Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/3133312e3130382e36302e302f32322d3232203d3e203631363634.roa
File: 3133312e3130382e36302e302f32322d3232203d3e203631363634.roa (raw, json)
Hash identifier: QQNq5LIWChLx6lXpvwDNDndJd2pSpILbVY2R0UJJXvI=
Subject key identifier: CA:B9:8B:A7:C2:3E:53:F8:3C:C4:4D:EE:5A:44:7C:EB:96:C9:DB:DC
Certificate issuer: /CN=8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E
Certificate serial: 4BF2C6D09CE7D0467253566997850A33197F539F
Authority key identifier: 8B:7A:B2:E0:B7:3A:2D:33:41:57:B4:75:4E:6E:B2:34:E9:D3:A1:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/3133312e3130382e36302e302f32322d3232203d3e203631363634.roa
Signing time: Tue 18 Feb 2025 13:26:46 +0000
ROA not before: Tue 18 Feb 2025 13:21:46 +0000
ROA not after: Tue 17 Feb 2026 13:26:46 +0000
asID: 61664
IP address blocks: 131.108.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f2:c6:d0:9c:e7:d0:46:72:53:56:69:97:85:0a:33:19:7f:53:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E
Validity
Not Before: Feb 18 13:21:46 2025 GMT
Not After : Feb 17 13:26:46 2026 GMT
Subject: CN=CAB98BA7C23E53F83CC44DEE5A447CEB96C9DBDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:9b:9e:b2:63:52:8f:88:b2:94:d0:bf:78:
ac:69:82:c6:4e:d4:67:e3:8d:b9:8a:56:48:fb:9e:
e0:67:d4:e0:9d:52:d1:ad:19:ee:7d:24:05:72:31:
23:e0:ed:4c:16:05:55:57:4d:37:ab:86:40:7b:fe:
43:90:45:49:b2:3f:48:2b:21:e3:88:0a:f5:10:4f:
d7:90:df:46:93:bd:0a:c3:e2:e7:b0:47:42:29:a2:
ef:03:22:62:a8:4f:53:15:8b:75:d3:9f:1b:5d:da:
a6:4b:64:a3:d2:f8:bb:ba:cd:cf:6a:78:7b:53:cb:
22:83:93:6b:cc:94:24:10:fd:43:6d:ba:2b:60:d3:
39:a3:22:c2:52:1e:fa:8d:1c:5f:48:5f:66:24:f7:
a2:0f:ef:1a:c8:18:26:b8:44:12:d2:22:3e:ea:fe:
32:70:48:b5:e8:a0:c0:a0:25:d0:5d:f7:e7:fb:0a:
ec:63:ee:52:fa:6e:f9:77:f5:7a:49:81:0b:17:15:
a5:a5:76:eb:4b:83:a9:f4:cd:57:6e:33:56:02:da:
c2:2f:f9:67:4c:56:8a:c4:45:6e:1f:83:ff:3b:9b:
25:a2:9f:0c:9f:52:40:7b:b6:52:4c:0e:e5:92:12:
6e:7f:43:7d:27:6f:73:4b:f2:5d:d6:b9:a0:cb:a3:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B9:8B:A7:C2:3E:53:F8:3C:C4:4D:EE:5A:44:7C:EB:96:C9:DB:DC
X509v3 Authority Key Identifier:
keyid:8B:7A:B2:E0:B7:3A:2D:33:41:57:B4:75:4E:6E:B2:34:E9:D3:A1:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/3133312e3130382e36302e302f32322d3232203d3e203631363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.60.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:7b:1d:f6:78:5a:b9:03:5a:8d:92:5f:3d:7e:2b:15:16:f7:
0a:78:6c:ef:29:e9:d7:72:b6:8a:42:ea:21:f5:fd:35:8d:04:
c5:99:d4:f5:4b:c7:b7:05:3f:b6:04:6f:24:78:2e:9c:fa:73:
64:8d:a8:23:eb:9b:84:a2:2f:50:d9:db:4d:d3:18:e2:bf:70:
96:09:a7:a5:ff:62:c8:af:94:47:4a:34:d1:64:07:86:f6:f4:
5f:86:c2:38:6c:2c:8f:50:e4:6d:dc:03:6f:4c:3f:8b:0b:68:
dc:51:a9:f4:ed:79:4b:66:b0:83:57:b1:b9:ce:b3:7b:80:19:
1e:45:93:c8:2a:c1:1d:a7:85:8e:90:8d:a5:e1:94:6f:99:63:
b5:9d:1c:4d:22:05:05:69:ef:13:fd:f3:c7:11:5d:10:a6:26:
8c:a9:71:40:7b:40:4b:a9:70:cf:fe:ec:4f:eb:b7:1c:61:c5:
d6:f2:cd:6a:b1:11:11:46:e9:7f:b1:59:e8:56:33:dc:73:93:
08:28:17:3d:c4:a6:49:fa:0b:ba:10:bd:18:a0:45:5f:9b:1e:
af:ba:73:8c:d1:35:35:f4:4a:48:7b:39:ce:72:b1:ac:19:51:
84:57:3f:b3:5e:3f:c0:13:7f:5c:63:5f:fd:b0:fd:e0:96:d3:
80:68:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:54 2025 by rpki-client