Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32322d3232203d3e20323730393436.roa
File: 3133312e3130382e3135322e302f32322d3232203d3e20323730393436.roa (raw, json)
Hash identifier: VI7Obb5GkB86w/SFpHF4j9+T2R+z6qajUDGMNNB/BQ4=
Subject key identifier: A9:41:C4:AC:4F:A3:CE:2A:6C:F7:23:0C:30:04:52:CD:CC:18:56:E6
Certificate issuer: /CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Certificate serial: 50576BD88F2CFCDB6197A995993D0C5C9C0D34E4
Authority key identifier: 87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32322d3232203d3e20323730393436.roa
Signing time: Sat 17 Feb 2024 05:23:53 +0000
ROA not before: Sat 17 Feb 2024 05:18:53 +0000
ROA not after: Sat 15 Feb 2025 05:23:53 +0000
asID: 270946
IP address blocks: 131.108.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:57:6b:d8:8f:2c:fc:db:61:97:a9:95:99:3d:0c:5c:9c:0d:34:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Validity
Not Before: Feb 17 05:18:53 2024 GMT
Not After : Feb 15 05:23:53 2025 GMT
Subject: CN=A941C4AC4FA3CE2A6CF7230C300452CDCC1856E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:b0:a5:ab:c2:a0:d8:71:33:0f:e9:dd:04:
22:e7:0e:45:0e:82:95:e5:5b:a8:fd:30:09:0f:db:
bf:8c:94:d6:cd:c6:d4:36:1d:de:cc:43:5b:10:41:
87:6a:95:8c:82:1e:33:36:50:31:7e:a0:80:66:ba:
01:5d:fb:b6:3b:1e:c1:21:23:51:aa:d6:b9:8f:8c:
16:4e:81:e7:a6:31:f8:ef:6d:7a:91:28:b6:5a:d1:
27:1b:0f:96:a2:5d:9e:79:82:13:d5:b7:c1:8c:37:
fa:91:9c:2f:79:5c:d3:aa:ec:d5:4f:aa:ad:04:2d:
c7:b3:98:a4:ca:56:78:2e:e7:98:78:68:ab:a4:a7:
a7:3e:28:8f:e3:3f:6a:92:01:0d:a8:0f:9b:32:23:
e4:80:e8:53:a9:74:af:20:4b:55:18:4a:29:36:f9:
e6:e8:8b:69:63:81:66:19:12:f3:5e:e2:b5:d4:bc:
c9:da:92:78:53:2d:ed:6f:14:18:cd:b2:04:d2:47:
1b:69:c5:70:2b:b3:66:fb:29:27:7f:d8:85:b0:dd:
59:50:e8:f5:92:2a:2b:cc:f4:f6:0f:ed:b3:7f:ec:
c5:af:e9:45:0c:5a:04:7e:c5:dc:87:32:4a:21:b8:
9f:a9:79:39:5e:09:f5:0b:04:69:79:d8:1e:f1:02:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:41:C4:AC:4F:A3:CE:2A:6C:F7:23:0C:30:04:52:CD:CC:18:56:E6
X509v3 Authority Key Identifier:
keyid:87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32322d3232203d3e20323730393436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:62:0d:1d:18:2c:e5:de:5f:d8:98:42:09:4f:bd:ec:8e:e4:
b7:7f:69:0e:c2:f2:f0:ea:81:29:c1:06:b5:b3:b3:a8:5a:4d:
56:e8:81:7c:54:5c:d7:c0:f5:7e:f8:eb:8a:e7:b2:a3:0e:21:
19:8f:18:91:3f:14:f2:ca:7a:62:48:78:f9:31:d2:c5:1b:c7:
ac:a6:e8:f8:ee:ac:d2:9a:7e:89:64:f0:0a:5e:d9:0d:ef:8b:
90:fd:09:fc:4e:2f:e9:66:d2:64:23:59:f2:a4:62:61:71:3b:
b8:1c:9e:de:13:04:1a:50:10:43:ee:09:7b:b1:80:ae:98:ee:
18:1a:39:a4:38:8f:cb:c5:fa:8d:7f:44:95:6b:81:bc:04:2e:
16:16:e5:03:e2:98:df:78:37:82:d2:59:aa:d6:69:36:2f:03:
61:d2:4d:f5:74:6a:41:87:98:2c:68:fb:40:12:ff:fb:11:66:
f6:7a:fe:9c:d2:4e:23:81:92:04:27:68:64:64:5c:c3:fb:5e:
8e:0b:90:be:04:73:57:74:b2:ff:b0:fa:99:2c:cb:53:a2:c5:
78:f4:d6:84:64:be:02:0a:37:fc:02:f6:48:69:93:ef:bf:da:
98:b9:ab:1e:a0:48:53:8d:10:78:37:ee:0b:1c:3e:a8:89:12:
1f:5c:41:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:19 2025 by rpki-client