Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3133312e37322e3135322e302f32322d3234203d3e203631373435.roa
File: 3133312e37322e3135322e302f32322d3234203d3e203631373435.roa (raw, json)
Hash identifier: 2gUAN6b4daZcMmPCDv+awFMb9tvA5toN7MauMLgGcfI=
Subject key identifier: 9A:13:28:C1:1B:C8:1A:0D:3B:EC:B1:49:CD:B0:98:3D:F8:3F:98:C3
Certificate issuer: /CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
Certificate serial: 75F0BF1B68265F9D1C9B7DED45196A379A870B95
Authority key identifier: CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3133312e37322e3135322e302f32322d3234203d3e203631373435.roa
Signing time: Mon 25 Nov 2024 13:58:00 +0000
ROA not before: Mon 25 Nov 2024 13:53:00 +0000
ROA not after: Mon 24 Nov 2025 13:58:00 +0000
asID: 61745
IP address blocks: 131.72.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f0:bf:1b:68:26:5f:9d:1c:9b:7d:ed:45:19:6a:37:9a:87:0b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
Validity
Not Before: Nov 25 13:53:00 2024 GMT
Not After : Nov 24 13:58:00 2025 GMT
Subject: CN=9A1328C11BC81A0D3BECB149CDB0983DF83F98C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:3f:e4:bc:53:30:f7:52:a5:e9:88:d6:90:
ee:36:ee:dc:c1:bf:b5:44:7f:9f:75:41:20:53:8d:
e8:60:d9:72:64:da:35:d6:a8:91:ff:96:18:2e:df:
56:6e:9a:4e:54:f2:ef:1c:87:e2:e7:bf:68:e7:73:
23:1f:ba:68:9e:da:f4:63:8b:c6:6f:13:bc:23:89:
c2:86:e5:ec:d4:d9:87:01:5a:47:07:a2:84:7b:45:
44:f1:da:69:35:3d:b9:f2:ec:5a:89:ae:44:48:06:
2c:ca:8c:9f:a1:c1:c6:18:96:e5:fe:22:39:72:52:
48:95:8d:d7:0b:88:e8:b3:c6:6f:50:a4:5d:db:6e:
f3:ae:d1:b5:5d:22:87:37:3e:c9:f4:42:d4:a9:e9:
8d:69:b5:55:a1:be:f2:3c:a8:5d:ab:af:54:8b:b0:
65:ce:14:e3:fd:15:03:d4:9b:7b:23:84:b4:59:28:
e5:c6:80:44:e9:b6:1e:c4:c5:c0:a8:40:10:19:6d:
85:79:81:ac:4e:00:5f:49:62:e0:b5:06:4e:73:ce:
8d:17:44:01:15:ae:ae:ea:03:0f:c0:be:8a:b6:bb:
cc:0c:c4:ed:c2:60:82:b0:da:24:60:5f:6c:3e:0f:
23:96:31:76:21:5f:cf:8f:d2:64:77:aa:e4:31:22:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:13:28:C1:1B:C8:1A:0D:3B:EC:B1:49:CD:B0:98:3D:F8:3F:98:C3
X509v3 Authority Key Identifier:
keyid:CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3133312e37322e3135322e302f32322d3234203d3e203631373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.152.0/22
Signature Algorithm: sha256WithRSAEncryption
25:46:03:e3:35:52:b3:2d:fd:3e:31:ee:24:d0:dd:e9:33:08:
17:19:eb:fe:cd:61:3c:6b:2b:59:60:94:79:02:37:e8:41:70:
a9:92:d0:ea:7f:ef:13:3b:f4:ee:9b:3b:22:7c:62:f1:0b:5f:
04:51:c4:37:56:02:1f:fe:58:75:cb:be:ac:3d:fd:eb:e3:f6:
59:ea:0f:bd:ce:f7:c0:db:ef:bf:72:cc:0d:a5:d9:9c:b5:f9:
aa:7c:ec:c5:a7:98:40:83:63:7b:dc:51:9c:48:8f:40:58:c6:
8a:59:77:90:dc:36:94:fd:14:29:22:00:da:9b:e1:d4:cf:d5:
98:da:bf:6e:7b:56:7d:7c:b3:cb:28:1e:ad:3a:25:08:c7:d1:
40:6b:c5:23:cc:62:56:ba:f5:fe:7f:c1:71:93:7e:4e:67:1e:
47:7b:47:c2:a3:84:7c:e6:a9:4c:53:95:55:4f:5f:04:e5:2d:
90:c9:77:24:ff:25:59:22:6e:e3:00:4e:aa:da:d4:93:e3:26:
4b:bf:ad:25:01:3f:63:23:0f:20:1f:5c:d0:21:f5:ba:eb:10:
cb:56:5f:e5:95:cd:4a:9b:62:a6:a9:3f:18:27:ed:39:0d:7a:
23:c4:4d:ea:ad:6e:c2:34:32:21:ca:61:4a:14:64:db:65:fe:
5a:93:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:53:09 2024 by rpki-client on console-fra.rpki-client.org