Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa
File: 3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa (raw, json)
Hash identifier: UcH9KL+gXWbci9n5DR5uM+OjjCs2bhnSDOQj01d05kw=
Subject key identifier: AA:72:27:AE:3E:FE:E9:A6:D3:5B:57:4A:30:B6:59:83:BF:5E:C6:B9
Certificate issuer: /CN=2A5011451F0E97D5C76B27823EA7E896246FCC89
Certificate serial: 4D63BAEEED8BE42A6EF982D6684273808CAD346C
Authority key identifier: 2A:50:11:45:1F:0E:97:D5:C7:6B:27:82:3E:A7:E8:96:24:6F:CC:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A5011451F0E97D5C76B27823EA7E896246FCC89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa
Signing time: Mon 08 Jan 2024 19:36:44 +0000
ROA not before: Mon 08 Jan 2024 19:31:44 +0000
ROA not after: Mon 06 Jan 2025 19:36:44 +0000
asID: 267429
IP address blocks: 181.191.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:63:ba:ee:ed:8b:e4:2a:6e:f9:82:d6:68:42:73:80:8c:ad:34:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A5011451F0E97D5C76B27823EA7E896246FCC89
Validity
Not Before: Jan 8 19:31:44 2024 GMT
Not After : Jan 6 19:36:44 2025 GMT
Subject: CN=AA7227AE3EFEE9A6D35B574A30B65983BF5EC6B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:eb:2c:fe:50:be:d2:a6:b6:3c:bf:3a:64:
5b:27:a2:71:1c:bb:c9:22:12:91:5f:a5:f3:e8:81:
1c:a2:34:68:10:31:ec:8f:ce:af:3e:74:48:65:08:
d4:03:da:44:a8:23:9e:b1:50:b8:4c:99:49:99:9b:
d1:29:7c:d4:56:30:c8:03:3e:56:9c:b5:e9:e4:ea:
99:e5:37:48:5b:4d:bb:7e:32:1b:8b:8f:93:4b:38:
cf:fb:fb:6c:7b:b2:48:3f:5c:44:1f:d0:50:97:56:
80:71:60:3d:dd:b2:08:f8:3d:a7:97:0b:be:fd:ae:
94:b1:ee:85:44:06:ce:6d:e6:2c:1a:97:07:45:2c:
14:0d:e4:c6:3e:93:6f:d8:b6:f8:1b:8b:80:e1:37:
74:49:98:84:07:d6:4d:0b:ac:da:63:a7:52:0a:cb:
36:87:62:54:25:89:14:e1:26:88:32:92:68:92:38:
46:10:a6:3a:3d:a4:3d:45:0f:4c:91:7d:74:6a:5f:
52:6c:47:aa:d7:1b:0f:dc:1b:b3:a7:c5:af:a8:bd:
37:4f:82:31:ea:d8:1e:13:c1:e5:c2:fe:de:f2:85:
39:35:cc:98:e6:75:37:c7:40:1f:60:db:77:9c:1d:
a8:58:cc:cd:e8:8b:f7:fc:bb:68:dd:c9:cf:b0:c1:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:72:27:AE:3E:FE:E9:A6:D3:5B:57:4A:30:B6:59:83:BF:5E:C6:B9
X509v3 Authority Key Identifier:
keyid:2A:50:11:45:1F:0E:97:D5:C7:6B:27:82:3E:A7:E8:96:24:6F:CC:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/2A5011451F0E97D5C76B27823EA7E896246FCC89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A5011451F0E97D5C76B27823EA7E896246FCC89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.168.0/22
Signature Algorithm: sha256WithRSAEncryption
54:e6:33:32:38:2f:42:af:b8:9d:9f:fc:40:fe:f0:21:bd:ab:
8f:e7:ba:d7:17:25:b8:06:d4:1d:37:42:df:c4:31:d7:0e:ab:
3f:fc:53:af:61:74:d2:82:e1:f0:27:06:bd:cb:1b:1d:93:72:
08:f7:4a:19:20:bc:20:72:80:8f:eb:bc:26:32:be:29:6a:c7:
43:0f:57:33:1d:4f:ac:c6:06:4c:57:da:35:d9:88:43:cb:a2:
a2:37:1b:f4:9d:05:15:d6:43:98:87:ff:ed:48:6e:2c:bd:a1:
e3:0e:7b:93:36:9f:67:cd:d2:ab:5b:1a:19:ec:5f:ee:17:1b:
c1:d0:53:d6:4f:0f:ec:17:79:db:5c:b9:c7:81:f6:c1:41:27:
e4:54:55:e0:bc:05:7f:0b:ef:90:7b:20:96:be:79:1a:a1:94:
b9:4b:ca:1e:46:a8:d3:6f:fb:a1:e0:cd:e4:e9:66:0a:10:80:
2c:66:26:5a:7f:18:21:8c:c2:9d:bf:3f:f5:11:9d:7c:5a:00:
a7:8a:1d:db:d1:a2:79:b1:6a:19:1e:ad:4d:fc:6b:21:63:b6:
4f:b4:40:96:e9:ea:9a:24:15:9d:b5:2c:42:25:dd:bd:49:e8:
66:fc:76:51:93:8a:5b:a5:27:4b:f1:05:89:c9:78:7c:c0:70:
d0:07:4c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org