Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BGzGeda63W44D6TphUtJ7rcsqrE35KNBrFDftp8qQGe9/0/3133312e3232312e39362e302f32322d3234203d3e20323634343230.roa
File: 3133312e3232312e39362e302f32322d3234203d3e20323634343230.roa (raw, json)
Hash identifier: BHDwV6jCKZEN/U+egwqn9f9X2qd3Hq4qGfJ4s/0X3bA=
Subject key identifier: 1E:A6:7F:CC:51:F7:D5:18:4B:A1:33:00:65:EA:3C:22:E6:B5:55:4C
Certificate issuer: /CN=C1CE8CDAF0C06D108C8C6E8A18BD654BC16E63D7
Certificate serial: 2194520E2550877DE49A265EF0AB9C709C33AB70
Authority key identifier: C1:CE:8C:DA:F0:C0:6D:10:8C:8C:6E:8A:18:BD:65:4B:C1:6E:63:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1CE8CDAF0C06D108C8C6E8A18BD654BC16E63D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BGzGeda63W44D6TphUtJ7rcsqrE35KNBrFDftp8qQGe9/0/3133312e3232312e39362e302f32322d3234203d3e20323634343230.roa
Signing time: Thu 02 Feb 2023 13:00:00 +0000
ROA not before: Thu 02 Feb 2023 12:55:00 +0000
ROA not after: Thu 01 Feb 2024 13:00:00 +0000
asID: 264420
IP address blocks: 131.221.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:94:52:0e:25:50:87:7d:e4:9a:26:5e:f0:ab:9c:70:9c:33:ab:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1CE8CDAF0C06D108C8C6E8A18BD654BC16E63D7
Validity
Not Before: Feb 2 12:55:00 2023 GMT
Not After : Feb 1 13:00:00 2024 GMT
Subject: CN=1EA67FCC51F7D5184BA1330065EA3C22E6B5554C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:10:ce:37:d7:bb:a5:61:db:a2:83:3a:5f:
49:e3:ea:47:db:26:d7:fb:95:8a:28:39:ac:3e:e4:
78:07:d4:83:40:7f:45:2c:8c:12:d0:a9:ae:81:4a:
08:a0:8b:a5:5a:cb:c4:3d:7c:a8:ca:fa:52:db:8e:
fb:f8:ed:ba:3f:fe:85:c6:3e:e0:c9:83:fc:d9:fd:
15:29:8e:bc:28:16:e9:3c:3c:26:da:36:d2:8c:19:
c6:92:86:87:f4:c1:74:92:37:e4:6c:5c:34:ec:7e:
d3:3c:6f:7d:aa:17:49:4c:af:a0:8c:0d:0d:00:ac:
63:0f:40:e3:9d:20:10:8d:c1:4f:4b:26:35:f6:df:
ee:2b:37:8a:23:97:bc:36:d0:d7:d2:2e:7a:e4:e0:
06:16:17:ce:88:50:e8:ba:3d:65:26:79:a2:2b:77:
cc:78:02:a8:1e:62:ba:8e:66:7b:c9:fd:96:26:bd:
1c:65:0b:8f:a4:13:be:e5:ac:7c:44:e3:67:80:0c:
ce:60:ab:77:5b:d1:87:10:ef:63:7c:1e:1b:23:f8:
cf:2f:07:35:03:17:3e:26:00:49:f7:fa:33:d8:9e:
6f:48:d0:3a:52:33:9f:82:9f:cc:60:c8:b0:25:af:
d3:9a:f7:ce:b0:d4:1a:61:9b:e6:96:7c:1b:c9:c9:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A6:7F:CC:51:F7:D5:18:4B:A1:33:00:65:EA:3C:22:E6:B5:55:4C
X509v3 Authority Key Identifier:
keyid:C1:CE:8C:DA:F0:C0:6D:10:8C:8C:6E:8A:18:BD:65:4B:C1:6E:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BGzGeda63W44D6TphUtJ7rcsqrE35KNBrFDftp8qQGe9/0/C1CE8CDAF0C06D108C8C6E8A18BD654BC16E63D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1CE8CDAF0C06D108C8C6E8A18BD654BC16E63D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGzGeda63W44D6TphUtJ7rcsqrE35KNBrFDftp8qQGe9/0/3133312e3232312e39362e302f32322d3234203d3e20323634343230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.96.0/22
Signature Algorithm: sha256WithRSAEncryption
50:ad:16:90:05:fb:cb:62:c9:4e:0a:e8:70:58:58:28:c8:cc:
d9:2d:af:cd:f5:1d:d0:93:2c:a1:21:28:7f:80:b8:c2:1a:fe:
42:8d:5e:1b:f0:a5:13:78:b0:96:84:3b:6b:54:2f:f1:3b:ba:
05:db:33:2d:f0:7b:84:13:d2:dc:bc:79:d3:3d:43:5d:68:b6:
9b:7f:20:9e:42:40:a9:25:f9:f9:2f:92:48:bb:df:8a:25:93:
2a:8a:cb:c5:cd:ee:8c:96:cb:67:1a:fe:ee:25:8e:7e:9d:bf:
19:e7:f7:91:fc:e2:9c:e7:be:64:01:9b:d6:8e:7b:24:b6:83:
ab:05:b9:19:e3:43:f2:bc:a8:96:43:0f:61:bd:09:fe:44:6d:
f4:1d:4a:0f:0b:0b:38:6d:50:18:a7:c4:74:07:b8:a0:7a:00:
02:15:c9:e8:dd:ed:8a:3e:e4:17:40:8a:9c:5c:0a:81:cb:2c:
db:96:dc:8e:1b:38:95:56:26:59:63:ec:6e:f8:cd:1f:03:62:
f9:b4:9b:40:f9:16:8f:f3:57:b4:b1:b3:75:0e:4b:34:48:8e:
3c:8f:03:44:bb:de:77:6c:25:9f:fb:ff:e9:c3:03:77:64:39:
f3:0b:be:ff:bf:d3:26:2a:6b:fa:80:56:6d:34:f8:d9:38:e0:
7d:4d:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org