Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31352e302f32342d3234203d3e203631363639.roa
File: 3133312e3130382e31352e302f32342d3234203d3e203631363639.roa (raw, json)
Hash identifier: FuZJXzu7mRiEA+DF1Z9PBYWVg1X0y2Wvpoe2uZoTni0=
Subject key identifier: 00:35:A6:E2:53:85:20:E9:9F:93:98:46:DE:DE:8E:41:26:C4:0F:DC
Certificate issuer: /CN=D42750A9ACE85252FB670DFF16D2167D0340EFB3
Certificate serial: 37DEE50F367482678C1D61D22F22B81562599E19
Authority key identifier: D4:27:50:A9:AC:E8:52:52:FB:67:0D:FF:16:D2:16:7D:03:40:EF:B3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D42750A9ACE85252FB670DFF16D2167D0340EFB3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31352e302f32342d3234203d3e203631363639.roa
Signing time: Wed 18 May 2022 13:59:28 +0000
ROA not before: Wed 18 May 2022 13:54:28 +0000
ROA not after: Wed 17 May 2023 13:59:28 +0000
asID: 61669
IP address blocks: 131.108.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:de:e5:0f:36:74:82:67:8c:1d:61:d2:2f:22:b8:15:62:59:9e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D42750A9ACE85252FB670DFF16D2167D0340EFB3
Validity
Not Before: May 18 13:54:28 2022 GMT
Not After : May 17 13:59:28 2023 GMT
Subject: CN=0035A6E2538520E99F939846DEDE8E4126C40FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:c1:48:7c:1d:3a:74:d3:cd:dc:12:16:b8:
25:91:9a:9d:bd:07:91:24:89:ac:bd:18:cb:25:01:
8c:c4:3e:99:f2:07:4b:50:33:9d:13:8a:b5:0c:1e:
3a:36:31:dc:b0:00:68:c2:a8:53:be:0e:2f:e7:7e:
41:47:c4:7e:f3:63:8c:f0:dc:0d:c2:ac:6d:65:ac:
2a:3c:c7:53:f8:b7:31:67:23:76:ee:7a:ee:95:b3:
57:8e:79:df:c1:21:ae:72:ca:86:09:4e:a0:0a:53:
9d:09:f4:d8:69:c7:6f:39:bd:ae:f2:39:5e:0e:92:
ec:28:50:ed:eb:0b:c1:4c:71:af:e4:20:4a:dd:6d:
7d:82:83:6d:a8:12:76:65:5c:b9:8c:09:e9:08:f0:
8d:0c:8f:cd:02:f2:3d:1b:e2:11:99:1b:9d:16:5a:
16:b1:bd:84:19:3e:ea:2a:dc:eb:75:66:4a:3c:f9:
d6:71:fc:08:37:4a:d4:89:68:24:12:aa:a1:1a:35:
ca:cb:83:08:12:b0:ee:b0:e2:8d:39:d0:ad:3b:24:
c1:13:e8:f9:48:39:a2:e6:f1:34:08:df:31:b0:d0:
90:e3:e4:1d:f4:1e:5d:d0:94:bb:6c:56:e6:ac:e0:
28:b4:1b:e3:ea:b3:3f:b9:91:f7:d6:e9:ba:7a:52:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:35:A6:E2:53:85:20:E9:9F:93:98:46:DE:DE:8E:41:26:C4:0F:DC
X509v3 Authority Key Identifier:
keyid:D4:27:50:A9:AC:E8:52:52:FB:67:0D:FF:16:D2:16:7D:03:40:EF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/D42750A9ACE85252FB670DFF16D2167D0340EFB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D42750A9ACE85252FB670DFF16D2167D0340EFB3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31352e302f32342d3234203d3e203631363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.15.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1d:43:d7:7a:44:e7:7e:5d:3c:bf:e1:1f:77:54:4f:fa:fe:
a3:12:15:9e:29:38:b0:d0:65:4b:32:a0:75:ab:ae:82:18:78:
80:0f:b7:d3:cb:92:72:83:17:3a:49:7d:b6:a0:66:45:81:8a:
b0:0b:79:41:21:5a:12:2e:2c:84:b5:26:d3:92:06:b1:fa:f1:
6d:b4:ed:a8:64:c7:c9:de:d6:d8:f4:fa:80:72:75:75:ed:da:
de:ca:4d:db:46:c2:9a:b3:e0:40:f1:27:af:00:12:06:79:a2:
da:b9:f7:1c:84:3d:f0:79:98:b1:2a:7b:f0:94:60:97:8c:fd:
da:b6:ea:b1:5d:3e:86:a1:58:cb:53:9a:39:f8:a9:c6:b5:65:
af:e7:e3:f4:86:0f:66:e9:b2:c2:e1:5f:e0:b7:a9:ee:ba:cc:
45:7a:f7:88:aa:8a:08:43:3f:a1:16:37:b8:2b:56:6b:69:0c:
bf:ac:5a:97:1c:e7:ac:d7:ba:9c:34:63:84:cd:f9:2c:ef:31:
7c:f4:0e:12:9e:3b:ad:03:a8:ab:e1:71:ef:4e:7d:3a:d7:af:
f7:36:52:dc:d6:38:fd:4a:3d:b1:43:90:d1:3c:12:51:75:3c:
6b:10:6d:79:67:62:a7:bd:de:e7:be:17:2f:c9:88:60:7d:3e:
8b:ff:01:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:22 2025 by rpki-client