Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa
File: 3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier: OI68B4pc/0AjI/oGAXB1XEcbhRVrGJGri8nZ5I4oK4Q=
Subject key identifier: D1:65:6B:5A:BA:2B:C7:6C:2B:CE:F4:A2:39:9C:30:02:53:65:EF:AE
Certificate issuer: /CN=731D49CB201358EE9CDBEE917EC25CF59E02A3B2
Certificate serial: 4919B1F8E15586169E5A23EBDC33F31108BE6823
Authority key identifier: 73:1D:49:CB:20:13:58:EE:9C:DB:EE:91:7E:C2:5C:F5:9E:02:A3:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa
Signing time: Fri 01 Nov 2024 00:57:57 +0000
ROA not before: Fri 01 Nov 2024 00:52:57 +0000
ROA not after: Fri 31 Oct 2025 00:57:57 +0000
asID: 265393
IP address blocks: 168.194.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:19:b1:f8:e1:55:86:16:9e:5a:23:eb:dc:33:f3:11:08:be:68:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731D49CB201358EE9CDBEE917EC25CF59E02A3B2
Validity
Not Before: Nov 1 00:52:57 2024 GMT
Not After : Oct 31 00:57:57 2025 GMT
Subject: CN=D1656B5ABA2BC76C2BCEF4A2399C30025365EFAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:37:6f:09:6c:15:a7:35:ed:37:de:fb:60:
97:d1:c4:d2:dc:77:bc:00:ea:3c:b2:ec:c8:a0:35:
4c:09:77:51:2b:1d:3b:b3:4e:ec:cc:00:fb:81:26:
d2:0b:1f:f9:b1:0c:22:6d:5e:f7:62:cf:7f:33:dd:
a9:0d:1b:6b:ec:10:22:61:05:b0:b6:f5:5b:96:f0:
6c:56:e6:57:80:9a:5d:44:7e:18:9a:9c:b5:4b:b3:
e6:2e:4c:12:bc:a9:d7:c9:21:1b:c3:bf:07:de:26:
15:d9:63:53:78:f0:8e:b0:50:cc:c1:69:e6:a9:e1:
fd:f0:5b:b8:33:d5:8f:1f:79:1a:d9:1c:b5:00:c2:
b6:aa:e2:3e:c1:13:c9:64:96:c5:5a:85:a1:d0:ce:
1c:9b:e9:0e:b4:0d:b3:34:26:34:34:8b:5a:a6:77:
54:23:f2:d4:3d:fe:a4:15:2f:ea:e7:ad:0a:67:92:
f7:f0:a3:cc:03:2e:cd:38:c1:0c:74:d6:bf:8d:ae:
f1:de:41:a7:66:b7:8b:8e:0d:a0:79:a6:0c:7b:39:
22:27:f5:6c:97:ba:3f:27:d2:bd:44:98:4d:be:5f:
6c:19:15:11:13:d0:59:c6:98:9a:2e:70:58:80:0a:
f7:33:50:4c:f1:5c:08:c2:ad:fe:f4:19:9f:f5:ac:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:65:6B:5A:BA:2B:C7:6C:2B:CE:F4:A2:39:9C:30:02:53:65:EF:AE
X509v3 Authority Key Identifier:
keyid:73:1D:49:CB:20:13:58:EE:9C:DB:EE:91:7E:C2:5C:F5:9E:02:A3:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731D49CB201358EE9CDBEE917EC25CF59E02A3B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.166.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6e:36:70:a1:83:e3:ec:1e:4c:ca:e3:ce:4e:62:d9:05:d1:
ed:79:40:ae:b6:6e:9e:1a:bf:30:e8:b2:69:52:5a:92:4e:0c:
9d:61:c8:e7:ac:53:3a:a4:cb:3a:74:03:9d:73:42:5a:63:a2:
32:ec:7b:e9:13:92:b4:49:24:5c:39:16:4a:6a:3d:44:a8:82:
dc:44:74:fe:f8:9e:ab:3b:a9:54:30:db:c5:5a:6f:ca:ce:c0:
13:3e:3c:3a:75:97:ef:66:09:8a:e1:3a:7b:1f:3c:bf:10:5e:
14:ab:2b:f5:46:c8:ad:91:b9:ce:de:7b:8e:61:79:ce:bb:7a:
38:b0:c0:00:29:44:ad:53:94:28:12:84:ae:0a:5c:2c:66:d2:
80:c7:2f:61:7f:08:1f:87:77:54:ce:00:45:ff:27:1a:e5:50:
d6:5c:f1:09:f4:e2:77:30:00:9a:58:b3:de:c2:b3:5e:bb:8c:
b0:49:c0:c3:70:d3:54:f6:52:2a:00:d0:d2:22:b8:e8:15:3c:
71:3b:21:f8:ac:fb:fa:c3:93:6d:5f:3d:9e:a9:98:b0:eb:2b:
b9:96:6c:c4:31:33:13:e2:33:77:f7:91:90:8a:3e:36:59:3f:
b2:11:0c:fc:76:1f:4d:92:e6:04:d5:d8:2c:1b:9d:fa:44:ad:
20:fe:0a:e2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSRmx+OFVhhaeWiPr3DPzEQi+aCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMxRDQ5Q0IyMDEzNThFRTlDREJFRTkxN0VDMjVDRjU5
RTAyQTNCMjAeFw0yNDExMDEwMDUyNTdaFw0yNTEwMzEwMDU3NTdaMDMxMTAvBgNV
BAMTKEQxNjU2QjVBQkEyQkM3NkMyQkNFRjRBMjM5OUMzMDAyNTM2NUVGQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIzdvCWwVpzXtN977YJfRxNLc
d7wA6jyy7MigNUwJd1ErHTuzTuzMAPuBJtILH/mxDCJtXvdiz38z3akNG2vsECJh
BbC29VuW8GxW5leAml1EfhianLVLs+YuTBK8qdfJIRvDvwfeJhXZY1N48I6wUMzB
aeap4f3wW7gz1Y8feRrZHLUAwraq4j7BE8lklsVahaHQzhyb6Q60DbM0JjQ0i1qm
d1Qj8tQ9/qQVL+rnrQpnkvfwo8wDLs04wQx01r+NrvHeQadmt4uODaB5pgx7OSIn
9WyXuj8n0r1EmE2+X2wZFRET0FnGmJoucFiACvczUEzxXAjCrf70GZ/1rHiXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0WVrWrorx2wrzvSiOZwwAlNl764wHwYDVR0j
BBgwFoAUcx1JyyATWO6c2+6RfsJc9Z4Co7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMC83MzFENDlDQjIwMTM1OEVFOUNEQkVFOTE3RUMyNUNGNTlFMDJBM0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMUQ0OUNCMjAxMzU4RUU5
Q0RCRUU5MTdFQzI1Q0Y1OUUwMkEzQjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzAv
MzEzNjM4MmUzMTM5MzQyZTMxMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjCpjANBgkqhkiG9w0BAQsFAAOCAQEAYG42
cKGD4+weTMrjzk5i2QXR7XlArrZunhq/MOiyaVJakk4MnWHI56xTOqTLOnQDnXNC
WmOiMux76ROStEkkXDkWSmo9RKiC3ER0/vieqzupVDDbxVpvys7AEz48OnWX72YJ
iuE6ex88vxBeFKsr9UbIrZG5zt57jmF5zrt6OLDAAClErVOUKBKErgpcLGbSgMcv
YX8IH4d3VM4ARf8nGuVQ1lzxCfTidzAAmliz3sKzXruMsEnAw3DTVPZSKgDQ0iK4
6BU8cTsh+Kz7+sOTbV89nqmYsOsruZZsxDEzE+Izd/eRkIo+Nlk/shEM/HYfTZLm
BNXYLBud+kStIP4K4g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:58 2025 by rpki-client