:C2:8E:AD:87:F6:81:88:10:6D:BC:61:C3:86:73:91
X509v3 Authority Key Identifier:
keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3332203d3e203238363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.72.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:04:74:57:2d:08:b1:f1:a5:30:92:c0:cf:b7:69:b0:2e:cc:
24:cd:15:2b:8b:93:82:46:f0:23:60:6d:9e:4b:13:5c:5f:9b:
1e:fb:0a:47:8b:ae:08:d1:b5:19:26:28:e0:4c:61:89:2a:67:
3f:63:c1:38:2c:5d:5a:e2:23:5b:62:8e:02:9d:1d:09:ca:71:
6f:4a:92:d7:4a:54:14:33:d2:60:cd:e2:8d:ca:1e:1a:9e:09:
0e:1a:9a:a0:df:f4:e6:67:38:46:05:ed:62:27:d2:7d:c7:0f:
bd:7f:41:41:e3:d4:4e:8e:a5:0a:73:d5:3a:cb:f7:9f:a0:eb:
58:0c:4b:ac:10:36:28:ce:a6:f6:ea:b2:6d:0c:d1:cc:be:1d:
e6:6e:23:2e:99:50:da:1c:d0:96:d7:e6:69:7f:b0:33:16:35:
bc:8d:54:9b:22:5e:3f:cf:de:93:88:d3:9f:b6:68:23:c6:1b:
6d:7a:5a:ea:98:94:4a:a7:92:8c:39:f0:9c:5f:8c:05:cb:3f:
cc:de:22:25:f0:97:3f:6f:fe:24:5c:25:e3:5c:69:2f:67:ce:
ec:ef:70:03:8a:45:ca:44:bf:48:f6:d8:ee:2f:52:6a:55:12:
d2:d2:2e:7b:eb:da:9f:98:d1:80:1f:73:ff:a0:2a:a0:cd:f5:
a2:05:b1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:55 2025 by rpki-client