Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235352e302f32342d3234203d3e203631373531.roa
File: 3133312e37322e3235352e302f32342d3234203d3e203631373531.roa (raw, json)
Hash identifier: Jp16atRaeJijjMoXGLio3YCciMYCTKvK03Su8I96clo=
Subject key identifier: B4:2F:23:F5:D3:D8:64:AF:25:C6:09:1B:32:79:A1:17:A5:F1:3F:01
Certificate issuer: /CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Certificate serial: 2329C13EFB8AE808DC5CF8289460F1991CBCF662
Authority key identifier: CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject info access: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235352e302f32342d3234203d3e203631373531.roa
Signing time: Fri 15 Sep 2023 20:39:05 +0000
ROA not before: Fri 15 Sep 2023 20:34:05 +0000
ROA not after: Fri 13 Sep 2024 20:39:05 +0000
asID: 61751
IP address blocks: 131.72.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:29:c1:3e:fb:8a:e8:08:dc:5c:f8:28:94:60:f1:99:1c:bc:f6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Validity
Not Before: Sep 15 20:34:05 2023 GMT
Not After : Sep 13 20:39:05 2024 GMT
Subject: CN=B42F23F5D3D864AF25C6091B3279A117A5F13F01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:cd:d5:34:54:f6:97:62:12:43:9c:b0:f4:
22:45:d4:ad:ff:6a:26:63:c9:38:f0:f9:b7:08:f9:
49:95:a9:6c:29:bd:f4:84:db:c7:8a:97:1c:cb:67:
2b:38:b7:34:f8:8a:07:0a:f8:49:2e:b4:0d:40:88:
e3:b3:e0:8b:4a:05:ea:2c:5b:95:ba:da:c0:d3:f2:
fe:8d:22:7b:d0:94:5e:74:af:44:f8:9c:5b:45:2b:
52:70:de:2d:bb:70:16:24:a0:f2:00:bf:6b:6e:f4:
56:ff:36:37:63:dd:89:72:5c:12:69:cc:3b:16:35:
4c:1a:22:88:31:e5:82:cc:37:6b:2a:cf:6f:cf:55:
34:ae:82:c6:ed:ce:3f:6c:c6:c1:4c:b7:d5:75:10:
d5:ff:00:ec:1b:e0:ba:f0:3c:0c:74:63:ca:57:65:
54:9c:8a:d5:67:26:b8:2f:d0:08:5d:88:7e:5b:87:
4e:10:24:11:21:6b:04:25:63:9a:09:81:16:a1:de:
ad:d1:ba:82:b4:24:bd:b4:c9:15:21:0e:1d:6c:81:
89:5b:5b:ec:c0:f8:1c:6f:71:ce:c9:04:be:31:6c:
2f:fc:43:62:a6:4a:3e:5a:f6:38:0e:8d:f1:63:a4:
f2:42:1a:6a:bf:54:f4:4a:db:5c:03:73:c2:0c:b6:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2F:23:F5:D3:D8:64:AF:25:C6:09:1B:32:79:A1:17:A5:F1:3F:01
X509v3 Authority Key Identifier:
keyid:CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235352e302f32342d3234203d3e203631373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.255.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d7:fc:36:e6:6f:46:f4:3e:0b:ac:46:ed:25:26:1a:a3:a3:
90:a4:d6:00:48:fb:fe:79:61:4e:d1:fd:6e:47:7a:04:cd:e5:
39:d8:e3:95:3a:d5:9d:fa:99:44:09:fc:98:ce:b4:bb:3a:65:
72:f8:10:fd:e1:e2:d2:87:31:08:2e:0f:ad:f1:1e:42:7e:81:
44:4f:fa:41:c3:17:28:1e:51:b1:56:3c:14:28:6a:5b:32:76:
d3:99:cf:1a:a0:67:dc:ea:62:7c:bc:eb:79:90:61:d5:10:65:
90:2d:f5:e2:cc:75:0e:11:27:2e:5d:55:29:59:5b:30:f4:61:
51:4c:2c:a4:af:d4:6a:08:ad:01:29:71:b1:02:34:49:73:55:
eb:92:93:15:99:86:a6:bc:9b:d8:7a:54:73:d8:80:bb:1d:90:
8e:04:2a:30:93:1d:67:ae:f8:82:d2:d0:7a:bd:a1:46:42:18:
4e:1f:56:0e:14:c1:ca:71:10:61:ff:36:5e:ec:6b:03:30:24:
c6:e3:0c:61:e2:bf:d7:28:47:a5:61:86:d3:62:53:0e:b4:37:
98:1b:4f:42:8e:59:f0:f4:5d:32:a0:b8:8e:16:83:4f:7c:4f:
00:6d:f5:f1:ad:06:5d:ab:38:af:1f:a3:30:da:4a:20:d1:25:
46:72:61:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:27:42 2025 by rpki-client