Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3136382e3132312e3139362e302f32322d3332203d3e20323632383933.roa
File: 3136382e3132312e3139362e302f32322d3332203d3e20323632383933.roa (raw, json)
Hash identifier: ysykTwf8SmWnj1Wt1kZrb6/IgjZD8YOhuussc0KoRio=
Subject key identifier: C2:18:03:1C:30:AA:A1:09:9C:E0:18:5A:A5:75:2C:54:D1:08:42:1A
Certificate issuer: /CN=4502CD1B49644F16402D764130FC71B676EC91F0
Certificate serial: 7941A8202D6093672C201B2F76FCD5EEDF5461C3
Authority key identifier: 45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3136382e3132312e3139362e302f32322d3332203d3e20323632383933.roa
Signing time: Wed 31 Jan 2024 12:36:51 +0000
ROA not before: Wed 31 Jan 2024 12:31:51 +0000
ROA not after: Wed 29 Jan 2025 12:36:51 +0000
asID: 262893
IP address blocks: 168.121.196.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:41:a8:20:2d:60:93:67:2c:20:1b:2f:76:fc:d5:ee:df:54:61:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502CD1B49644F16402D764130FC71B676EC91F0
Validity
Not Before: Jan 31 12:31:51 2024 GMT
Not After : Jan 29 12:36:51 2025 GMT
Subject: CN=C218031C30AAA1099CE0185AA5752C54D108421A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:b8:a3:69:53:1e:4c:fb:ec:30:c8:63:56:
70:04:da:ab:30:94:12:7e:a4:6a:e3:2b:a5:66:3a:
6f:15:d6:37:19:44:46:62:7c:bc:99:41:fe:e8:8e:
99:f2:19:c5:fe:d3:51:d9:3c:eb:41:d7:62:f2:d4:
d6:1a:a4:07:db:30:25:e3:86:af:23:2c:a1:dd:d0:
81:0c:01:9d:db:80:76:fd:d6:7e:12:d2:fe:ac:74:
21:68:58:86:30:da:6c:c7:b0:ac:06:34:ce:91:85:
eb:df:10:97:0c:78:b5:05:cd:72:70:ae:65:f1:90:
84:61:2e:48:34:96:51:8d:f7:71:bd:21:92:61:5b:
59:9b:c7:51:2a:eb:66:85:46:4e:bd:3d:cb:1e:45:
c4:21:a9:1f:1b:85:ac:6b:3d:a2:48:a5:7f:ae:98:
72:aa:df:6b:aa:69:be:a7:3c:e9:ed:90:dd:84:d7:
14:75:2b:c8:23:1c:71:42:d2:be:79:bb:fb:62:c9:
88:44:9b:38:b5:8f:28:8b:fa:48:a8:db:28:1d:cb:
0d:47:95:b2:4a:72:96:a0:7d:86:5e:23:4e:a3:5b:
d3:47:5d:07:f9:4d:eb:53:3f:b0:7a:4a:2e:24:6b:
5c:f9:7b:f7:c7:d5:58:18:9b:81:f4:1a:78:9c:6d:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:18:03:1C:30:AA:A1:09:9C:E0:18:5A:A5:75:2C:54:D1:08:42:1A
X509v3 Authority Key Identifier:
keyid:45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/4502CD1B49644F16402D764130FC71B676EC91F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3136382e3132312e3139362e302f32322d3332203d3e20323632383933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.196.0/22
Signature Algorithm: sha256WithRSAEncryption
41:54:1d:e1:24:20:e7:83:b1:a0:4e:a1:23:d8:f5:24:37:9a:
f8:7a:f2:23:b6:a7:58:c4:9c:cd:9a:a5:d6:65:56:97:07:df:
47:21:c9:7e:11:eb:83:ad:65:e6:86:9c:d7:09:ef:0d:69:06:
f1:68:04:1b:f3:fb:64:92:76:3a:b5:c6:52:5c:25:44:a2:d9:
9e:4d:66:e1:57:4f:5e:33:cb:ae:bc:7c:69:af:2c:e0:86:0e:
c9:95:47:95:10:39:dc:8a:b1:fb:e2:ba:0c:20:29:f7:27:c1:
3f:e6:71:a1:2d:d4:22:ab:09:f8:c9:4c:f6:30:0c:91:4a:c1:
41:9e:3c:ca:5d:bb:9d:c0:cf:a9:31:19:43:83:4c:a3:fc:8f:
fd:45:44:bc:0b:2e:f0:ec:52:ef:71:91:39:7d:4b:79:00:25:
fe:76:58:6c:31:b8:e7:b9:82:0c:07:6a:78:00:58:f9:24:67:
06:4d:41:62:b4:53:e1:0a:ce:63:25:24:26:ae:7f:94:9a:a1:
68:3e:b0:c1:ae:8a:ad:22:39:b0:13:24:f8:74:25:1c:98:52:
1f:64:0d:43:33:9f:0a:54:82:48:36:41:8a:30:19:35:08:8b:
69:76:a7:2d:b6:73:0a:31:7b:90:26:ce:ef:4f:3c:90:bb:23:
77:e1:57:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:48:11 2025 by rpki-client