Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/3138312e3139312e3136332e302f32342d3234203d3e20323733343431.roa
File: 3138312e3139312e3136332e302f32342d3234203d3e20323733343431.roa (raw, json)
Hash identifier: I8z5BlQe7mlunc+ilYeQ8JWirdo5obOkqtjDvwGfCbM=
Subject key identifier: 68:ED:EC:B1:3A:CE:21:29:71:84:21:63:53:58:AA:3E:30:F6:97:53
Certificate issuer: /CN=99860D8BD99F614FD480F6A6BA21C433A2269699
Certificate serial: 74E291563D9E834A9228A1448BB7ECC3FA602479
Authority key identifier: 99:86:0D:8B:D9:9F:61:4F:D4:80:F6:A6:BA:21:C4:33:A2:26:96:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99860D8BD99F614FD480F6A6BA21C433A2269699.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/3138312e3139312e3136332e302f32342d3234203d3e20323733343431.roa
Signing time: Thu 02 Jan 2025 21:05:20 +0000
ROA not before: Thu 02 Jan 2025 21:00:20 +0000
ROA not after: Thu 01 Jan 2026 21:05:20 +0000
asID: 273441
IP address blocks: 181.191.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e2:91:56:3d:9e:83:4a:92:28:a1:44:8b:b7:ec:c3:fa:60:24:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99860D8BD99F614FD480F6A6BA21C433A2269699
Validity
Not Before: Jan 2 21:00:20 2025 GMT
Not After : Jan 1 21:05:20 2026 GMT
Subject: CN=68EDECB13ACE2129718421635358AA3E30F69753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:75:3c:09:9f:43:8c:37:46:47:07:f8:b5:
cb:41:a9:6b:9d:ec:e8:c5:6b:74:89:52:47:8d:9b:
8e:cd:25:f5:fa:0b:2c:01:5e:5f:dc:30:fc:2c:26:
3c:71:5d:f3:92:55:8c:64:94:a2:0b:97:6f:1f:cd:
46:db:64:09:8d:a6:95:e4:af:64:2f:cf:77:7e:27:
3a:83:d0:41:f5:fa:e3:cb:ab:0a:aa:78:52:ee:d7:
36:5c:46:ea:a9:a6:05:b2:1f:de:49:ad:a4:ff:69:
72:af:17:6f:cd:c0:61:59:a1:5d:62:98:11:8a:9d:
fa:dd:47:33:96:fc:ae:09:15:5f:70:a9:90:d4:a8:
29:a9:a0:2e:48:b7:c4:3f:cc:00:28:04:56:f0:95:
69:0a:a7:e4:32:fd:91:27:50:e4:43:73:44:38:57:
d1:4f:28:fd:ad:28:f2:97:0e:d3:0c:c8:d7:5b:99:
f3:39:7d:85:e2:5e:58:a2:50:61:af:f3:63:6a:26:
33:ab:70:99:6c:24:e3:3c:27:b5:f8:63:52:1c:84:
04:27:89:13:2b:49:f3:ce:50:e9:2b:0f:2e:0f:ef:
f8:e7:02:a2:5a:a4:81:0e:3b:8b:a0:c7:69:48:c7:
68:89:7c:a4:f5:f2:5a:65:6d:82:8b:e7:9e:61:8d:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:EC:B1:3A:CE:21:29:71:84:21:63:53:58:AA:3E:30:F6:97:53
X509v3 Authority Key Identifier:
keyid:99:86:0D:8B:D9:9F:61:4F:D4:80:F6:A6:BA:21:C4:33:A2:26:96:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/99860D8BD99F614FD480F6A6BA21C433A2269699.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99860D8BD99F614FD480F6A6BA21C433A2269699.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/3138312e3139312e3136332e302f32342d3234203d3e20323733343431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.163.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:80:1f:d4:b7:56:04:03:2a:3e:d1:24:f0:65:aa:b5:98:f4:
22:4f:8a:ae:87:92:c2:57:43:a7:b9:12:6e:b5:56:40:0a:46:
8f:2f:08:e3:d2:2a:7f:53:29:5c:b9:b4:14:46:d6:7d:0c:03:
ef:a8:f8:ed:43:11:13:b8:bd:c9:ee:c9:e9:b5:96:30:59:de:
4a:f7:84:08:5a:4e:07:f5:92:45:81:0f:2e:1e:eb:90:53:fc:
aa:57:91:c0:dc:f4:59:51:db:91:58:f2:fe:62:17:7c:e1:a8:
98:40:c2:ec:99:9e:c6:53:30:b3:e2:3c:5c:7d:39:c4:b0:6d:
f4:5f:c0:dc:3d:36:f8:f5:24:53:b7:ed:8f:6f:16:09:90:5e:
62:bd:f8:f7:c7:b5:83:98:b9:2e:a7:23:be:03:5f:50:06:99:
62:19:22:67:32:dc:b6:0d:b6:84:d9:8f:be:48:1a:07:d2:3e:
59:af:e8:ae:88:a6:89:37:85:dc:a4:69:83:a8:64:11:60:e0:
d3:b0:0b:d8:7c:12:7e:ba:de:0e:b8:10:03:26:88:13:e5:26:
b7:ea:79:a2:cf:52:ad:6b:a4:22:6c:35:22:e0:72:b0:6d:96:
f3:00:50:29:12:ec:45:25:a6:34:70:70:7d:2c:0a:6f:f9:ae:
60:94:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:40:53 2025 by rpki-client