Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38362e302f32332d3234203d3e203233303734.roa
File: 3136342e38352e38362e302f32332d3234203d3e203233303734.roa (raw, json)
Hash identifier: ECAE3SphFAToc5/QMr0W980ymWh8oB4hSlXUyN4MOTI=
Subject key identifier: 13:A2:40:C4:13:7E:D2:8C:99:4F:B3:13:F0:33:D6:75:10:00:51:F6
Certificate issuer: /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial: 37D0858839D7E92AA7344916F2DE405C06FF9E56
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38362e302f32332d3234203d3e203233303734.roa
Signing time: Fri 07 Feb 2025 12:33:50 +0000
ROA not before: Fri 07 Feb 2025 12:28:50 +0000
ROA not after: Fri 06 Feb 2026 12:33:50 +0000
asID: 23074
IP address blocks: 164.85.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d0:85:88:39:d7:e9:2a:a7:34:49:16:f2:de:40:5c:06:ff:9e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Validity
Not Before: Feb 7 12:28:50 2025 GMT
Not After : Feb 6 12:33:50 2026 GMT
Subject: CN=13A240C4137ED28C994FB313F033D675100051F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:66:f6:9f:47:30:88:3d:94:59:1d:07:29:
a5:e1:4f:89:df:6b:27:25:68:f7:69:fb:10:e5:11:
81:75:5d:18:49:5d:0a:e5:43:ac:f9:a4:6c:3b:7f:
33:ce:fb:65:14:76:f7:42:12:3f:5d:d4:cd:ae:c1:
e7:7a:2a:76:a6:f1:8f:cf:21:c9:4e:2c:01:0a:eb:
b0:af:4f:b2:ab:bd:47:8f:73:a5:bf:4e:09:5f:ad:
29:2b:59:23:3e:90:46:2a:19:b9:31:39:89:f3:74:
e3:d0:a6:6c:05:94:a0:5c:2b:32:bc:35:60:db:de:
ff:60:5f:e0:54:be:7a:19:20:a1:8b:df:10:a7:e5:
b3:0f:a1:c1:11:7a:21:31:d2:1c:61:db:a6:65:b8:
05:1a:a1:58:a2:a1:f4:0f:0c:a1:75:5f:9d:7a:29:
5f:85:37:8a:af:3d:91:2c:8c:8b:d6:6a:bd:fd:c4:
12:92:db:34:3d:8e:7e:be:5f:1b:2c:87:1a:0d:9e:
b8:73:4c:b8:41:30:2a:5c:49:dd:d8:2b:82:07:f3:
61:33:11:c0:04:bd:e0:2e:34:bf:05:7d:cd:39:00:
1f:7b:46:86:b0:9e:6a:fa:15:ae:35:3f:3c:36:f7:
a4:a9:a0:c4:f3:b0:b9:8e:77:59:47:a0:8c:0d:d1:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A2:40:C4:13:7E:D2:8C:99:4F:B3:13:F0:33:D6:75:10:00:51:F6
X509v3 Authority Key Identifier:
keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38362e302f32332d3234203d3e203233303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.85.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:b7:e0:c8:e8:a2:16:ad:81:d8:fc:67:fa:84:27:7d:50:6d:
03:2f:31:39:8c:58:4a:f4:cd:23:f5:83:a1:4e:1e:5b:6a:8d:
33:54:cd:00:8f:3c:ac:21:eb:44:f3:f9:30:6f:b5:b1:28:ce:
1a:b3:46:c8:71:ff:01:9d:61:42:0c:0f:97:a3:29:5c:3f:50:
00:2e:25:96:10:93:7c:e1:16:8c:80:e2:9f:9a:42:17:24:60:
6a:7d:fe:4a:2d:fb:42:79:0c:0d:fb:90:c4:10:bf:4b:f0:27:
8e:44:8d:25:ce:10:2f:8f:50:8d:42:b0:97:46:64:e3:72:f5:
3d:02:32:1d:f4:40:c4:ad:37:1d:67:26:77:2a:d0:5f:4c:8b:
42:0e:dc:af:96:00:9a:2c:65:73:59:ec:0d:c1:3c:2a:2d:4e:
bb:0a:9e:2c:04:fd:e6:47:c6:df:87:0b:c9:c3:bc:db:82:88:
18:01:2b:bb:cf:f3:6a:f7:bd:7c:b9:39:80:f5:62:7f:4d:9d:
4d:e8:1b:8d:be:85:e8:d3:41:82:c0:43:9a:ca:0b:f8:4e:ac:
1a:b1:0e:5a:43:0b:98:f1:95:56:71:ab:41:32:c0:b6:f3:4f:
cf:24:a0:c0:41:ca:be:38:cc:53:6a:da:76:1e:67:c6:81:45:
d8:63:f8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:35:02 2025 by rpki-client