Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa
File: 3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier: l41JbHgp/LkPX8JXGBrVbFG4tnhQ/Azl6Eppli7cRwg=
Subject key identifier: 61:49:19:82:28:8D:E7:01:5B:F3:2C:63:2C:7F:EF:42:EA:49:46:D2
Certificate issuer: /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial: 4D352218A695F5CF06CCF982DBA6591740B59D99
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa
Signing time: Thu 07 Nov 2024 20:54:50 +0000
ROA not before: Thu 07 Nov 2024 20:49:50 +0000
ROA not after: Thu 06 Nov 2025 20:54:50 +0000
asID: 263665
IP address blocks: 131.161.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:35:22:18:a6:95:f5:cf:06:cc:f9:82:db:a6:59:17:40:b5:9d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Validity
Not Before: Nov 7 20:49:50 2024 GMT
Not After : Nov 6 20:54:50 2025 GMT
Subject: CN=61491982288DE7015BF32C632C7FEF42EA4946D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:fb:13:a4:c0:b3:89:51:25:b2:05:72:33:
34:c0:bd:d4:0e:9b:46:44:15:fa:fe:06:be:a5:ef:
31:9c:0a:72:29:d2:cc:8d:d5:b6:58:5a:97:32:47:
a1:de:49:e1:09:53:e5:64:60:c8:61:b5:92:bd:c5:
be:b0:94:f4:19:42:e7:86:9d:88:52:db:c9:30:94:
f0:e2:8e:0e:f4:0d:ee:cd:6a:7d:9c:97:e9:94:bc:
c8:4b:61:a0:81:5c:bc:dc:6e:9a:08:12:7f:87:a2:
f9:26:6d:b0:8a:4b:f4:26:71:9b:47:ad:4e:f1:25:
fd:14:5e:44:2e:be:9b:df:8e:cc:fe:29:d7:80:9a:
b6:b6:89:e6:5d:88:13:f7:d8:eb:0c:04:ca:83:51:
c6:c9:85:0a:a5:10:35:50:e5:e1:80:52:aa:7d:6a:
71:21:d2:fe:54:59:d3:a0:81:c8:b0:ad:fd:d6:6c:
84:5d:27:4f:cb:2f:3d:c2:8b:0e:56:74:98:cb:3f:
8f:51:ed:57:9b:b0:e8:d3:cb:7a:f3:ba:76:d5:b2:
99:9f:4b:32:81:f3:c5:b3:bd:c8:b9:e6:98:11:15:
cb:66:d8:07:f5:cc:ba:7e:0f:f1:cd:3b:97:24:fd:
7a:a4:ac:51:84:10:27:ef:7f:fd:84:0f:ab:79:4b:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:49:19:82:28:8D:E7:01:5B:F3:2C:63:2C:7F:EF:42:EA:49:46:D2
X509v3 Authority Key Identifier:
keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.108.0/22
Signature Algorithm: sha256WithRSAEncryption
04:ab:ae:9c:a9:e2:91:36:a9:39:41:38:d0:ce:b5:7c:3a:55:
ac:f7:9c:33:6f:bc:1a:f7:70:79:1c:a0:62:ed:cd:ce:9d:34:
9e:80:74:da:1f:54:fa:f6:2d:92:a0:79:30:e4:4b:85:0d:ad:
7b:ad:60:5e:d9:fd:91:62:1c:54:50:fd:dc:4e:02:fd:94:bb:
53:7f:c3:ac:a5:94:d4:6b:46:0a:83:b1:e2:19:f7:fd:78:ac:
28:5b:61:f4:42:be:02:2e:89:5a:91:7d:d8:2d:ad:b3:58:ce:
dd:f3:74:b6:60:d4:a7:73:b8:d0:0b:ed:c7:79:e3:75:2d:0b:
ca:a8:11:32:c9:fc:13:07:e2:38:41:a8:68:90:82:61:2b:6a:
87:8a:85:b8:9f:89:6f:13:6c:d7:9a:9f:02:c0:d4:d5:4b:f8:
d1:9a:0b:72:0c:9e:59:c2:b7:b9:ef:e9:46:77:f4:76:b8:76:
54:41:29:77:ff:0e:cb:fa:25:4d:49:a5:18:34:c9:4b:20:0c:
25:30:fb:3a:5b:fc:04:b1:f7:28:36:e6:f8:4e:bf:74:94:fb:
40:41:7e:13:1b:18:0c:e7:8c:77:65:c3:27:29:41:62:53:c3:
7c:7e:70:76:9d:d8:17:2b:e0:90:9b:d3:02:be:84:75:ef:e9:
57:b4:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:45:15 2025 by rpki-client