Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CFqiX3aKdb2jrCK4tWk4sEJtDuPgKycFr5THPac1quBu/0/3138372e302e31362e302f32302d3234203d3e20323632373531.roa
File: 3138372e302e31362e302f32302d3234203d3e20323632373531.roa (raw, json)
Hash identifier: lpFWDwrCS3xOvdNKy32jHQ4Rc22ReRAdDy9IighRz8w=
Subject key identifier: 5E:73:64:D5:9A:D0:AC:0E:BB:2D:36:49:D8:C3:DB:DA:59:50:BD:C5
Certificate issuer: /CN=9699C0DC7CBF5E4753DC807EB09E66771759F81A
Certificate serial: 0CBD98B1387AE8F759E4C8E5DDB47ABE333222A6
Authority key identifier: 96:99:C0:DC:7C:BF:5E:47:53:DC:80:7E:B0:9E:66:77:17:59:F8:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9699C0DC7CBF5E4753DC807EB09E66771759F81A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CFqiX3aKdb2jrCK4tWk4sEJtDuPgKycFr5THPac1quBu/0/3138372e302e31362e302f32302d3234203d3e20323632373531.roa
Signing time: Mon 11 Apr 2022 00:27:44 +0000
ROA not before: Mon 11 Apr 2022 00:22:44 +0000
ROA not after: Mon 10 Apr 2023 00:27:44 +0000
asID: 262751
IP address blocks: 187.0.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:bd:98:b1:38:7a:e8:f7:59:e4:c8:e5:dd:b4:7a:be:33:32:22:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9699C0DC7CBF5E4753DC807EB09E66771759F81A
Validity
Not Before: Apr 11 00:22:44 2022 GMT
Not After : Apr 10 00:27:44 2023 GMT
Subject: CN=5E7364D59AD0AC0EBB2D3649D8C3DBDA5950BDC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:ff:32:60:32:f9:5e:f2:91:f2:73:d3:ec:
97:01:2b:98:7c:6c:7f:78:68:fa:af:b3:ca:62:88:
c9:da:7d:2b:91:6e:54:25:32:46:c5:db:e9:d7:94:
8d:df:64:92:56:b5:6a:73:c5:8f:6a:d5:a9:ad:54:
9f:9d:23:4b:2c:db:d2:82:e0:05:fd:d7:06:40:cb:
d1:08:52:bb:fc:6a:83:40:87:5a:50:cf:c4:5e:96:
79:34:0a:c9:2e:17:b3:51:15:2d:a5:48:a4:50:cb:
00:8a:c8:6e:2e:e0:ca:65:9d:10:a3:7c:3c:ed:66:
44:6b:4e:f6:63:7a:7e:ba:c0:b0:9f:96:96:ac:c2:
2e:86:0f:d5:15:13:d7:c4:84:ac:05:ef:53:2d:f4:
6e:77:cf:ec:91:07:ba:86:b0:7b:09:df:e2:eb:a1:
d0:a9:e9:d1:cd:b8:fe:30:80:be:b3:c8:e5:df:ce:
5a:42:d0:1a:4b:a2:9a:2e:ec:60:47:31:76:f5:ab:
93:1b:32:6c:ec:8b:16:7c:28:49:44:39:e0:c5:7e:
c8:ca:bb:58:6e:6a:09:7e:cf:27:6a:31:52:7e:e6:
e2:c6:bc:b6:0f:f6:af:59:d0:11:ce:61:2e:5a:c5:
ad:d2:31:39:11:e4:74:aa:f0:c9:97:62:01:90:52:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:73:64:D5:9A:D0:AC:0E:BB:2D:36:49:D8:C3:DB:DA:59:50:BD:C5
X509v3 Authority Key Identifier:
keyid:96:99:C0:DC:7C:BF:5E:47:53:DC:80:7E:B0:9E:66:77:17:59:F8:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CFqiX3aKdb2jrCK4tWk4sEJtDuPgKycFr5THPac1quBu/0/9699C0DC7CBF5E4753DC807EB09E66771759F81A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9699C0DC7CBF5E4753DC807EB09E66771759F81A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFqiX3aKdb2jrCK4tWk4sEJtDuPgKycFr5THPac1quBu/0/3138372e302e31362e302f32302d3234203d3e20323632373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.16.0/20
Signature Algorithm: sha256WithRSAEncryption
67:67:71:07:2e:02:46:47:9d:22:8a:85:95:23:dd:78:12:ef:
8c:fd:e4:bf:8a:fc:16:5a:76:1f:35:55:ef:79:84:09:dc:52:
68:50:4d:94:d7:6a:a1:8e:32:4d:75:04:27:1b:fb:b1:27:be:
db:61:d5:76:8c:66:37:39:b5:6a:fd:e6:30:be:2a:a6:2b:24:
bb:8e:96:2b:c1:07:9c:ef:d3:da:4c:6d:43:15:2c:3a:c9:35:
58:bc:7b:14:e0:bd:98:e2:7e:33:1a:45:73:86:9a:17:dd:7d:
ac:cf:fb:ce:cc:3b:4f:b9:6f:ad:2c:1e:eb:c1:8d:fc:e1:33:
e9:52:e4:d0:af:55:a3:44:43:82:0c:20:2c:61:6c:43:07:85:
2c:f7:18:73:f1:de:9f:60:22:de:c5:21:6a:f4:12:5a:d6:e1:
41:f3:2a:51:58:1b:ba:33:3c:01:fd:6f:5a:22:fd:39:c6:91:
36:7e:ce:d3:0c:e3:fb:1c:76:86:e1:8f:77:cc:cd:c4:20:9b:
90:e3:35:bb:0a:b9:c9:b5:0b:7a:86:9d:ba:71:82:58:84:21:
99:a6:1f:5c:73:52:a0:86:a5:37:fd:d5:ea:70:77:3d:8c:52:
51:be:74:d1:30:94:ba:62:61:53:45:7e:79:76:3b:f1:da:dc:
9a:db:5b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:59:07 2025 by rpki-client