Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/3133312e37322e39362e302f32322d3234203d3e203631373236.roa
File: 3133312e37322e39362e302f32322d3234203d3e203631373236.roa (raw, json)
Hash identifier: T4l1Rdp+if5x2GwVENwJ5EG4S5U5hpq/S6oNIsW4FsY=
Subject key identifier: 6D:B8:DD:E5:1E:7A:08:69:74:AF:52:29:15:50:FC:DF:A0:C9:F2:88
Certificate issuer: /CN=31913C696443B8596EC7722D368B4749C287A025
Certificate serial: 5BAEE4C105A1326D0D746F9F958F182684E2BE2B
Authority key identifier: 31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/3133312e37322e39362e302f32322d3234203d3e203631373236.roa
Signing time: Thu 06 Mar 2025 04:20:43 +0000
ROA not before: Thu 06 Mar 2025 04:15:43 +0000
ROA not after: Thu 05 Mar 2026 04:20:43 +0000
asID: 61726
IP address blocks: 131.72.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ae:e4:c1:05:a1:32:6d:0d:74:6f:9f:95:8f:18:26:84:e2:be:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31913C696443B8596EC7722D368B4749C287A025
Validity
Not Before: Mar 6 04:15:43 2025 GMT
Not After : Mar 5 04:20:43 2026 GMT
Subject: CN=6DB8DDE51E7A086974AF52291550FCDFA0C9F288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:3f:66:c7:00:84:bd:ba:84:ce:bc:63:a1:
5f:fc:4c:11:a7:4b:33:ae:3c:7b:6c:3c:dc:67:6d:
05:99:fe:3e:5a:db:05:58:81:ae:33:47:c9:9e:ad:
a8:4e:43:48:e7:27:d1:45:82:f3:c9:26:85:f8:11:
3a:4e:fc:5d:c0:79:07:7e:1c:81:7c:77:81:c3:5c:
b7:03:7e:bd:69:32:d5:02:22:c9:1b:00:c7:08:70:
b5:89:a0:d8:f0:a1:1e:e9:78:92:a8:a7:7c:1e:b6:
4b:16:b2:24:49:f5:93:c4:01:26:ca:90:ff:cd:cb:
c6:77:d1:9f:6d:c6:a0:57:89:46:4e:4e:2e:8b:98:
30:e3:03:c2:52:f1:62:63:44:0c:46:8d:15:9f:3d:
7b:f0:a6:b3:4d:87:c6:20:99:8e:5a:3e:e3:b0:06:
f0:59:e7:85:45:3b:ca:c1:35:a1:97:4e:93:46:f0:
5a:87:20:5e:fa:5f:91:34:44:db:76:33:a6:bf:01:
85:16:55:a1:c9:0a:19:f4:3f:87:87:66:a7:6e:85:
79:1f:b0:58:e6:34:6d:7a:0c:68:f4:27:3d:4d:98:
00:7a:3a:7f:54:0b:d3:df:11:95:31:de:95:ce:0d:
c1:8f:d8:04:14:18:0b:f7:e1:95:13:74:94:da:ae:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B8:DD:E5:1E:7A:08:69:74:AF:52:29:15:50:FC:DF:A0:C9:F2:88
X509v3 Authority Key Identifier:
keyid:31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/3133312e37322e39362e302f32322d3234203d3e203631373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.96.0/22
Signature Algorithm: sha256WithRSAEncryption
95:c9:02:1e:bc:5a:12:ab:4c:18:0d:62:62:2d:eb:34:3c:6d:
50:e9:48:fb:b8:72:2f:db:89:44:d3:68:92:d7:cc:39:d2:e2:
27:2e:29:39:fb:96:14:0a:2f:c2:70:32:f7:00:6b:47:93:3e:
5e:34:20:d9:f6:ba:71:47:d8:84:69:ee:51:4a:08:23:ae:9e:
9b:9d:d9:37:59:51:df:69:2c:9c:76:e1:ee:e5:40:27:26:a8:
51:6c:3a:3f:6b:1a:d5:e9:25:75:80:3e:c1:b1:27:3a:46:36:
f0:7a:39:aa:e2:0f:c2:48:a0:1f:91:93:55:70:85:ab:f7:27:
21:35:08:56:88:d4:00:8c:06:1a:c5:27:d2:9f:9b:d2:10:d8:
19:48:a5:c4:85:2d:92:90:fe:f9:40:20:d0:2f:f1:6f:e7:80:
44:04:83:db:9b:97:64:c6:51:21:ee:c3:29:f2:ea:d2:04:11:
48:87:85:38:7e:6a:7a:ad:a2:b1:d9:1b:01:90:26:12:95:67:
15:76:59:47:31:e5:b6:36:3d:45:73:a3:fc:d2:64:a1:08:d2:
ad:0c:d1:20:0b:d7:ef:13:b9:d7:96:3e:74:55:11:b7:d6:2f:
8d:51:e5:8d:0a:d6:75:83:00:df:c3:bc:ab:a6:e1:cb:1f:2b:
06:13:95:ae
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUW67kwQWhMm0NdG+flY8YJoTiviswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5MTNDNjk2NDQzQjg1OTZFQzc3MjJEMzY4QjQ3NDlD
Mjg3QTAyNTAeFw0yNTAzMDYwNDE1NDNaFw0yNjAzMDUwNDIwNDNaMDMxMTAvBgNV
BAMTKDZEQjhEREU1MUU3QTA4Njk3NEFGNTIyOTE1NTBGQ0RGQTBDOUYyODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6z9mxwCEvbqEzrxjoV/8TBGn
SzOuPHtsPNxnbQWZ/j5a2wVYga4zR8merahOQ0jnJ9FFgvPJJoX4ETpO/F3AeQd+
HIF8d4HDXLcDfr1pMtUCIskbAMcIcLWJoNjwoR7peJKop3wetksWsiRJ9ZPEASbK
kP/Ny8Z30Z9txqBXiUZOTi6LmDDjA8JS8WJjRAxGjRWfPXvwprNNh8YgmY5aPuOw
BvBZ54VFO8rBNaGXTpNG8FqHIF76X5E0RNt2M6a/AYUWVaHJChn0P4eHZqduhXkf
sFjmNG16DGj0Jz1NmAB6On9UC9PfEZUx3pXODcGP2AQUGAv34ZUTdJTarspbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUbbjd5R56CGl0r1IpFVD836DJ8ogwHwYDVR0j
BBgwFoAUMZE8aWRDuFlux3ItNotHScKHoCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGh3QlkycHdVRVV6cDJhWnVMQ1doNUNQV0NxOHI0WGZZZTM0OXZnWTFp
NWgvMS8zMTkxM0M2OTY0NDNCODU5NkVDNzcyMkQzNjhCNDc0OUMyODdBMDI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOTEzQzY5NjQ0M0I4NTk2
RUM3NzIyRDM2OEI0NzQ5QzI4N0EwMjUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhod0JZMnB3VUVVenAyYVp1TENXaDVDUFdDcThyNFhmWWUzNDl2Z1kxaTVoLzEv
MzEzMzMxMmUzNzMyMmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM3
MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAoNIYDANBgkqhkiG9w0BAQsFAAOCAQEAlckCHrxaEqtM
GA1iYi3rNDxtUOlI+7hyL9uJRNNoktfMOdLiJy4pOfuWFAovwnAy9wBrR5M+XjQg
2fa6cUfYhGnuUUoII66em53ZN1lR32ksnHbh7uVAJyaoUWw6P2sa1ekldYA+wbEn
OkY28Ho5quIPwkigH5GTVXCFq/cnITUIVojUAIwGGsUn0p+b0hDYGUilxIUtkpD+
+UAg0C/xb+eARASD25uXZMZRIe7DKfLq0gQRSIeFOH5qeq2isdkbAZAmEpVnFXZZ
RzHltjY9RXOj/NJkoQjSrQzRIAvX7xO515Y+dFURt9YvjVHljQrWdYMA38O8q6bh
yx8rBhOVrg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:48 2025 by rpki-client