Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3133322e3235352e36342e302f32322d3234203d3e203238363637.roa
File: 3133322e3235352e36342e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier: cXn1HvT8L6LnWrHUKnhtVpzRp/etofJK8DyrgFUcpxo=
Subject key identifier: 36:A4:9E:7A:69:B1:D3:6B:DD:00:3D:29:4A:19:EB:B5:E5:D5:E8:61
Certificate issuer: /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial: 737760612FCB07526C9BF488D6C42C41C61698C5
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3133322e3235352e36342e302f32322d3234203d3e203238363637.roa
Signing time: Fri 03 May 2024 20:08:28 +0000
ROA not before: Fri 03 May 2024 20:03:28 +0000
ROA not after: Fri 02 May 2025 20:08:28 +0000
asID: 28667
IP address blocks: 132.255.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:77:60:61:2f:cb:07:52:6c:9b:f4:88:d6:c4:2c:41:c6:16:98:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Validity
Not Before: May 3 20:03:28 2024 GMT
Not After : May 2 20:08:28 2025 GMT
Subject: CN=36A49E7A69B1D36BDD003D294A19EBB5E5D5E861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:0c:c7:b6:09:4f:d5:82:a6:49:45:2e:67:
21:c5:d5:80:1c:b7:b5:aa:32:c9:91:aa:fd:69:c6:
fa:73:b7:36:17:19:69:72:d1:19:72:57:73:4c:8b:
f4:60:3b:67:35:3f:08:5a:d3:5b:60:36:b5:91:84:
4b:4d:eb:7d:3a:8a:71:0a:34:b5:6d:51:9f:8e:1f:
9b:36:9e:39:23:92:29:14:13:68:ba:65:8e:d6:0a:
09:02:ce:d8:00:f8:a8:d9:72:96:34:4a:ea:1e:39:
12:86:af:17:e5:04:c1:fa:18:84:e0:ac:e9:67:77:
89:59:01:ef:b2:8c:5c:1e:6f:ac:50:27:78:83:32:
c7:84:d3:70:f9:34:4b:ab:69:d7:27:b2:99:df:9d:
ce:58:87:3f:72:9f:01:87:4e:d3:be:80:41:56:23:
0b:fa:d0:be:52:9b:d2:c9:1c:a2:48:6c:6e:b8:aa:
dd:8b:d7:25:e9:aa:e4:a5:2d:46:f8:97:b3:b4:c7:
39:1e:b6:01:72:58:0c:b7:85:25:9f:f6:44:30:7b:
3d:5e:5c:cc:e0:64:eb:30:14:95:ab:71:bb:0d:53:
8a:dd:57:2d:ce:74:98:5f:90:3d:ee:48:fe:ff:0d:
21:b6:8e:ee:7f:d6:fe:ec:9e:48:4f:04:ad:9a:57:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A4:9E:7A:69:B1:D3:6B:DD:00:3D:29:4A:19:EB:B5:E5:D5:E8:61
X509v3 Authority Key Identifier:
keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3133322e3235352e36342e302f32322d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:8b:e3:53:7e:c2:2a:e5:00:c0:ec:de:88:d5:29:e0:91:22:
27:72:16:bb:b1:10:fc:af:8f:fa:8d:b2:1e:f1:41:5b:cc:46:
1a:22:fd:5e:04:1e:70:ce:2b:8d:4a:a8:c5:45:c4:59:83:49:
ab:d8:f0:17:86:18:36:2b:b4:d8:c4:37:63:0a:79:7c:bd:8f:
b0:88:fd:d5:b8:37:37:7d:81:5a:60:9a:86:f5:a1:51:9a:7a:
7e:9c:44:5b:a1:47:4d:56:cd:0b:27:7d:87:ce:86:98:d2:b6:
27:24:21:b9:53:58:f5:32:62:2b:8a:21:4c:4e:3c:b7:b4:13:
4c:8f:fe:dc:65:4b:47:dd:d0:d3:75:43:2f:2d:61:32:b1:8b:
f2:80:80:49:be:45:6c:d7:a0:f5:e1:c0:22:d7:0f:df:a3:a3:
e1:f4:6f:7c:9d:1d:4f:83:b3:62:cb:5e:c5:1d:7e:a8:83:83:
08:67:29:b1:bb:15:f1:0d:1e:81:38:78:2f:a6:fd:7a:be:f3:
ac:1e:c4:04:c5:4d:1a:d6:40:de:e7:34:4c:33:c4:bf:1c:0a:
b6:33:57:77:99:87:dd:7f:ff:ad:27:dc:8d:c5:4e:7c:14:07:
8d:e4:0d:7b:ff:9d:e0:0c:c0:85:68:99:f0:a3:a3:61:22:40:
f3:71:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:24 2025 by rpki-client