Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
File: 3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: kfAfWi6otbbf6xIPpK8DzFDD2o907Wt37bxHo503gBM=
Subject key identifier: D3:26:41:55:3B:9E:60:46:55:0F:3E:84:E2:DB:6F:72:A6:38:9F:C3
Certificate issuer: /CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Certificate serial: 7F1B74775D2FD77C2A5A3B2D230C507CDFDDA307
Authority key identifier: 41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
Signing time: Mon 23 Jan 2023 21:42:16 +0000
ROA not before: Mon 23 Jan 2023 21:37:16 +0000
ROA not after: Mon 22 Jan 2024 21:42:16 +0000
asID: 271724
IP address blocks: 131.221.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:1b:74:77:5d:2f:d7:7c:2a:5a:3b:2d:23:0c:50:7c:df:dd:a3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Validity
Not Before: Jan 23 21:37:16 2023 GMT
Not After : Jan 22 21:42:16 2024 GMT
Subject: CN=D32641553B9E6046550F3E84E2DB6F72A6389FC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:e6:42:14:df:6a:52:55:9f:04:d2:41:4a:
08:ed:a0:66:a5:42:4b:ed:88:05:63:88:62:09:2c:
e6:66:d0:f5:be:d4:e9:a0:3c:0f:6a:75:8a:7a:65:
7b:f1:73:ae:aa:34:80:24:87:2f:a5:fa:23:6b:e7:
66:65:f4:6a:1b:c7:61:dd:8b:bd:8e:9e:b2:05:5c:
a6:55:d0:c9:30:52:9b:c9:21:c9:47:a8:7e:14:cb:
d9:b1:cf:90:be:7f:e5:e1:e2:74:97:e8:2a:7d:ba:
5c:9f:5e:f4:53:a1:c1:a4:72:7e:de:f0:0e:71:fe:
ca:ee:01:5e:7e:ca:1e:49:cb:26:d6:03:54:6e:c3:
42:4c:0a:ab:d7:99:a0:ed:f9:24:56:e1:f1:99:49:
50:4f:ac:89:a8:b1:b7:b0:5f:f7:3f:fd:56:ea:7c:
49:c7:95:a1:21:d3:60:a1:9f:bf:70:36:60:48:33:
39:b8:b5:98:a9:c7:76:ca:1b:8f:35:3b:f2:c4:6f:
e9:fd:fc:63:e5:49:a0:29:02:c7:c0:b0:df:7c:4e:
ed:af:7a:94:55:bc:56:99:bb:e4:61:96:11:5a:58:
64:45:c5:8f:65:64:5a:78:6f:36:37:a5:2f:4d:59:
ea:b0:3d:29:15:99:4c:d7:7d:83:be:15:44:21:a9:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:26:41:55:3B:9E:60:46:55:0F:3E:84:E2:DB:6F:72:A6:38:9F:C3
X509v3 Authority Key Identifier:
keyid:41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/41837C1CF0891C60BB3718E09EE5586C0EBC3597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.68.0/22
Signature Algorithm: sha256WithRSAEncryption
71:f1:a3:37:0a:57:12:0f:7f:9b:c2:92:ae:60:4e:f3:cd:4b:
65:99:d4:75:a1:7c:31:5e:99:36:67:32:34:a1:6b:7e:fc:10:
12:67:26:b2:f0:80:a1:9a:eb:5c:c4:32:d3:bd:bc:47:13:38:
5a:bc:d2:e3:78:eb:4a:d7:d7:b7:3b:e2:8c:be:09:e9:57:6d:
5d:ba:3a:5f:ab:98:70:30:2b:dd:a2:d0:96:bc:48:be:11:39:
75:1e:2b:fc:2b:12:0a:45:5b:f5:da:f9:31:1b:b9:24:8c:05:
91:ba:35:d8:c8:95:19:fb:d8:54:6a:23:35:1c:89:db:27:24:
73:65:80:6c:0b:d9:26:ef:13:ab:ef:88:7d:05:bd:ba:05:d8:
80:16:e9:bd:06:37:14:02:de:61:c3:d0:4a:7e:b3:b2:04:44:
83:67:b0:9c:83:cc:f0:76:da:10:c6:ad:51:b2:94:4e:62:45:
0d:57:d1:df:cb:59:4f:4a:75:80:a6:c7:51:12:01:bc:8e:aa:
0a:84:f6:21:49:19:7b:43:ed:13:b1:64:e6:21:a5:2f:1c:dc:
3a:aa:91:07:d7:c9:e7:ec:f3:63:61:d2:1d:63:3b:d1:f0:87:
5d:c6:0d:c1:25:83:79:13:3c:fd:88:0b:e2:14:6d:30:99:91:
80:df:b3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:04 2025 by rpki-client