Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/3136382e3139342e3132382e302f32322d3232203d3e20323635343034.roa
File: 3136382e3139342e3132382e302f32322d3232203d3e20323635343034.roa (raw, json)
Hash identifier: UT+2Ed5ZqLq+z4Wm9NJRpZaIMv2qY4OhwxsaXSvaasw=
Subject key identifier: DC:16:43:31:99:0F:4D:03:6F:6B:4F:AD:3E:C2:07:9A:B9:38:B3:07
Certificate issuer: /CN=7B2B6130E43B1369CCBC9653A0FB3816A17F7728
Certificate serial: 16A7757EAC3D9A059803031785EF453B48112B2F
Authority key identifier: 7B:2B:61:30:E4:3B:13:69:CC:BC:96:53:A0:FB:38:16:A1:7F:77:28
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B2B6130E43B1369CCBC9653A0FB3816A17F7728.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/3136382e3139342e3132382e302f32322d3232203d3e20323635343034.roa
Signing time: Tue 17 Dec 2024 19:12:11 +0000
ROA not before: Tue 17 Dec 2024 19:07:11 +0000
ROA not after: Tue 16 Dec 2025 19:12:11 +0000
asID: 265404
IP address blocks: 168.194.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a7:75:7e:ac:3d:9a:05:98:03:03:17:85:ef:45:3b:48:11:2b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B2B6130E43B1369CCBC9653A0FB3816A17F7728
Validity
Not Before: Dec 17 19:07:11 2024 GMT
Not After : Dec 16 19:12:11 2025 GMT
Subject: CN=DC164331990F4D036F6B4FAD3EC2079AB938B307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:40:3e:84:73:62:c2:bf:2e:d3:8f:58:3a:4e:
68:a3:19:da:78:ad:54:3f:47:e2:0c:c6:78:db:5c:
8b:19:15:7d:2a:b0:d9:b6:bf:af:86:8a:6c:84:6d:
3a:4c:36:60:65:b4:6d:23:f4:44:11:18:79:70:91:
eb:dc:0a:1d:33:7d:79:9a:34:ea:af:fb:ab:c8:52:
4b:2e:c3:b9:6c:52:d8:c6:f2:64:ed:ad:72:ed:e2:
39:1d:76:5a:05:41:15:49:51:25:37:39:8a:4c:b6:
39:3d:96:6d:82:f8:b1:af:73:3a:1c:94:68:a2:a5:
99:b1:83:9c:d7:8f:7d:4b:36:6c:fe:4f:46:06:4c:
02:0c:eb:03:32:b4:e1:64:27:33:2f:19:3b:bb:aa:
e9:70:25:75:77:2c:7a:fc:5b:ec:ed:a8:9d:a3:37:
22:8d:3d:50:13:c4:19:e1:85:7d:89:f5:06:5c:5c:
f7:42:b6:d7:c9:84:68:3e:1f:13:a1:56:c0:86:fd:
16:74:0e:41:6e:a5:d4:85:ce:5c:2d:8d:8e:7e:11:
08:1b:81:c4:f1:90:54:e0:4a:28:23:4a:ea:01:67:
82:2c:a0:89:5e:2d:af:ce:c6:4c:b1:7a:a3:28:0d:
81:0c:32:70:3a:6b:5f:76:7d:e4:6f:1e:b1:d1:c3:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:43:31:99:0F:4D:03:6F:6B:4F:AD:3E:C2:07:9A:B9:38:B3:07
X509v3 Authority Key Identifier:
keyid:7B:2B:61:30:E4:3B:13:69:CC:BC:96:53:A0:FB:38:16:A1:7F:77:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/7B2B6130E43B1369CCBC9653A0FB3816A17F7728.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B2B6130E43B1369CCBC9653A0FB3816A17F7728.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/3136382e3139342e3132382e302f32322d3232203d3e20323635343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.128.0/22
Signature Algorithm: sha256WithRSAEncryption
58:79:b9:b4:f6:eb:ba:7e:66:86:40:5a:d3:c9:7b:f8:fe:7a:
66:8a:94:ac:73:f0:60:ef:f3:1c:ec:9f:cd:cc:61:c0:90:f4:
00:17:00:8d:45:ea:cf:ea:c8:97:15:c2:4a:3c:c8:92:7d:4c:
ee:33:da:dd:29:a9:9e:91:38:a1:59:43:0b:61:f2:fb:25:76:
06:2e:e1:b5:b2:ae:97:24:82:6e:82:f5:44:2f:ca:b9:fa:9e:
82:03:aa:aa:c0:ca:b0:6d:51:30:c6:30:9d:2e:74:66:f3:dc:
2e:b5:f0:7b:a7:66:e7:82:32:8d:2f:0e:10:7b:7f:ad:59:19:
af:f8:5f:af:60:41:08:48:ae:34:89:a1:98:e2:86:6f:2a:ca:
e9:ab:67:e1:ac:83:c6:2f:3e:2e:ed:da:b1:6e:ee:00:67:20:
8c:7a:53:2f:10:01:45:82:d6:7b:b4:fb:1f:22:42:c2:7c:b9:
4a:78:27:45:62:6b:0b:ba:92:99:d3:10:cd:4b:d5:a6:e0:e4:
b2:5f:70:fd:28:46:4b:4e:61:79:e7:ff:2c:4f:13:d8:ab:af:
f4:6d:f7:4a:2d:6c:3b:cc:77:c7:00:48:77:de:88:4e:61:b3:
84:5e:7d:2d:7b:9d:c3:cd:fc:01:06:98:97:b4:88:59:79:30:
05:63:d6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:32:40 2025 by rpki-client