Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31352e302f32342d3234203d3e20323731363136.roa
File: 3133312e3130382e31352e302f32342d3234203d3e20323731363136.roa (raw, json)
Hash identifier: Dz4t2GHS8/k1MHxPMK50g05ncX3j3p8hbajPUQAR3vI=
Subject key identifier: C4:24:05:A4:FC:ED:61:38:41:29:C2:D2:E0:5C:23:D6:F1:57:A6:E6
Certificate issuer: /CN=D42750A9ACE85252FB670DFF16D2167D0340EFB3
Certificate serial: 2FE3D091F984354F4ECA986691EC54C23AA39B7E
Authority key identifier: D4:27:50:A9:AC:E8:52:52:FB:67:0D:FF:16:D2:16:7D:03:40:EF:B3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D42750A9ACE85252FB670DFF16D2167D0340EFB3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31352e302f32342d3234203d3e20323731363136.roa
Signing time: Mon 25 Apr 2022 19:41:30 +0000
ROA not before: Mon 25 Apr 2022 19:36:30 +0000
ROA not after: Mon 24 Apr 2023 19:41:30 +0000
asID: 271616
IP address blocks: 131.108.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e3:d0:91:f9:84:35:4f:4e:ca:98:66:91:ec:54:c2:3a:a3:9b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D42750A9ACE85252FB670DFF16D2167D0340EFB3
Validity
Not Before: Apr 25 19:36:30 2022 GMT
Not After : Apr 24 19:41:30 2023 GMT
Subject: CN=C42405A4FCED61384129C2D2E05C23D6F157A6E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:a4:fd:18:15:01:88:81:65:c3:b6:b7:4c:
fd:98:ed:47:49:bc:08:ca:e5:22:1e:01:d8:55:a4:
a4:6c:71:ba:e8:3b:d5:ab:c1:c4:70:c8:0f:46:df:
ba:c3:61:14:58:00:c1:27:63:db:35:a4:15:ac:4c:
bc:32:df:64:a7:c1:e7:3e:fd:8c:cc:c2:99:09:b3:
8a:7f:65:0c:76:22:78:68:26:65:ce:06:86:f3:0a:
c0:f9:a7:e6:bf:db:45:e4:a0:43:86:32:54:49:66:
e8:7a:88:b6:51:f4:93:df:d9:eb:f7:10:67:d7:6e:
c0:f4:5e:bd:b5:76:69:4c:8f:f3:af:6f:77:e1:41:
51:f2:fd:da:8d:29:f2:60:4f:b0:ff:dc:89:6d:e3:
61:2d:34:8d:02:80:c6:c9:87:be:b4:b9:3b:2a:9a:
b5:09:a5:7b:64:04:6a:06:54:4a:d3:07:17:f0:db:
5e:09:3a:c4:72:12:28:95:f2:16:96:e3:7a:56:3a:
a3:73:23:a7:9e:05:c7:13:f8:b0:20:9b:db:32:01:
26:cf:3a:c3:ac:dd:0a:d3:6e:d6:d1:65:d0:af:0f:
42:93:26:16:e8:63:9a:fc:9d:87:eb:94:04:ee:c8:
30:85:85:09:c7:c7:27:1b:ad:a2:1e:7d:8f:20:47:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:24:05:A4:FC:ED:61:38:41:29:C2:D2:E0:5C:23:D6:F1:57:A6:E6
X509v3 Authority Key Identifier:
keyid:D4:27:50:A9:AC:E8:52:52:FB:67:0D:FF:16:D2:16:7D:03:40:EF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/D42750A9ACE85252FB670DFF16D2167D0340EFB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D42750A9ACE85252FB670DFF16D2167D0340EFB3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31352e302f32342d3234203d3e20323731363136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:1e:27:51:67:47:34:0b:66:07:eb:5b:24:4b:22:13:22:30:
7d:43:0f:ed:28:f1:93:aa:89:83:66:a3:c3:54:59:3a:ab:27:
22:9a:5f:cd:0c:29:e5:80:a0:9b:ca:6b:e2:fe:e7:2b:0e:56:
6e:fd:70:2f:43:79:0a:fe:f4:56:f9:79:d0:2e:97:fb:72:a9:
04:54:4c:ff:8d:e8:26:3e:e5:35:9c:1c:13:b4:36:4b:48:31:
3f:32:8f:db:9c:92:ab:c4:22:2b:2d:6c:59:f2:01:42:ad:05:
44:b2:d3:e5:c1:60:7b:be:8e:1f:b0:65:b4:13:09:24:54:86:
76:af:99:69:92:b3:fa:5b:78:4c:e2:39:3d:d1:e5:18:91:3e:
5f:ce:1b:e8:df:4e:eb:1a:b1:cb:64:1a:88:98:88:ca:fb:55:
cf:e9:9c:cc:cb:7e:be:e6:47:49:c8:47:69:ec:c8:dc:63:6b:
c7:4f:d2:26:67:8e:5e:f0:13:b8:5d:1a:35:e5:fb:b2:6d:d8:
7d:ee:56:a0:71:5b:d7:30:bf:75:02:13:07:6d:80:29:ac:55:
53:27:b2:c7:87:35:ab:17:a9:20:d1:28:7d:86:c5:b0:f5:74:
85:48:26:10:9c:77:e3:c1:77:8d:c0:c8:67:ff:3f:e6:de:04:
41:5e:57:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:21 2025 by rpki-client