Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa
File: 3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa (raw, json)
Hash identifier: pq/Q3KdiicaONPPNS6z9ee1h7hUMidv+jU8HN3qdkQQ=
Subject key identifier: AA:42:B6:3B:8E:85:DF:D0:FC:F6:37:DD:37:06:52:09:B0:E3:03:27
Certificate issuer: /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial: 2D8ACB9F14DB092BA4C1C4438658A13074BBFB31
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa
Signing time: Wed 18 Dec 2024 04:11:08 +0000
ROA not before: Wed 18 Dec 2024 04:06:08 +0000
ROA not after: Wed 17 Dec 2025 04:11:08 +0000
asID: 265300
IP address blocks: 168.121.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:8a:cb:9f:14:db:09:2b:a4:c1:c4:43:86:58:a1:30:74:bb:fb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Validity
Not Before: Dec 18 04:06:08 2024 GMT
Not After : Dec 17 04:11:08 2025 GMT
Subject: CN=AA42B63B8E85DFD0FCF637DD37065209B0E30327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2c:01:c7:b4:10:72:2b:a0:b5:86:6b:2c:4b:
5a:eb:53:02:8f:ae:38:53:73:c1:47:ee:73:0d:63:
46:c7:58:88:8d:d3:b3:1b:fb:16:fe:9f:f6:36:7f:
90:32:e0:1d:27:ad:4a:34:ee:c8:51:34:88:c3:95:
16:22:c4:43:93:73:25:bc:99:e7:62:66:6e:13:4a:
2b:e7:e9:17:6f:71:66:48:86:c6:b6:02:82:7a:c2:
77:d2:d9:1d:e9:58:a6:dd:69:da:d1:3c:60:96:f8:
b3:f3:45:e0:45:41:1b:82:d4:00:d5:51:b7:92:44:
39:75:60:69:ff:14:f0:40:eb:2e:69:eb:b8:84:d6:
d3:9c:2c:70:e2:26:54:8a:70:ba:85:a4:60:24:69:
a0:6c:85:fa:7b:30:f0:6a:72:3d:07:6c:41:39:0e:
b5:d2:8a:37:ce:58:f8:f6:e9:75:46:3e:4a:f9:b8:
c8:85:4c:01:0c:a4:66:f3:30:b1:8a:88:30:47:66:
1b:f7:84:8c:8d:e2:3f:3f:0d:22:b5:00:0a:ff:f3:
68:31:46:25:33:ba:7f:79:28:05:48:e9:54:a1:29:
64:06:07:06:4b:a0:ca:56:0c:93:d4:dd:2b:06:dc:
37:68:2a:cc:2a:64:c8:1f:df:c5:96:71:86:64:02:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:42:B6:3B:8E:85:DF:D0:FC:F6:37:DD:37:06:52:09:B0:E3:03:27
X509v3 Authority Key Identifier:
keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.68.0/22
Signature Algorithm: sha256WithRSAEncryption
73:aa:8d:27:cd:25:ff:3b:c5:70:2a:93:a7:6c:7f:d0:4a:3f:
a9:15:45:26:af:11:ac:45:b4:d1:6d:94:0b:48:63:0e:ae:1a:
ed:c6:94:43:b3:91:48:28:58:58:1b:67:9c:bb:90:cc:ba:9e:
7c:8b:d9:17:fc:73:18:5d:59:51:91:1d:0e:99:90:3f:cb:1a:
91:59:8c:76:03:52:4a:3f:2f:29:7a:79:6d:2e:59:bc:7e:db:
ea:d1:9d:80:46:c2:e8:6b:b4:73:29:42:c5:84:82:f2:ca:0d:
79:a9:0d:9a:86:29:ac:7f:8f:17:81:f7:90:15:6c:4b:05:0f:
5f:69:b1:d3:01:6b:d0:b5:bf:ea:2b:25:7c:75:8c:1c:2c:68:
c8:15:b8:35:07:4d:7a:7e:73:3f:db:8e:ca:79:19:96:2d:90:
72:dd:68:e6:b7:c1:8b:fd:0c:a1:30:e9:61:c1:aa:2f:7c:13:
25:60:56:fb:0a:40:4b:6c:96:06:2f:f8:f2:9f:3d:1e:59:32:
65:98:b7:88:07:e2:93:a7:b6:db:4b:e5:a6:69:3d:b6:f5:91:
c6:92:99:3a:68:a7:3a:ef:34:aa:d1:4a:e9:2f:b9:f1:34:53:
1e:57:0d:7a:0b:70:73:04:2b:23:bd:26:ce:63:f9:e5:4e:85:
6a:75:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:41:44 2025 by rpki-client