Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3136312e34302e302f32322d3234203d3e203532363734.roa
File: 3133312e3136312e34302e302f32322d3234203d3e203532363734.roa (raw, json)
Hash identifier: ABkQF2zaAiZa3nbYBVRjbbc/K5iNKd7hCBjhfmY9Vkc=
Subject key identifier: 3C:63:75:B7:44:72:23:44:29:AA:9D:A1:6C:F1:EA:FE:D3:AC:6E:2A
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 29235F7F11E5941F56680B295E977AFCAEABB3AC
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3136312e34302e302f32322d3234203d3e203532363734.roa
Signing time: Wed 21 Feb 2024 22:53:25 +0000
ROA not before: Wed 21 Feb 2024 22:48:25 +0000
ROA not after: Wed 19 Feb 2025 22:53:25 +0000
asID: 52674
IP address blocks: 131.161.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:23:5f:7f:11:e5:94:1f:56:68:0b:29:5e:97:7a:fc:ae:ab:b3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Feb 21 22:48:25 2024 GMT
Not After : Feb 19 22:53:25 2025 GMT
Subject: CN=3C6375B74472234429AA9DA16CF1EAFED3AC6E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:a4:40:fb:f3:cc:0c:71:28:34:40:fa:1e:
d6:a4:e4:7a:9a:dc:40:bf:5c:b6:04:53:c0:fa:d2:
9f:2a:83:94:b3:d2:25:d8:85:32:6a:fd:f5:1f:a6:
dd:39:3c:73:66:cb:6f:db:9b:f9:98:9b:89:2e:b1:
f7:08:01:8d:0a:aa:7e:22:29:4a:a1:4c:3a:da:72:
05:4c:20:53:43:2c:7d:9b:8c:f0:2c:9b:43:eb:d9:
b1:50:c2:80:a0:86:39:05:9a:17:9c:9f:91:04:5b:
25:7f:c7:58:d6:70:10:ee:40:9e:9d:5e:a2:df:ae:
8a:0e:07:a0:63:ec:f9:b0:39:9d:a7:1b:99:c7:f2:
05:d2:4b:d6:a9:f0:71:64:d6:92:2c:29:6f:88:42:
a0:65:38:0c:d4:25:f2:1d:15:a9:4a:e0:b7:33:14:
d7:17:0e:fb:98:03:9e:3f:d2:b5:6b:f7:34:c3:11:
d5:46:7e:24:b2:31:c3:e9:d5:29:d1:29:ed:86:17:
46:e6:29:a2:ed:82:2e:8a:af:93:04:13:10:d9:e7:
1b:44:8d:5d:1c:6c:85:fc:5a:92:cb:de:13:f2:41:
15:61:d2:01:bb:f6:6b:d8:fa:39:3d:f5:f6:f1:d4:
9a:fd:37:04:1b:50:1c:c9:31:c5:eb:c9:7f:95:ae:
a0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:63:75:B7:44:72:23:44:29:AA:9D:A1:6C:F1:EA:FE:D3:AC:6E:2A
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3136312e34302e302f32322d3234203d3e203532363734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.40.0/22
Signature Algorithm: sha256WithRSAEncryption
82:6e:ab:95:d5:24:af:17:3f:98:ec:d1:84:3e:72:b5:e0:3a:
3a:5e:2b:d2:1f:f1:39:dc:d7:7d:f1:78:98:c6:46:91:69:fb:
c0:b4:95:19:8d:8f:3b:f2:4a:8b:9d:da:8f:45:37:e4:a0:3a:
91:96:61:14:61:ea:b4:e1:2a:f1:b7:de:82:c0:37:a0:d9:0e:
82:8a:1c:13:f8:4c:69:6a:60:c3:61:1b:31:04:a0:21:47:ac:
4e:e5:14:10:f4:24:80:17:51:2b:7d:34:37:78:e5:a9:94:2d:
ec:66:d2:10:38:65:fa:68:f7:1f:f5:75:83:0d:86:83:98:9c:
c8:4c:e5:8f:c2:c8:21:c4:45:57:d0:3d:f0:c8:3a:be:77:91:
19:94:08:a6:36:15:77:af:0f:55:88:bf:f6:85:76:f5:50:e9:
cc:85:45:8a:2c:c7:ef:aa:ff:b6:49:25:a4:e1:32:bc:07:68:
97:31:f4:bb:6f:b2:49:d3:89:41:8e:37:00:48:fb:9e:9b:24:
e1:cb:61:99:f8:fc:19:39:73:18:94:cf:f6:45:20:af:c8:8d:
22:e9:b6:6a:f4:3b:37:d0:1a:76:94:8f:f9:6b:64:98:3b:4c:
22:2d:0d:e7:1c:7a:67:62:99:3b:1b:ac:e1:92:0f:33:d5:da:
4c:59:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:50:04 2025 by rpki-client