Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130322e302f32332d3233203d3e203238313635.roa
File: 3133312e3235352e3130322e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier: 1q8fKk+Gd8kXeLBEEQ95YmhuKjpjyaFzo0xRgFWIF2E=
Subject key identifier: 41:2A:18:F8:55:26:63:68:25:D5:EF:51:67:07:14:B4:84:3D:6A:67
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 2C9D6197706D13032EEC2EC1CB8F2AE1A45178E4
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130322e302f32332d3233203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 18:45:38 +0000
ROA not before: Mon 01 Jul 2024 18:40:38 +0000
ROA not after: Mon 30 Jun 2025 18:45:38 +0000
asID: 28165
IP address blocks: 131.255.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:9d:61:97:70:6d:13:03:2e:ec:2e:c1:cb:8f:2a:e1:a4:51:78:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 18:40:38 2024 GMT
Not After : Jun 30 18:45:38 2025 GMT
Subject: CN=412A18F85526636825D5EF51670714B4843D6A67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:46:f3:68:45:b7:4b:35:a4:3c:16:29:a3:
9d:48:d0:22:fb:f7:03:94:68:f9:12:2a:f5:4b:a4:
43:45:70:50:24:0b:36:37:d7:4e:a5:de:9b:eb:0d:
f9:01:87:cc:f7:d9:aa:b7:3b:5a:84:3a:ce:be:93:
aa:1c:fb:16:67:c8:31:6e:18:e6:2a:c8:cc:de:8b:
5f:36:f9:c1:65:28:9d:36:37:99:db:c0:16:c6:40:
35:38:8a:e4:fc:32:12:ea:50:e6:51:6a:60:5a:69:
b4:d5:29:67:91:c8:a2:1f:23:06:02:90:d9:98:60:
62:4f:25:90:fd:06:74:36:9f:39:40:d5:ba:6e:6a:
dc:b8:82:81:5f:15:8b:9a:fe:ef:82:6f:ab:23:58:
b0:90:e0:dd:a0:a3:83:8f:37:54:a9:6f:9f:16:1d:
43:fa:56:1e:d6:18:30:61:2c:4b:f3:cf:ef:83:55:
74:56:92:b2:65:c6:3f:dc:ac:c6:1c:17:79:e3:7a:
a0:f1:af:11:b9:df:4d:92:55:2c:5e:b2:85:f5:56:
e9:e5:12:b5:c7:13:09:3c:53:f6:bd:7e:e3:79:fd:
a4:02:8a:73:7c:b9:67:5f:b2:7c:c1:10:4f:ea:86:
2a:59:4b:22:24:ce:8d:94:fa:6f:fe:6c:53:64:6e:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2A:18:F8:55:26:63:68:25:D5:EF:51:67:07:14:B4:84:3D:6A:67
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133312e3235352e3130322e302f32332d3233203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.102.0/23
Signature Algorithm: sha256WithRSAEncryption
98:f1:61:42:1c:1c:63:c4:5a:6a:f0:5c:f1:00:8f:11:ac:8f:
6e:0c:7a:67:7f:02:53:53:8a:e3:bf:bd:4c:32:92:2a:ce:21:
e5:b1:9b:ab:a7:51:11:31:99:60:62:f7:15:4d:fe:c4:f7:56:
93:6b:28:6a:32:dc:7a:7a:9d:72:9e:9f:67:e0:ef:ab:00:01:
5d:fb:c0:6d:6e:d3:c9:87:76:03:f6:ea:81:66:48:11:21:82:
0c:e3:fb:85:0b:d9:3d:f2:5b:33:3f:af:8a:db:a2:d1:21:69:
6c:03:c2:0b:63:5d:e6:db:29:eb:21:fd:0a:ed:dd:07:12:71:
a8:35:33:0c:7e:d2:55:bd:6e:b9:34:a7:5d:48:a5:d9:ca:2c:
b2:da:41:79:13:45:54:57:c4:81:c1:0f:70:db:45:ab:f4:ee:
73:44:cb:40:62:d2:54:da:1c:2e:d9:7e:40:23:65:94:74:91:
14:2e:a2:dc:ab:18:3e:1f:f9:71:b5:07:2c:02:73:01:7d:d1:
55:f8:83:db:14:03:87:55:4d:ec:4f:02:bb:c3:4a:a3:56:ae:
cb:8c:f2:11:e7:e0:8c:de:51:bc:b0:16:01:b9:3f:85:1b:f0:
3a:17:19:d0:28:e8:b1:c2:96:d0:44:67:2e:92:7f:85:0c:2d:
dc:6b:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:34 2025 by rpki-client