Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa
File: 3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa (raw, json)
Hash identifier: HvXOZKbpUoJ0nt2uXiw5Ou3vFBmJQGznDu2WtyarAzY=
Subject key identifier: CA:3D:F0:7E:45:37:2D:A9:F1:1B:21:12:70:6F:B5:B1:3B:03:0A:EA
Certificate issuer: /CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Certificate serial: 4EB0057ABA92987A90DD7554CBDF265FAEA2360C
Authority key identifier: A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa
Signing time: Thu 06 Mar 2025 10:33:14 +0000
ROA not before: Thu 06 Mar 2025 10:28:14 +0000
ROA not after: Thu 05 Mar 2026 10:33:14 +0000
asID: 268097
IP address blocks: 131.108.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b0:05:7a:ba:92:98:7a:90:dd:75:54:cb:df:26:5f:ae:a2:36:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Validity
Not Before: Mar 6 10:28:14 2025 GMT
Not After : Mar 5 10:33:14 2026 GMT
Subject: CN=CA3DF07E45372DA9F11B2112706FB5B13B030AEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:ad:92:74:d4:b6:82:ee:72:f4:21:5b:e0:
1e:f1:85:39:cc:94:6c:66:40:bb:58:e6:f1:5b:fb:
37:46:83:45:51:57:7c:76:c5:e9:47:0a:d3:fc:03:
db:f7:62:26:4d:b0:17:dd:0a:9e:df:70:ac:cc:09:
fb:2b:0d:3d:70:58:82:ca:67:e8:ff:e1:f8:75:a8:
fe:21:61:bf:8e:2c:9d:36:f5:b3:69:51:0c:b3:66:
6b:bc:ff:52:c1:30:55:45:40:fc:24:72:74:f0:f8:
e9:53:78:7f:7c:c6:6d:b5:75:95:57:88:9d:1d:c7:
9b:23:f6:85:fe:41:7d:33:57:31:96:ab:4b:2a:e7:
34:b3:ad:f2:b6:ca:cd:47:12:77:6e:b4:c0:2e:ee:
c8:c9:16:67:61:e9:1e:0a:f8:73:6b:11:c7:84:19:
98:78:0b:c8:29:a0:c7:34:07:d1:3b:b1:dc:2f:f7:
4e:d1:94:6f:c6:94:31:99:38:3a:ef:34:a0:73:13:
36:f5:ae:1b:1c:25:a2:ca:7f:12:51:10:ec:58:38:
41:b2:47:0f:0e:35:e4:2b:4e:1f:f1:de:73:bc:68:
71:7b:8a:c0:c8:ee:b6:c9:47:f3:7c:74:a5:72:90:
05:e7:b2:89:ce:a7:47:45:6a:b3:ea:86:c3:54:eb:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3D:F0:7E:45:37:2D:A9:F1:1B:21:12:70:6F:B5:B1:3B:03:0A:EA
X509v3 Authority Key Identifier:
keyid:A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.88.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:8c:61:1e:10:1f:f3:f5:f4:ab:79:e5:67:b2:cf:1d:17:c9:
16:b1:f9:45:0a:bb:ea:7a:94:2f:5b:c2:c0:42:17:f9:a5:b9:
36:c4:f1:f5:0d:00:dd:a0:7c:ed:59:73:18:fc:4c:4c:51:bf:
12:1c:d5:06:0c:14:bb:f8:14:55:ae:ae:f9:73:d1:9c:39:59:
24:00:d1:8f:c8:12:01:92:30:6a:1a:ed:9d:44:9b:84:94:28:
d5:83:fb:6c:03:6f:ca:bc:90:84:6c:32:e7:49:c4:5a:ed:0f:
66:3f:8e:93:be:79:60:22:ac:f8:d0:97:8c:14:fc:c2:0a:c9:
54:1a:0d:d6:78:74:1d:f7:91:ea:20:4c:bf:74:68:f7:45:52:
97:c9:9c:24:1c:9e:a3:b5:a9:dc:84:23:42:8a:75:85:d0:35:
02:36:37:96:50:58:bd:9c:41:11:1c:2e:5e:08:6b:c1:07:c5:
2f:32:a9:ae:e0:0c:74:38:01:b3:f5:3e:c9:a7:fa:f3:e4:a0:
9b:2e:15:6c:e3:9f:b8:90:9f:53:da:42:f3:62:fe:a8:68:78:
14:4c:69:15:98:0f:44:d9:1f:12:99:78:58:48:13:65:84:78:
63:33:94:b3:5a:53:d3:9f:62:84:9c:c9:2a:d3:99:b4:29:01:
9b:34:35:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:16:11 2025 by rpki-client