Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32342d3332203d3e20323636343333.roa
File: 3133312e3130382e3235322e302f32342d3332203d3e20323636343333.roa (raw, json)
Hash identifier: a33s4yuVo5nv+DLtuXhCjHyvNF/x10/7uQH4Dn02iHg=
Subject key identifier: 5C:90:AE:3D:93:07:68:5F:69:02:33:8B:DF:72:43:84:7A:20:F7:E6
Certificate issuer: /CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
Certificate serial: 46E5B6CE359FAA808E5B44902F14FC6FCAC4B294
Authority key identifier: C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32342d3332203d3e20323636343333.roa
Signing time: Thu 04 Jul 2024 22:04:11 +0000
ROA not before: Thu 04 Jul 2024 21:59:11 +0000
ROA not after: Thu 03 Jul 2025 22:04:11 +0000
asID: 266433
IP address blocks: 131.108.252.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e5:b6:ce:35:9f:aa:80:8e:5b:44:90:2f:14:fc:6f:ca:c4:b2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
Validity
Not Before: Jul 4 21:59:11 2024 GMT
Not After : Jul 3 22:04:11 2025 GMT
Subject: CN=5C90AE3D9307685F6902338BDF7243847A20F7E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d5:41:d2:b0:57:f1:d5:e9:01:7f:31:1b:1f:
a4:d3:b4:71:3b:17:64:82:2b:6a:28:c1:76:c6:71:
90:46:20:dd:3a:d1:42:7e:ac:bd:e6:82:8a:f8:a5:
ce:bc:7f:f8:37:fd:e6:d4:33:d0:68:d7:b7:d2:13:
bb:ca:1d:ca:c1:9a:de:c1:69:2e:50:32:e1:89:c6:
31:b4:a6:44:66:0e:eb:e8:d5:59:c6:64:d7:e2:78:
ec:93:56:6b:d7:57:f5:a6:45:82:ff:6a:81:66:80:
00:4d:d8:79:e7:11:9d:22:26:2f:9d:f5:1b:dd:6a:
21:4a:66:14:fb:58:f4:3a:42:7a:5f:e6:f6:bb:1c:
a7:91:b9:09:07:1f:4a:92:a1:1e:f4:2b:2a:b5:b5:
2d:6b:fe:c7:c5:22:2e:55:ad:81:72:61:87:66:8d:
e4:b0:64:d3:d3:71:06:b9:82:f9:76:c9:97:57:36:
53:46:d9:33:fa:55:4f:7f:b1:ee:4f:36:86:8c:58:
26:55:d8:2a:56:c9:27:05:33:aa:67:63:6f:34:7d:
cf:35:31:d1:35:6a:a3:33:ac:77:72:c7:39:35:25:
79:31:4b:70:1d:72:1b:83:1e:b1:5a:e8:1f:57:90:
bd:91:a9:5e:28:ae:0f:e8:71:e3:0f:bd:c4:0b:cd:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:90:AE:3D:93:07:68:5F:69:02:33:8B:DF:72:43:84:7A:20:F7:E6
X509v3 Authority Key Identifier:
keyid:C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/C3AFF141530D91097156CCAECCDD429D2C9F5738.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32342d3332203d3e20323636343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:19:4e:a2:8c:26:c2:94:fb:c3:73:5a:9d:25:14:88:84:d1:
20:5c:1b:99:45:b5:73:04:f8:87:d2:d6:ff:d5:cf:6c:b1:11:
61:68:19:20:2f:3e:ea:68:24:86:85:c3:1f:e4:6f:ec:67:80:
2c:67:22:66:a0:5c:04:5d:62:25:d8:21:84:9f:d8:fb:aa:e3:
90:a4:c8:0f:22:33:ee:ed:35:97:1a:1e:01:a0:55:cd:de:69:
5b:03:f5:28:67:6d:93:39:b2:c3:4b:71:00:33:74:aa:c9:f4:
c8:9d:ba:a0:95:d6:56:f9:0e:65:73:4c:6b:65:8a:44:47:bc:
6e:ac:fc:7d:b2:00:fe:8f:3b:1f:44:5c:35:d9:99:95:bc:cc:
22:ef:b1:79:97:20:bb:14:10:aa:1e:0d:73:b2:30:6d:c1:9e:
07:d9:2a:24:43:02:be:89:0e:03:79:85:8e:bd:6f:21:10:bf:
3e:b7:fa:b1:2a:97:2c:e7:87:9a:e1:4d:db:ae:de:bf:da:2c:
a2:bb:a1:96:b0:d4:c6:c3:37:28:88:8e:3a:4a:28:b7:14:61:
e8:db:e7:0e:0a:65:3d:65:2b:1c:f4:4c:35:b0:a2:30:b6:45:
3c:89:41:bc:03:5a:4e:0a:13:4c:49:6d:28:70:94:1e:37:de:
2a:e2:22:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:57:56 2025 by rpki-client