Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa
File: 3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa (raw, json)
Hash identifier: K2e37zeexsB+CBLRN4yabf9F70Fz/QDfmidP3JsWv4c=
Subject key identifier: 4C:D1:E6:BD:93:6B:C7:FD:C7:F3:13:54:1E:AF:5D:80:98:CF:DE:7D
Certificate issuer: /CN=128E3DF9D967032A562E804D2E781DB1DC454A79
Certificate serial: 2021C937C5D841BEC80C4587755B96EFA881FBB5
Authority key identifier: 12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa
Signing time: Thu 25 Jan 2024 00:59:10 +0000
ROA not before: Thu 25 Jan 2024 00:54:10 +0000
ROA not after: Thu 23 Jan 2025 00:59:10 +0000
asID: 266611
IP address blocks: 128.201.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:21:c9:37:c5:d8:41:be:c8:0c:45:87:75:5b:96:ef:a8:81:fb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128E3DF9D967032A562E804D2E781DB1DC454A79
Validity
Not Before: Jan 25 00:54:10 2024 GMT
Not After : Jan 23 00:59:10 2025 GMT
Subject: CN=4CD1E6BD936BC7FDC7F313541EAF5D8098CFDE7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:a6:41:fb:82:b8:e1:0b:db:a3:c0:14:dd:
83:3e:38:8b:df:26:89:dd:ec:13:2c:7b:76:1c:00:
7b:2a:93:c7:f4:68:c5:39:1c:5d:ca:be:ea:29:d5:
d8:02:c1:d7:85:11:37:8f:55:c8:b9:79:28:16:ce:
da:f6:6f:3a:7e:bf:81:77:d9:f8:54:9a:37:04:90:
d0:3e:c3:4d:55:aa:24:9a:fc:61:52:3f:fa:1f:38:
64:76:6e:7c:1a:ac:b8:4b:b6:a1:1c:58:a4:4f:ff:
a7:95:18:3b:7d:12:d7:2f:27:f6:e8:07:bf:cb:9f:
26:5f:aa:67:e7:c2:43:72:b5:f1:80:41:48:7a:c4:
83:48:fb:ae:ac:e2:f1:45:3f:14:78:63:92:30:97:
0b:36:96:e3:6d:d8:37:65:f8:b9:f3:83:80:4d:50:
54:25:c9:40:53:27:62:ff:f9:3d:86:ad:07:9f:e4:
e9:91:f0:b5:48:7a:e6:8e:68:17:80:95:77:0c:51:
00:43:0a:86:32:0c:6b:24:57:46:d2:bd:46:c1:23:
9b:3f:4c:51:63:3f:00:21:41:0f:ba:3b:2b:5f:15:
cb:c9:fb:31:b9:d7:59:50:fb:ff:4e:15:cf:bf:64:
50:f0:0f:21:89:23:61:1f:97:1a:37:76:3e:af:82:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D1:E6:BD:93:6B:C7:FD:C7:F3:13:54:1E:AF:5D:80:98:CF:DE:7D
X509v3 Authority Key Identifier:
keyid:12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/128E3DF9D967032A562E804D2E781DB1DC454A79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.28.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:70:fb:80:a7:6f:11:b7:1b:39:8d:87:6e:a7:48:ff:4e:64:
fb:9c:ad:e5:ff:e0:f7:b2:88:a0:3c:0e:2f:91:77:1a:47:82:
b3:c8:3b:4f:58:ea:0a:04:8e:66:63:14:5f:f0:3a:62:41:85:
c4:8f:84:a2:26:c5:35:7e:fd:4b:94:24:cf:cb:a1:7f:58:87:
d6:2b:e4:bd:ea:ac:4e:03:ee:fc:f0:eb:1b:62:c0:b8:85:af:
6c:04:4b:51:09:c4:36:5b:14:88:a1:4c:8a:8d:c5:1f:13:80:
38:2b:44:03:4d:d8:2d:49:d0:5a:5d:df:9a:b2:d5:c2:4a:d5:
9c:c3:d9:a0:79:e6:f5:29:b3:aa:41:37:16:af:c7:69:f5:cd:
0a:d6:85:80:e1:df:14:d3:bb:aa:ab:c5:98:9b:9b:ae:a2:95:
b5:9e:ea:04:91:3f:02:44:80:4a:73:f8:0e:fb:a3:01:56:1b:
5e:a9:03:24:32:cb:e2:f1:7d:4f:05:34:18:aa:f6:aa:74:71:
f5:14:10:75:80:3a:91:f5:26:43:e8:70:76:d3:fc:fd:7e:da:
62:60:3a:bc:32:6d:7f:30:3e:d8:aa:3b:b0:c1:34:f2:11:21:
26:7d:0f:31:52:40:08:c6:87:a7:3e:29:4b:fa:76:a9:47:3c:
9d:9a:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:22:11 2025 by rpki-client