Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa
File: 3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa (raw, json)
Hash identifier: D0H5H24HGn78Llgc6NF69kbkyLcQD6Z7KGMZDM0HUyU=
Subject key identifier: 5C:B8:E7:D9:B6:D1:0F:57:8A:76:5E:80:37:F9:3B:64:97:D2:8F:4B
Certificate issuer: /CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
Certificate serial: 0540B411364ABF535E55CBD973726734D8D86691
Authority key identifier: 13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa
Signing time: Tue 26 Mar 2024 14:25:24 +0000
ROA not before: Tue 26 Mar 2024 14:20:24 +0000
ROA not after: Tue 25 Mar 2025 14:25:24 +0000
asID: 28642
IP address blocks: 170.246.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:40:b4:11:36:4a:bf:53:5e:55:cb:d9:73:72:67:34:d8:d8:66:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
Validity
Not Before: Mar 26 14:20:24 2024 GMT
Not After : Mar 25 14:25:24 2025 GMT
Subject: CN=5CB8E7D9B6D10F578A765E8037F93B6497D28F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:66:92:8f:67:41:9a:65:a0:90:d2:59:aa:
83:6f:6c:50:e6:8d:7b:2b:fd:34:18:0a:25:09:88:
30:b7:d8:1a:d2:f8:3a:05:87:e4:b9:1a:78:00:e5:
9e:9a:56:70:13:08:c8:3a:54:ac:ee:6a:1c:5e:f7:
05:1c:00:a6:4a:e3:f9:8f:16:26:88:12:3d:74:76:
73:5a:8d:49:e5:91:45:b9:a4:74:f7:63:dc:42:df:
17:79:c0:b5:f2:e0:a6:8f:9d:eb:f9:6c:71:44:f9:
1c:1e:e7:b5:96:9f:98:e9:b7:ac:37:1c:e1:17:cc:
da:b9:c5:ea:72:ee:4c:f7:b9:f7:b5:26:a5:1e:ae:
89:61:9b:2e:58:85:ba:57:41:b9:d3:8d:61:99:a5:
c2:ea:69:3b:11:ce:9e:04:21:9d:d7:81:9a:fe:fd:
37:a6:fe:6f:83:fb:b9:41:92:3b:af:6d:2d:62:39:
6b:18:bc:08:31:a6:62:2a:a9:70:bb:64:0d:53:b9:
c2:1b:08:e1:43:39:91:9a:25:08:b4:e1:03:b0:0c:
03:ca:d8:e2:fa:ab:ff:b2:7c:ba:55:ac:b1:fe:88:
f7:94:9f:d6:95:07:69:d6:5b:7f:d1:07:c1:c9:03:
87:af:cc:e1:ee:a0:3b:c6:6e:59:3e:0a:8d:ab:1d:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B8:E7:D9:B6:D1:0F:57:8A:76:5E:80:37:F9:3B:64:97:D2:8F:4B
X509v3 Authority Key Identifier:
keyid:13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.128.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:aa:1c:ad:09:78:f4:9c:77:89:ea:a0:95:a4:d3:43:02:12:
38:34:0b:a8:e3:b6:1c:ca:01:26:05:06:0f:4d:32:1f:8e:64:
e3:24:96:21:bc:7c:73:22:bd:16:17:8c:b6:e8:34:5d:6c:87:
07:af:ed:03:03:44:e4:c5:94:40:bf:af:15:b7:e2:99:c8:e5:
ad:81:8e:28:19:79:fd:c4:d5:32:6b:d4:4c:37:b4:46:66:4a:
ea:32:0e:94:c3:81:6c:10:b9:ea:24:8b:a5:a0:2f:79:1d:59:
b2:8b:76:2c:f1:07:34:f9:d2:2f:84:fc:b9:9f:df:9c:ff:4a:
9a:d2:89:b6:2d:43:4a:82:bd:04:ca:ce:b3:44:ef:a6:3d:9d:
e2:d8:6f:fe:2e:4f:d2:70:d0:13:66:4b:3a:f4:60:33:cf:59:
76:66:e1:74:d2:a1:d7:5c:46:f5:89:ca:99:ab:5e:d6:52:8c:
89:e2:fe:22:09:7b:c9:c8:ca:42:c4:35:a6:5c:08:da:8e:44:
38:ba:96:47:19:2e:a3:95:8c:6d:cb:a7:fc:29:1b:3d:cc:03:
83:6f:2f:d1:4e:a7:83:66:e6:56:0f:18:ba:97:c2:9a:14:d6:
19:03:3f:0d:46:9d:18:d0:87:11:70:45:fb:9c:f4:d0:ff:53:
3b:ed:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:09 2025 by rpki-client