Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3138382e302f32322d3234203d3e20323634333932.roa
File: 3133312e3136312e3138382e302f32322d3234203d3e20323634333932.roa (raw, json)
Hash identifier: 11QW2CPzt6twFUXHPTslykjxYhPRdjk5bn0iIv6BYmo=
Subject key identifier: 33:E0:28:A2:FC:C4:0F:2A:E3:68:FC:C6:C5:EE:C8:00:51:AD:15:C3
Certificate issuer: /CN=130B968B1EDC329E460C55006CCB5A9D396FEF29
Certificate serial: 1E7F16B136211A7863BB86151ADF733A0CCC85EA
Authority key identifier: 13:0B:96:8B:1E:DC:32:9E:46:0C:55:00:6C:CB:5A:9D:39:6F:EF:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3138382e302f32322d3234203d3e20323634333932.roa
Signing time: Tue 07 Nov 2023 15:19:12 +0000
ROA not before: Tue 07 Nov 2023 15:14:12 +0000
ROA not after: Tue 05 Nov 2024 15:19:12 +0000
asID: 264392
IP address blocks: 131.161.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7f:16:b1:36:21:1a:78:63:bb:86:15:1a:df:73:3a:0c:cc:85:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130B968B1EDC329E460C55006CCB5A9D396FEF29
Validity
Not Before: Nov 7 15:14:12 2023 GMT
Not After : Nov 5 15:19:12 2024 GMT
Subject: CN=33E028A2FCC40F2AE368FCC6C5EEC80051AD15C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:df:5f:03:1f:7a:06:d5:e2:a2:d1:53:3e:
34:aa:3e:4d:34:db:a6:9f:18:a3:84:0d:88:34:fb:
b7:ca:12:48:e2:e7:da:87:8c:97:a7:5f:3f:ac:70:
42:b9:c7:0a:20:58:00:21:67:79:47:a4:6f:72:d7:
a4:e8:62:27:a2:15:34:81:ac:6c:66:03:1a:a4:62:
6c:81:46:6f:34:a0:f5:51:b1:33:5f:3e:3c:e7:f6:
e2:8f:99:60:ca:aa:a9:ff:ee:bd:fc:c8:72:cb:29:
50:f5:51:c8:90:d3:92:67:8f:de:98:d7:24:a2:a4:
8c:1f:03:bc:a7:9b:8b:ee:5b:ce:35:ae:d5:35:1d:
2c:2c:dd:32:00:da:e0:43:d1:79:b9:42:42:72:70:
1b:77:9d:84:c7:a8:90:c0:0a:b8:08:b5:7d:9e:96:
9b:8c:a4:28:54:80:5b:5e:21:85:45:4f:d2:58:f5:
a2:18:e7:d4:59:13:b2:15:f4:50:ba:bc:ba:1b:3a:
26:e2:3d:34:dd:f0:75:25:81:ac:8e:27:a2:dd:eb:
55:4a:ca:88:77:c1:98:37:43:95:3a:a4:c5:21:59:
6f:28:d5:0a:7c:32:b6:23:8a:f6:e4:8f:10:4e:21:
ed:17:89:15:34:f3:47:24:1a:3f:2e:70:f7:df:8a:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E0:28:A2:FC:C4:0F:2A:E3:68:FC:C6:C5:EE:C8:00:51:AD:15:C3
X509v3 Authority Key Identifier:
keyid:13:0B:96:8B:1E:DC:32:9E:46:0C:55:00:6C:CB:5A:9D:39:6F:EF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3138382e302f32322d3234203d3e20323634333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.188.0/22
Signature Algorithm: sha256WithRSAEncryption
91:69:4e:07:02:cc:d5:4e:39:99:34:82:b3:8c:37:41:b2:79:
f7:ab:39:59:0b:08:13:91:d8:fe:94:99:14:61:7e:92:34:83:
d7:87:39:78:0f:8f:1c:14:d3:da:a2:d0:01:54:99:c0:2b:e8:
28:b6:9e:f0:95:18:55:80:79:fe:57:c1:a2:3a:8e:ea:a7:63:
c5:21:37:bb:e2:3f:ad:aa:e3:92:dd:8f:1e:d3:40:ee:fe:dd:
26:a5:0b:bd:19:f6:88:f8:cb:f1:37:71:34:46:0b:fb:22:8d:
e5:45:8c:db:6a:83:6b:83:e0:84:a3:14:6b:d2:f7:48:e0:7a:
8a:a8:04:fb:ee:69:3f:f2:ad:73:16:a2:97:7e:f9:e0:e1:48:
4d:1d:56:8f:8e:48:e0:5b:f2:f6:1d:dc:30:03:d2:b2:1d:fa:
81:32:9e:57:af:aa:07:68:88:11:41:c0:40:d1:70:7e:3d:ab:
72:4f:bd:85:95:f3:a3:96:a7:c0:27:28:57:0e:b5:4f:c4:12:
8d:39:50:8f:e4:de:da:25:09:f9:b1:f7:12:8b:90:4b:eb:19:
68:5d:4b:85:53:a3:5b:bc:fc:84:9e:26:5f:a1:63:d9:74:ac:
c1:25:01:76:50:30:ef:df:fc:cb:31:63:2f:df:b9:67:04:61:
6e:3a:76:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:51:29 2025 by rpki-client