Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa
File: 3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa (raw, json)
Hash identifier: 6YF49RmNR16bvBfoxrlqEvTfP6nX3rJbTwkdoSjAp60=
Subject key identifier: 70:64:20:D5:52:BC:FF:45:F3:B9:85:A3:A8:61:D2:56:21:0B:91:E9
Certificate issuer: /CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
Certificate serial: 038FAE216AED6009BAF787F270FB34D245A6FDCD
Authority key identifier: C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa
Signing time: Thu 04 Apr 2024 02:52:04 +0000
ROA not before: Thu 04 Apr 2024 02:47:04 +0000
ROA not after: Thu 03 Apr 2025 02:52:04 +0000
asID: 267501
IP address blocks: 201.182.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8f:ae:21:6a:ed:60:09:ba:f7:87:f2:70:fb:34:d2:45:a6:fd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
Validity
Not Before: Apr 4 02:47:04 2024 GMT
Not After : Apr 3 02:52:04 2025 GMT
Subject: CN=706420D552BCFF45F3B985A3A861D256210B91E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:8b:8e:1c:e2:e1:7e:f4:4e:6a:eb:c2:0c:
8e:2b:69:1c:c9:b4:f0:d1:da:c0:b8:d0:93:90:a0:
d5:43:ee:6d:f4:99:e6:b5:c7:3d:cc:91:3f:74:6a:
3f:28:dd:8d:b5:ec:66:88:b0:9c:43:27:ed:73:96:
c0:76:60:d7:43:ae:9f:ff:a9:78:26:d3:88:5d:da:
47:63:43:93:15:e5:bc:42:29:13:35:71:f5:10:ba:
75:17:44:95:97:8e:01:8f:63:ee:48:a7:85:02:15:
ce:85:20:9f:a0:8d:d6:6d:6b:ee:d5:2e:12:81:13:
8b:a5:cb:14:92:e7:24:b8:3e:5a:c0:6b:fe:2e:65:
79:cb:86:62:2a:2a:d5:7b:fb:a6:c4:cd:f7:7c:19:
06:e4:ef:f2:5f:99:e9:b9:da:b4:f7:bf:f5:de:7f:
4a:fa:6c:30:8d:46:d0:68:84:9d:d3:f0:44:d8:6a:
2d:9e:35:7e:62:12:79:bf:15:21:5e:30:b8:ca:cd:
3b:cb:27:6f:a8:ec:80:a9:36:46:9d:cc:6b:49:78:
0c:ad:f5:47:1d:cb:9e:5b:ec:a8:1b:c7:af:bf:98:
13:0e:dc:1c:15:aa:f9:19:7f:f0:4c:97:fd:d2:21:
9f:ce:96:cb:7f:68:eb:f3:f7:a6:3d:4f:6e:16:ef:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:64:20:D5:52:BC:FF:45:F3:B9:85:A3:A8:61:D2:56:21:0B:91:E9
X509v3 Authority Key Identifier:
keyid:C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.64.0/22
Signature Algorithm: sha256WithRSAEncryption
00:de:e6:fe:3a:31:2e:6c:2c:57:8f:53:52:11:f1:a6:32:89:
80:29:81:00:77:e3:99:1d:71:ec:28:7c:65:d0:dc:ce:15:75:
b2:42:e9:f7:28:69:e3:81:5d:e3:b2:6d:5f:cd:6d:91:9e:0f:
4d:ba:12:41:20:22:3e:2c:b2:9f:ef:c8:07:9f:e5:54:20:45:
22:e5:b8:56:a5:55:d2:e4:a0:2c:f0:83:3c:d4:3d:c9:fc:40:
49:83:41:2a:ac:f1:a2:db:f0:12:35:e0:3d:1d:26:94:11:7b:
5c:3f:31:45:41:95:5b:81:c9:49:8f:57:2d:98:7d:3e:4d:02:
1b:9d:c1:cc:02:44:d8:35:15:50:90:d4:3f:5a:8d:c0:f1:8e:
16:e4:ac:09:a7:ac:b1:8c:87:61:1a:18:85:2a:1b:81:86:e7:
31:96:c2:04:6a:30:05:f3:2a:9f:f9:ef:66:dd:ed:95:7d:5c:
e1:8e:79:17:3e:0d:58:25:ce:5c:98:a1:a3:7f:c3:e6:6c:4a:
88:06:0a:f4:13:03:e6:95:51:d5:52:d2:39:9c:d5:ed:65:1c:
38:86:f7:57:8c:a5:bc:cc:a5:c3:2b:c5:d4:04:c2:26:42:32:
3f:bc:d5:c8:15:ae:42:58:2f:73:13:2e:b6:52:34:83:2f:81:
66:de:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:52:59 2025 by rpki-client