Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133312e3136312e342e302f32322d3234203d3e203238323031.roa
File: 3133312e3136312e342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: GFdUu225YX2FcCYdcWrb7oqQC5rmKApRQkSG1M4KJWQ=
Subject key identifier: 43:B8:4D:44:66:F3:42:DB:54:2B:7C:BF:ED:70:94:89:92:73:D5:A3
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 32A28356038EA213EEDCD4F03AD9D201B22D889B
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133312e3136312e342e302f32322d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:32:48 +0000
ROA not before: Wed 10 Apr 2024 12:27:48 +0000
ROA not after: Wed 09 Apr 2025 12:32:48 +0000
asID: 28201
IP address blocks: 131.161.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a2:83:56:03:8e:a2:13:ee:dc:d4:f0:3a:d9:d2:01:b2:2d:88:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:27:48 2024 GMT
Not After : Apr 9 12:32:48 2025 GMT
Subject: CN=43B84D4466F342DB542B7CBFED7094899273D5A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:46:0a:2c:8e:e0:c7:24:05:40:97:f4:74:ea:
df:35:c6:17:30:1c:18:84:5c:0b:c7:f4:64:41:1f:
bc:50:70:48:06:89:a4:09:16:3f:c7:ee:b5:3c:97:
ca:37:ed:de:27:04:56:86:70:05:dd:3c:e5:60:3e:
27:b9:11:39:f0:54:3b:80:04:67:35:bc:69:23:9d:
2b:3b:c1:2e:e1:73:a2:51:33:e0:bc:d2:e7:4b:25:
71:ef:0b:43:2a:37:4b:dd:3f:9b:f1:89:70:28:f9:
52:64:b3:f5:1a:42:8a:53:5e:15:24:66:ae:06:74:
a2:fa:85:26:75:73:38:26:a6:39:60:1d:21:5e:ec:
eb:4c:c7:61:f0:9d:41:a8:8d:e4:63:d1:e3:78:6f:
c6:a7:56:5b:88:5e:21:76:19:b5:fa:84:34:84:db:
b1:b3:8f:2c:ed:e8:f3:d5:dd:d2:aa:db:0b:f1:2d:
4a:f1:67:a2:52:7b:b8:f8:a7:e7:78:2f:db:8b:c4:
84:5a:e3:75:15:c9:19:3a:78:61:bc:29:64:d5:fa:
2e:97:50:e6:77:7b:e8:81:60:48:81:4c:ea:77:74:
dc:3a:a0:d0:d5:2e:c6:6d:79:55:66:67:43:f3:95:
8f:d3:bb:fd:eb:b8:69:98:c3:3e:49:b2:d0:32:1d:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B8:4D:44:66:F3:42:DB:54:2B:7C:BF:ED:70:94:89:92:73:D5:A3
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133312e3136312e342e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.4.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:90:b2:ce:36:68:b3:0e:1b:2f:e9:78:ed:1c:0e:6e:2a:ea:
72:1d:c0:c9:85:e1:0a:f9:6b:b5:7f:94:17:9a:c2:e9:b0:f9:
9d:ae:aa:ec:25:df:fa:4d:92:58:30:fc:f8:e1:29:20:97:01:
29:f4:46:c9:a4:16:de:0d:da:9c:3f:fa:f5:7a:9d:cc:b6:70:
c7:f0:5c:9f:03:9a:18:6b:15:57:d6:02:d0:9b:52:4f:20:c3:
9a:ff:5d:8f:2d:6f:db:a9:ce:48:25:72:f8:4f:8d:0d:36:57:
8d:ed:a5:06:06:80:77:27:b5:7b:da:29:7f:af:5d:46:e4:5d:
28:08:b5:cc:21:3a:06:18:8f:ae:62:6f:0c:f9:5a:9b:7d:bf:
b1:b8:8f:b0:1b:be:8c:b2:47:95:69:33:59:d5:30:53:b7:d0:
0c:8d:64:8d:41:52:2c:5a:2d:90:c4:2b:40:ce:aa:6b:40:3c:
dd:dd:15:96:e3:0b:53:3d:82:44:c3:ee:7b:f0:8e:d3:cd:58:
db:ac:ff:db:bb:55:d3:6f:1e:e5:c7:cc:02:dc:a6:89:1f:7d:
a3:b9:7a:d4:de:75:26:f7:6a:7c:31:43:61:ea:c4:14:39:93:
d8:6d:1a:81:07:b6:38:5d:3b:5e:65:4c:3b:e4:4f:9a:ce:c5:
cb:f9:40:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org