Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32332d3233203d3e20323730393536.roa
File: 3133312e3232312e37362e302f32332d3233203d3e20323730393536.roa (raw, json)
Hash identifier: tdpcbKgQcGyZpAXLKpAvcrpJlv6R4Z+ZF4KxIGecqw0=
Subject key identifier: DA:33:50:93:33:06:A1:B2:8C:94:C8:75:FE:B1:BC:87:A8:4D:88:4A
Certificate issuer: /CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
Certificate serial: 3C2CC9B66A210B0E71EDE8C2A94509E66D117BF0
Authority key identifier: BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32332d3233203d3e20323730393536.roa
Signing time: Fri 12 May 2023 00:26:29 +0000
ROA not before: Fri 12 May 2023 00:21:29 +0000
ROA not after: Fri 10 May 2024 00:26:29 +0000
asID: 270956
IP address blocks: 131.221.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:2c:c9:b6:6a:21:0b:0e:71:ed:e8:c2:a9:45:09:e6:6d:11:7b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
Validity
Not Before: May 12 00:21:29 2023 GMT
Not After : May 10 00:26:29 2024 GMT
Subject: CN=DA3350933306A1B28C94C875FEB1BC87A84D884A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:fb:9d:fb:18:0c:88:14:d9:fe:69:07:30:
82:67:93:37:f5:96:8b:38:7d:da:39:0c:8c:0d:d2:
10:0c:71:aa:a8:e5:5f:e3:68:23:3d:5d:76:df:fb:
c0:40:da:c2:14:a5:14:87:e1:07:49:fc:00:81:5d:
08:a1:ac:6d:56:e7:b9:8d:f4:f7:fe:0d:5e:4d:db:
c0:b9:42:00:8a:00:91:10:84:a6:03:c5:68:3e:e2:
65:02:d0:71:04:2c:53:ad:d0:0c:30:2a:84:32:cc:
b5:48:e7:66:cc:dc:e8:58:37:98:04:3e:bd:7d:8a:
4e:80:7a:4c:b1:1b:9c:22:15:90:d6:ae:69:63:b4:
a9:9e:e5:70:7e:0e:91:99:67:e5:5b:3e:ab:e1:cf:
5e:9f:12:4b:3f:66:89:7c:11:27:92:09:f6:8f:fb:
4f:c8:ff:e5:08:42:ef:0e:1b:ea:c2:23:6f:ee:3f:
09:62:ba:c0:32:47:2b:61:47:f0:20:2f:08:f7:85:
d3:cc:2e:03:b0:02:9e:5e:a3:23:6c:cd:f0:59:cc:
9c:c0:c7:b6:2d:35:4e:6e:8a:63:54:54:7e:25:87:
dd:4b:4a:55:58:3c:51:fe:c8:4f:64:fb:09:ba:fc:
2b:1f:3b:af:df:4a:8a:26:08:87:c2:d8:90:3c:37:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:33:50:93:33:06:A1:B2:8C:94:C8:75:FE:B1:BC:87:A8:4D:88:4A
X509v3 Authority Key Identifier:
keyid:BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32332d3233203d3e20323730393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.76.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:08:6f:bc:53:c5:a3:29:60:9a:45:f4:6c:f9:79:39:f9:9c:
0a:d4:9f:87:91:99:78:7b:45:55:7b:54:78:de:5b:db:0c:7c:
46:c3:27:b5:4e:44:90:30:ff:91:6e:e6:5e:9e:23:e1:b8:48:
c0:31:13:ca:bc:f8:63:4e:c6:dc:1c:7d:c3:97:61:10:2a:03:
68:0c:e2:ac:8a:38:9a:d1:31:15:eb:21:52:dd:21:45:95:a5:
7c:29:ed:fe:ef:7a:3d:f0:f1:07:8c:cb:a3:ac:6d:68:d8:4a:
f1:0b:4e:3e:7d:3f:bb:14:0e:bb:fe:c9:36:42:8f:2e:18:fd:
8e:fb:50:2f:5c:63:a7:33:ab:81:ed:96:ab:62:82:64:c5:ab:
04:db:e9:ef:20:d8:36:b6:b9:18:5b:ee:48:ea:03:7a:7e:39:
03:6a:d1:7e:0e:58:d7:df:ed:51:6e:b1:eb:2f:ba:13:8d:a1:
4b:22:29:cf:df:6b:ec:b1:5c:eb:86:86:4e:ca:9f:ba:f2:ae:
54:1e:5f:5c:08:72:30:75:f0:1b:f1:d9:ab:81:0c:3d:ca:65:
9c:69:f5:3f:7f:a8:5a:e3:dd:71:46:de:10:de:9e:21:fc:89:
c5:78:fa:f6:c5:46:11:8d:f4:84:7f:8b:d2:60:00:9d:84:27:
0b:c0:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:52:16 2025 by rpki-client