Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135342e302f32342d3234203d3e203631373835.roa
File: 3230312e3133312e3135342e302f32342d3234203d3e203631373835.roa (raw, json)
Hash identifier: kVKu2gFUfjco76FGWPvF8UWphna+xq4Q3S30smbtQYY=
Subject key identifier: 5E:77:56:7F:61:50:D2:4D:BA:25:AB:E8:12:42:66:D1:04:5C:22:25
Certificate issuer: /CN=5D02A9D5EA4562DFA1998A8F4C882ACD6908671E
Certificate serial: 24372BFD53E9A48C8F461F378A87ADC0BAD50D28
Authority key identifier: 5D:02:A9:D5:EA:45:62:DF:A1:99:8A:8F:4C:88:2A:CD:69:08:67:1E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135342e302f32342d3234203d3e203631373835.roa
Signing time: Tue 21 Jan 2025 14:07:43 +0000
ROA not before: Tue 21 Jan 2025 14:02:43 +0000
ROA not after: Tue 20 Jan 2026 14:07:43 +0000
asID: 61785
IP address blocks: 201.131.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:37:2b:fd:53:e9:a4:8c:8f:46:1f:37:8a:87:ad:c0:ba:d5:0d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D02A9D5EA4562DFA1998A8F4C882ACD6908671E
Validity
Not Before: Jan 21 14:02:43 2025 GMT
Not After : Jan 20 14:07:43 2026 GMT
Subject: CN=5E77567F6150D24DBA25ABE8124266D1045C2225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:14:47:15:52:2e:2e:e7:63:83:6a:23:71:
50:35:4c:52:7d:8e:b3:88:c8:59:d7:f6:ef:66:3d:
40:d4:2b:24:39:de:69:91:84:d2:30:cc:bf:ef:54:
1b:52:50:a6:3d:d4:c3:58:3d:d1:63:c9:eb:49:0f:
3b:4a:54:4c:25:eb:97:71:10:33:34:52:bf:24:1f:
98:a1:48:82:89:a5:cf:a9:ce:81:f5:72:6e:6b:c6:
fa:f2:11:cf:be:e1:79:f0:4a:53:52:fa:4d:9d:dd:
3b:48:78:04:6c:11:6d:47:18:57:95:cd:0a:a8:75:
84:3b:40:e4:6d:27:9c:ad:bb:46:72:30:5c:2c:b0:
fe:0d:3e:95:e2:ec:35:3b:49:35:bf:5a:86:80:9e:
94:73:73:ad:ad:7c:19:ea:ec:f0:92:e8:33:86:89:
cc:92:04:23:b7:ca:99:cd:5a:de:31:58:e1:df:f1:
9b:a5:30:c1:89:3a:72:98:52:5a:18:c5:99:3f:a1:
3a:d9:57:66:64:be:f9:af:85:78:28:b5:73:18:48:
b7:a6:0a:c7:79:1c:9a:53:7d:97:08:04:cb:6d:22:
6c:8c:b2:f7:18:99:71:3b:a2:0a:e6:ab:ac:4a:36:
26:26:3f:41:74:d2:fb:7b:6c:7a:5e:68:33:2a:15:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:56:7F:61:50:D2:4D:BA:25:AB:E8:12:42:66:D1:04:5C:22:25
X509v3 Authority Key Identifier:
keyid:5D:02:A9:D5:EA:45:62:DF:A1:99:8A:8F:4C:88:2A:CD:69:08:67:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135342e302f32342d3234203d3e203631373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.154.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c2:62:c3:f0:b9:c7:16:94:df:b4:ca:1a:73:06:39:4d:a1:
1f:b7:64:a3:fe:04:62:d5:a4:86:24:11:43:ad:79:6c:2e:8e:
e4:0e:3d:3f:1e:d1:a3:2d:98:0b:3f:db:fc:1b:f9:88:49:7d:
c0:cd:77:34:49:fa:bf:6e:d6:e5:18:27:44:6a:dd:87:7c:17:
57:0d:eb:c7:90:16:8e:e3:1a:08:9f:61:66:18:72:23:bc:4d:
86:41:64:dd:86:fe:63:63:fd:ef:e5:59:df:51:62:19:b1:e8:
44:0e:3f:ec:07:50:e4:61:56:49:51:a6:87:28:50:ef:d7:00:
43:1d:4b:1c:24:a0:c5:e7:4f:c3:5f:96:b8:2e:14:f7:59:45:
9c:e5:3a:bb:6e:f3:4c:ea:f7:3f:5f:0a:cd:9a:62:dc:69:63:
49:5a:25:97:a3:bd:7c:ab:65:ff:ad:b7:d1:54:0d:3f:8a:3d:
51:88:45:5d:7e:a1:da:4a:82:9f:dc:d7:82:f9:93:e6:c9:57:
63:0c:68:97:19:40:9a:b7:a3:b0:fb:17:d3:82:aa:68:8c:52:
1e:90:ec:c8:20:b4:32:3f:d9:41:f3:2f:65:43:71:4a:a3:a1:
37:2e:7d:dc:92:34:e4:26:48:ce:40:48:7c:b8:8d:30:f6:d4:
69:49:d1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 16:37:41 2025 by rpki-client