Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3139302e35322e37322e302f32322d3234203d3e20323731323935.roa
File: 3139302e35322e37322e302f32322d3234203d3e20323731323935.roa (raw, json)
Hash identifier: hAvxZrfj1ySPXy2LwfpCfGWDosp1pLjXL6y+pA3qxTI=
Subject key identifier: 8D:16:03:41:AD:D5:99:97:DE:5D:0D:99:1E:2B:0A:20:67:1A:07:91
Certificate issuer: /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial: 76788E96FAA54D6084A8E527F14828C8E25A856F
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3139302e35322e37322e302f32322d3234203d3e20323731323935.roa
Signing time: Mon 27 Mar 2023 15:34:52 +0000
ROA not before: Mon 27 Mar 2023 15:29:52 +0000
ROA not after: Mon 25 Mar 2024 15:34:52 +0000
asID: 271295
IP address blocks: 190.52.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:78:8e:96:fa:a5:4d:60:84:a8:e5:27:f1:48:28:c8:e2:5a:85:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Validity
Not Before: Mar 27 15:29:52 2023 GMT
Not After : Mar 25 15:34:52 2024 GMT
Subject: CN=8D160341ADD59997DE5D0D991E2B0A20671A0791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:9a:e3:90:5a:bc:14:0f:f0:7d:5c:cb:a4:
9d:5d:b6:f1:59:8b:ba:1a:a8:60:d7:4c:35:a1:f2:
69:16:fe:02:a7:d2:2b:08:bc:5e:f7:3a:c1:da:59:
39:db:42:a4:64:c3:f0:dc:21:06:9d:89:32:b8:20:
6a:2d:b0:52:7a:1f:3e:ba:93:0d:8c:09:38:f5:78:
76:2c:ca:7e:0b:07:9e:ed:09:ca:a5:b6:47:c9:4f:
c8:6a:b9:20:fd:7b:16:f8:a6:62:bd:ef:20:58:2f:
2a:ac:5f:fd:92:e9:0d:38:a8:00:b7:5a:be:3b:22:
46:2f:93:e5:e4:42:36:94:82:b7:9f:bd:da:fb:d6:
bb:62:15:bf:c7:b5:e3:dd:2d:1f:c4:7d:50:0b:18:
0a:9d:bb:8e:9d:9f:fc:63:63:b9:0d:54:85:26:c3:
d3:c0:5a:7e:9a:38:25:0c:a1:5d:95:9b:d7:b4:ae:
dc:24:bb:b1:09:3f:a9:c7:0a:e4:e4:b4:19:f6:3e:
b4:26:10:8f:b8:e0:8c:2f:c5:c4:69:c1:7d:8f:fc:
32:d6:5b:0f:ed:88:a6:8a:2c:3d:d2:75:4e:0b:bf:
5c:57:21:38:7d:a5:bf:cd:57:5c:cb:a0:28:92:ce:
1b:89:a8:99:af:de:e6:97:fc:a8:6f:3a:ac:0d:aa:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:16:03:41:AD:D5:99:97:DE:5D:0D:99:1E:2B:0A:20:67:1A:07:91
X509v3 Authority Key Identifier:
keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3139302e35322e37322e302f32322d3234203d3e20323731323935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:68:ee:c8:81:45:23:54:0a:10:c6:97:61:4d:11:6d:7e:c7:
ea:e2:35:ea:4a:78:03:f3:4b:23:42:22:61:0d:7b:35:3c:80:
01:2e:6b:93:36:30:89:08:c3:93:93:24:a2:0e:6a:58:6b:60:
aa:ce:04:91:9b:4f:5c:a1:23:8c:ae:57:17:87:ef:9f:bb:87:
0c:ad:77:10:48:68:7b:38:ef:55:c2:f7:dc:30:3e:2c:c5:e0:
f0:2e:19:c7:5b:58:af:f8:3d:e9:38:90:03:a4:2d:0d:9d:ad:
ed:67:2e:ab:d6:81:87:99:f6:dc:4e:ae:8e:07:09:7c:03:4d:
31:d9:74:7b:01:88:8f:fb:85:59:1f:b6:14:20:36:10:81:50:
63:cb:49:7f:1e:ba:56:85:f7:c2:bf:7e:a6:c2:28:de:8b:a8:
05:6b:a6:af:76:ce:7d:62:9a:00:22:77:cb:fa:dc:bb:84:91:
74:9b:d3:74:8f:a7:5b:5a:39:46:00:6f:f2:b9:df:8b:7e:10:
93:4d:da:6d:45:ff:f0:5a:c0:9e:2a:98:19:8a:63:04:b0:82:
2a:ac:14:15:5b:1a:5c:c6:2c:24:86:71:b0:14:c5:1f:5b:d6:
3f:e2:31:a1:77:8b:5c:f5:8a:b3:b5:90:e2:b9:76:98:b7:08:
27:67:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:27:56 2025 by rpki-client