Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/3133312e3136312e382e302f32322d3232203d3e20323730383830.roa
File: 3133312e3136312e382e302f32322d3232203d3e20323730383830.roa (raw, json)
Hash identifier: 5QmKhcPWfzlmX6h07Hv1gr5Ixx6pUBF128wsQAVACao=
Subject key identifier: EF:9F:BE:3F:AE:E0:3D:29:C8:89:E4:FA:80:5D:41:0C:BC:96:FA:EB
Certificate issuer: /CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
Certificate serial: 50C6E95B1F5679CF404D3EC884F36FD546C7A8A7
Authority key identifier: 87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/3133312e3136312e382e302f32322d3232203d3e20323730383830.roa
Signing time: Mon 04 Dec 2023 19:48:08 +0000
ROA not before: Mon 04 Dec 2023 19:43:08 +0000
ROA not after: Mon 02 Dec 2024 19:48:08 +0000
asID: 270880
IP address blocks: 131.161.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c6:e9:5b:1f:56:79:cf:40:4d:3e:c8:84:f3:6f:d5:46:c7:a8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
Validity
Not Before: Dec 4 19:43:08 2023 GMT
Not After : Dec 2 19:48:08 2024 GMT
Subject: CN=EF9FBE3FAEE03D29C889E4FA805D410CBC96FAEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:fb:02:a3:4b:c8:61:6c:49:03:85:6a:9c:
69:c1:c5:c1:ba:3e:a5:dd:6c:6e:d3:67:38:ad:59:
ed:e4:84:de:be:45:08:4f:82:d9:fa:e4:3b:9b:33:
fc:f0:ea:67:2a:f2:e8:57:c5:1a:89:a2:0f:8d:53:
44:af:dc:b9:86:46:f8:57:35:19:24:e4:58:4f:96:
fa:05:af:9f:04:ca:25:66:50:60:09:ff:56:d8:db:
13:8a:0c:06:32:d4:9f:7d:11:0d:b2:97:8a:db:5b:
c5:12:5e:19:60:85:47:14:20:01:4b:6c:a2:06:08:
6f:0d:43:a3:42:e7:80:c7:84:8d:01:fe:e1:50:09:
2f:3e:44:df:5b:4e:90:bf:df:9b:74:7d:22:47:b6:
c8:b0:f7:9a:95:93:6d:e6:f4:0a:be:55:60:c8:41:
5d:d5:eb:aa:76:2a:2c:21:a2:fd:c4:de:e4:7e:71:
74:e1:55:bd:f5:d2:e3:3a:89:cc:f4:15:80:44:7a:
2d:00:f2:b2:77:87:47:a9:33:53:a2:d1:68:4b:5b:
24:9c:d3:62:7e:f5:8a:60:88:ad:8a:a5:0e:c1:78:
3f:f2:8f:8d:3e:68:0f:45:f6:32:2b:43:6b:60:fd:
66:91:5c:de:4a:6c:cf:65:c7:5b:9b:95:c6:0d:87:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9F:BE:3F:AE:E0:3D:29:C8:89:E4:FA:80:5D:41:0C:BC:96:FA:EB
X509v3 Authority Key Identifier:
keyid:87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/3133312e3136312e382e302f32322d3232203d3e20323730383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.8.0/22
Signature Algorithm: sha256WithRSAEncryption
55:bd:a7:63:b4:c3:1b:5b:ab:f0:80:6b:c1:a7:a7:e1:57:f1:
a9:86:58:f8:ac:7a:70:10:16:4f:c8:ca:2e:a2:bf:23:99:da:
f2:7a:b3:15:56:54:51:50:1b:9b:d1:de:79:64:e9:10:62:2e:
9d:23:20:de:14:b5:a3:1a:19:12:a6:f4:b3:87:b7:54:cd:6a:
f8:87:33:00:df:7f:e3:1d:a9:d0:07:a0:25:63:a5:e0:76:a8:
22:13:d8:e9:fe:b4:5f:39:60:fb:58:e3:94:f7:81:35:a0:bd:
9c:c8:33:0b:e9:32:8a:11:2c:b6:c9:33:83:7b:d6:92:d5:62:
4e:4c:7c:12:68:28:61:67:56:65:0d:cf:6b:01:2e:0e:20:14:
90:c1:66:42:01:64:f5:fe:83:f3:4d:dd:08:69:e7:eb:c6:d5:
04:ac:72:bd:05:a6:4f:9f:74:bb:90:85:85:ba:77:f7:c2:fe:
41:ff:bc:e7:dd:04:1d:b9:1c:44:b9:84:01:06:ee:a1:19:eb:
a4:49:f7:11:06:17:17:8b:b3:51:02:b3:9d:ae:48:74:09:df:
c5:ac:85:74:60:20:e3:44:3e:a3:92:ad:a7:1f:4a:9e:d1:6a:
36:b5:3c:5d:9f:43:8f:95:cd:38:6b:e5:b2:9a:fb:9e:e6:cf:
06:88:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:37:30 2025 by rpki-client