Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36362e302f32342d3234203d3e203631363830.roa
File: 3133312e3130382e36362e302f32342d3234203d3e203631363830.roa (raw, json)
Hash identifier: VsHpInH1Hy89SHajoZueLIIYnnU1uCZkAPp3lr7jKIs=
Subject key identifier: 24:2A:E4:C5:06:B0:90:C0:C1:1E:F7:78:C2:64:00:D5:15:76:4D:DE
Certificate issuer: /CN=9D1976629022211514D82A46F1AF3344D2E667F3
Certificate serial: 7A95EF9F556472AFA4E77E755DA27E169D32E6D1
Authority key identifier: 9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36362e302f32342d3234203d3e203631363830.roa
Signing time: Mon 23 Dec 2024 12:58:02 +0000
ROA not before: Mon 23 Dec 2024 12:53:02 +0000
ROA not after: Mon 22 Dec 2025 12:58:02 +0000
asID: 61680
IP address blocks: 131.108.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:95:ef:9f:55:64:72:af:a4:e7:7e:75:5d:a2:7e:16:9d:32:e6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D1976629022211514D82A46F1AF3344D2E667F3
Validity
Not Before: Dec 23 12:53:02 2024 GMT
Not After : Dec 22 12:58:02 2025 GMT
Subject: CN=242AE4C506B090C0C11EF778C26400D515764DDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e8:ab:3d:19:0d:a4:0f:27:cf:9f:ba:f7:16:
4f:0d:a5:8b:ab:0f:c5:22:9d:c6:b8:f5:8d:dd:c2:
5d:7a:9f:bd:40:16:40:4a:3f:69:90:c2:31:77:83:
10:a7:68:c1:a8:0b:9e:3e:e1:bb:04:db:80:e7:df:
d2:7b:65:ff:b9:36:b4:17:6e:e1:7f:d0:9d:f9:b2:
0d:b4:92:55:6f:f7:7a:22:60:1f:d2:89:dd:c1:9b:
02:a3:63:40:72:f9:71:6b:08:41:ca:81:76:fc:5b:
90:f8:e4:2a:be:f6:68:9d:7d:a9:40:a3:af:37:2e:
4b:45:ef:a3:b7:64:7d:fc:9e:17:4a:26:8e:6b:5f:
34:9c:bc:c9:9b:d9:99:c3:e4:f8:2a:06:35:3f:3b:
74:00:4e:a4:21:bd:f5:77:76:d9:bd:48:93:08:8b:
46:94:91:46:4a:f2:97:2b:a5:68:91:d5:c4:ff:39:
9b:4a:a9:fb:a3:a8:97:22:1f:83:88:49:74:aa:05:
fc:58:4e:31:8c:6e:95:63:ce:b7:95:d9:5d:33:e2:
27:2e:6b:55:27:31:81:82:86:b7:73:bf:65:ea:29:
d3:09:5a:ee:62:60:f4:23:1c:cd:b2:52:fc:d5:06:
3a:d6:81:7b:c6:37:1c:d5:9f:1c:8e:56:cf:c8:d2:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:E4:C5:06:B0:90:C0:C1:1E:F7:78:C2:64:00:D5:15:76:4D:DE
X509v3 Authority Key Identifier:
keyid:9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36362e302f32342d3234203d3e203631363830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.66.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:88:27:5c:a7:a6:d9:13:c4:80:3d:be:8c:81:5d:ff:0b:5b:
bf:e6:76:89:da:ef:ba:6c:f7:c6:b1:34:1a:56:1c:bf:46:dd:
c0:b7:15:18:36:d0:4c:77:f3:d4:59:7d:47:be:c9:d6:cc:c7:
ed:ee:aa:a3:c7:76:02:26:70:c9:12:1c:51:05:c1:89:41:78:
f6:df:01:8f:28:3d:a9:ed:e8:fd:84:1b:49:00:c6:55:0f:80:
65:62:0f:36:77:bc:b7:6a:e5:cd:f8:4a:a6:e5:3e:89:a6:d9:
ae:9d:00:8b:35:5f:fe:d7:0a:0a:b7:fc:ba:91:b3:20:ae:52:
8a:76:57:58:af:fb:13:74:25:81:16:ad:6a:67:87:a3:75:a9:
82:ee:bd:03:fe:7c:69:e1:f7:4b:9c:2f:ab:10:30:da:6f:9b:
75:c5:08:92:b6:9a:39:36:6d:4e:b5:1d:26:e5:de:ab:8d:cb:
f5:40:d4:29:d0:34:9f:88:ac:da:e3:5b:04:d8:31:ac:27:f5:
e7:57:2d:53:6c:f8:f8:40:d5:8b:d3:00:4e:af:4c:0e:96:86:
54:86:4d:14:12:56:cd:31:d4:2f:73:bb:ef:ad:6b:58:61:75:
3e:6a:dc:de:2a:d7:c6:bb:30:36:25:9a:fd:bd:e7:f2:e9:0a:
45:41:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:33:39 2025 by rpki-client