Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/3133312e3130382e31322e302f32322d3235203d3e203631363639.roa
File: 3133312e3130382e31322e302f32322d3235203d3e203631363639.roa (raw, json)
Hash identifier: 2iW4Wh8lGCoo6596MR46eQjTmX2NraucKhNaH9GkM1k=
Subject key identifier: 3E:09:A5:C0:9E:2D:FC:EC:82:41:D9:E3:71:77:BE:4D:96:81:97:08
Certificate issuer: /CN=70B3CABC94E867F7B72A9C99774813CAC6A4784D
Certificate serial: 4E1DF087C11393E570A4E1479079756DCA08E625
Authority key identifier: 70:B3:CA:BC:94:E8:67:F7:B7:2A:9C:99:77:48:13:CA:C6:A4:78:4D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70B3CABC94E867F7B72A9C99774813CAC6A4784D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/3133312e3130382e31322e302f32322d3235203d3e203631363639.roa
Signing time: Mon 21 Nov 2022 16:41:22 +0000
ROA not before: Mon 21 Nov 2022 16:36:22 +0000
ROA not after: Mon 20 Nov 2023 16:41:22 +0000
asID: 61669
IP address blocks: 131.108.12.0/22 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:1d:f0:87:c1:13:93:e5:70:a4:e1:47:90:79:75:6d:ca:08:e6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70B3CABC94E867F7B72A9C99774813CAC6A4784D
Validity
Not Before: Nov 21 16:36:22 2022 GMT
Not After : Nov 20 16:41:22 2023 GMT
Subject: CN=3E09A5C09E2DFCEC8241D9E37177BE4D96819708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:4e:7a:a3:76:91:cd:4b:4a:db:2e:c9:1e:
35:ee:79:54:77:ab:0e:f3:59:83:3d:f6:00:ad:19:
06:b4:93:65:d9:b1:37:bb:20:fb:d5:ae:8f:f9:eb:
1d:3d:37:bf:93:9d:b5:fa:98:eb:5e:91:d5:9f:be:
68:d1:9b:69:aa:5f:56:39:94:cc:92:fb:2e:0d:18:
be:d4:1d:fa:1a:ff:61:27:06:d2:0c:1f:aa:3c:15:
d1:8a:cc:92:b3:f9:a4:b7:69:f5:ce:93:47:4d:e5:
e1:84:2b:bb:d2:66:a0:94:15:6f:d7:68:9d:80:cd:
76:88:ad:e6:e4:e4:87:7c:66:22:24:b0:76:91:0b:
b7:4e:66:a5:ca:e9:63:69:e7:31:ca:65:ee:6c:a0:
11:8b:c4:a0:84:42:24:4d:02:13:07:b0:14:83:3f:
eb:31:38:1c:60:60:d7:7a:2c:04:1a:20:10:2f:49:
dc:f2:83:b2:c1:4e:e8:3b:02:2d:69:80:37:07:76:
37:54:67:b3:30:15:29:fd:09:ac:c8:a3:3b:0a:3d:
bc:37:8a:cd:f0:e8:8d:a9:d6:49:6e:2d:89:ff:45:
8c:d7:c2:05:8b:0c:85:f1:fd:45:ff:16:dc:fd:c2:
46:f6:9a:90:e3:e3:99:e3:b4:c5:fe:d8:ee:3e:86:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:09:A5:C0:9E:2D:FC:EC:82:41:D9:E3:71:77:BE:4D:96:81:97:08
X509v3 Authority Key Identifier:
keyid:70:B3:CA:BC:94:E8:67:F7:B7:2A:9C:99:77:48:13:CA:C6:A4:78:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/70B3CABC94E867F7B72A9C99774813CAC6A4784D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70B3CABC94E867F7B72A9C99774813CAC6A4784D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/3133312e3130382e31322e302f32322d3235203d3e203631363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.12.0/22
Signature Algorithm: sha256WithRSAEncryption
97:3c:be:42:84:bd:28:9b:a1:e3:72:d3:77:21:14:1d:84:e5:
bc:ad:af:2a:38:e9:81:a8:28:54:4d:5b:e9:79:74:8f:eb:21:
83:1d:21:82:ae:0a:fa:49:a5:95:28:ef:52:14:37:32:bb:0f:
98:ae:20:95:88:81:c9:62:a0:fd:d0:a5:9b:7b:66:e5:bf:37:
38:92:e5:1f:d3:0d:d6:e3:f3:93:52:c8:5e:dd:06:8a:af:f3:
d9:df:cc:8d:a8:e5:d6:90:09:46:c6:6b:82:57:52:e2:7f:d9:
84:2a:d3:e0:9e:51:8b:09:62:74:db:69:7c:82:9a:05:a3:ad:
25:17:e8:f0:7b:12:f9:23:57:88:23:a8:b3:65:d1:87:5d:61:
01:dd:f3:fd:5a:fe:5b:ef:71:93:50:db:e6:db:c7:8b:b1:32:
a1:ec:5b:57:17:17:b4:53:dc:a2:dc:5a:5c:b4:51:8b:c1:d4:
d0:83:3d:d8:21:a2:f7:b8:f1:02:8f:75:c1:9c:98:60:45:34:
71:c1:04:c1:20:3d:8a:6a:eb:d9:d7:c8:88:d0:75:b4:fd:ca:
25:75:9d:ba:c1:65:b2:81:58:fc:42:81:a0:a5:26:97:0a:30:
8a:64:50:97:02:b1:a9:27:80:b5:b7:31:ec:38:af:55:ab:8e:
6b:1b:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org