Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3136312e302e302f32322d3234203d3e20323632393037.roa
File: 3133312e3136312e302e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier: fx4THKGrhAFy3dgIcEuwcMYWiydslrheqYoPVQRl0AA=
Subject key identifier: 6B:58:3C:F4:61:81:52:72:0B:53:A9:22:B1:CC:C4:01:CF:4A:40:00
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 233D2E53D6032B3F0DA7678C44862F53ADDA6174
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3136312e302e302f32322d3234203d3e20323632393037.roa
Signing time: Sat 03 Feb 2024 12:53:20 +0000
ROA not before: Sat 03 Feb 2024 12:48:20 +0000
ROA not after: Sat 01 Feb 2025 12:53:20 +0000
asID: 262907
IP address blocks: 131.161.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:3d:2e:53:d6:03:2b:3f:0d:a7:67:8c:44:86:2f:53:ad:da:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Feb 3 12:48:20 2024 GMT
Not After : Feb 1 12:53:20 2025 GMT
Subject: CN=6B583CF4618152720B53A922B1CCC401CF4A4000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4a:b5:fb:31:ca:d3:53:07:0b:64:c0:c9:63:
27:17:67:ad:72:b9:50:7b:5c:b0:4c:bb:d7:a0:48:
a7:2b:c8:4b:61:2c:11:42:f7:d5:a0:ff:67:e9:0d:
ff:27:9c:8b:7d:7e:eb:ed:65:71:47:38:b0:91:21:
f4:cd:2f:08:83:be:fd:23:f3:66:01:69:45:86:4e:
bf:b3:60:f6:81:be:ab:5b:26:1e:10:ff:51:53:41:
7f:06:97:ee:6d:67:30:d4:20:ce:a7:3e:c3:c3:79:
15:e6:f9:85:01:f3:d6:84:ed:72:ae:ff:59:98:af:
b1:59:49:f7:50:15:0d:54:a7:c5:60:05:78:33:b0:
6f:79:e3:df:08:3a:d9:1e:c0:83:51:6b:20:61:57:
86:a8:0c:f8:64:91:75:b8:66:27:b8:cd:a6:8c:d0:
72:a2:ba:e5:92:17:18:b0:9f:88:d2:a3:e3:bb:ea:
f5:97:36:0b:06:d3:d0:d1:09:e5:28:41:7d:e3:bd:
ea:4c:cc:07:bf:04:37:67:27:4d:ea:89:cf:5f:e2:
a2:12:e9:df:0c:37:67:2b:e0:55:a8:49:c6:1f:13:
97:b6:b9:f9:70:5a:f8:f8:98:ea:5c:40:6f:72:72:
6a:52:58:f1:17:b2:50:b4:26:e9:bd:95:c3:0c:0b:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:58:3C:F4:61:81:52:72:0B:53:A9:22:B1:CC:C4:01:CF:4A:40:00
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3136312e302e302f32322d3234203d3e20323632393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:15:63:15:c3:78:3f:a7:e5:eb:d5:8b:07:fc:7f:70:16:63:
3a:50:19:21:38:5d:77:35:e7:f0:db:eb:e3:c2:88:bf:dd:e6:
c5:74:fc:1a:8a:65:1e:8e:8c:76:f8:74:61:ef:9d:63:9b:03:
40:bd:0b:47:a5:4b:fa:d0:23:6a:65:42:6d:e9:f6:67:66:b5:
d0:35:d0:db:c2:ba:a0:5f:4c:58:2b:09:16:8a:e2:29:19:1d:
59:77:73:62:86:88:9a:b8:96:2d:c4:11:a0:06:d8:b6:bb:fa:
00:21:0b:fc:7d:79:d0:b5:96:77:90:4e:93:54:03:c5:67:67:
6e:91:17:d3:e9:5c:b3:8c:6d:46:5d:11:1f:13:5c:46:57:a1:
a2:fc:fe:fd:3d:60:0d:fd:1f:3e:3e:d0:9f:2e:08:39:dc:41:
09:29:7c:c2:d3:89:07:cc:58:9c:f5:7c:4c:09:d6:1b:8c:2b:
e4:f3:4f:f4:b3:9b:1a:e6:63:d6:8a:79:4c:a3:7a:73:a8:12:
e8:bb:5f:53:f6:b4:fe:a9:b8:76:f7:05:87:1c:51:41:ef:4a:
a0:ad:ef:53:00:ee:84:f0:b7:9e:cd:ee:47:00:b4:86:34:58:
7e:e3:f3:24:82:32:02:ba:17:4f:b0:70:23:62:dd:c3:4f:1f:
ab:c8:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:27:24 2025 by rpki-client