Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa
File: 3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa (raw, json)
Hash identifier: 8ovb1S/m7YA8y4SK6Bxxap8msScCa6ih5FjhTooaW0E=
Subject key identifier: B9:42:42:3F:41:55:E8:21:4F:5F:D2:92:74:2A:15:D9:8C:C7:F2:97
Certificate issuer: /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial: 7D65792F69583D1C70739B6A58924CA052213F8D
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa
Signing time: Thu 06 Mar 2025 03:11:49 +0000
ROA not before: Thu 06 Mar 2025 03:06:49 +0000
ROA not after: Thu 05 Mar 2026 03:11:49 +0000
asID: 266611
IP address blocks: 128.201.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:65:79:2f:69:58:3d:1c:70:73:9b:6a:58:92:4c:a0:52:21:3f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
Validity
Not Before: Mar 6 03:06:49 2025 GMT
Not After : Mar 5 03:11:49 2026 GMT
Subject: CN=B942423F4155E8214F5FD292742A15D98CC7F297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:82:ca:22:de:fa:d4:3d:57:e8:44:d4:6e:
2d:0a:e8:2d:78:7b:db:7a:8f:c5:6b:ab:6c:57:fe:
bb:85:dc:89:b7:66:f5:ae:dd:65:87:56:b3:c3:b7:
59:c1:be:f7:ee:58:30:cc:62:4f:7e:19:51:c2:9c:
24:b7:69:4f:b4:89:2e:b0:40:93:20:f5:ea:f2:3f:
d1:ac:ab:6a:14:a3:87:19:5e:1c:63:d5:8e:29:66:
61:42:75:6c:a0:f2:df:fd:c5:8d:f4:77:00:a5:8c:
05:1a:df:3c:f6:66:3e:21:a5:4b:12:62:e2:8e:78:
6c:ce:8e:ff:a0:1b:9a:1a:35:f8:13:2a:32:70:a9:
63:ef:26:4f:76:bf:9d:e5:4e:54:a9:c3:63:43:b2:
43:bf:24:c4:7c:dd:10:8c:a8:80:7e:a0:65:33:f8:
38:2a:ab:19:09:7a:53:fa:80:9a:1a:38:38:82:eb:
95:4d:50:eb:6f:7e:b1:21:24:85:46:6b:09:fc:7d:
e0:20:48:91:af:b2:8c:be:55:a7:e7:a8:32:27:22:
e3:c0:4d:e4:3a:f0:0b:94:3f:c6:67:f0:f2:46:52:
ae:5d:42:54:a1:a4:55:5c:6e:2b:17:7e:eb:72:ee:
c7:4f:f4:5f:c6:ee:10:14:f5:e5:c9:2a:e3:d6:2f:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:42:42:3F:41:55:E8:21:4F:5F:D2:92:74:2A:15:D9:8C:C7:F2:97
X509v3 Authority Key Identifier:
keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.28.0/23
Signature Algorithm: sha256WithRSAEncryption
20:0a:44:65:bc:42:cb:9e:aa:a2:d9:aa:a0:c5:e5:01:f1:7a:
8d:77:8c:fc:d2:a7:3f:42:ef:af:6f:d2:c5:3e:05:16:b8:6c:
6e:05:4b:2a:a3:31:2b:c9:24:21:6a:42:5e:a0:0c:f5:ee:ea:
c5:54:8f:94:a4:85:9d:f5:7c:7c:96:29:5d:c1:df:26:85:e4:
00:bf:01:ab:2a:e8:e5:39:eb:cc:19:fd:de:06:05:b5:33:49:
8b:e1:51:bf:8f:9f:0f:32:0f:89:83:f6:d0:e2:0b:ee:68:70:
8d:b8:5c:1e:d4:10:b3:77:27:e4:2a:7d:57:20:23:74:03:0f:
5c:97:6c:a5:8e:07:49:c2:c8:52:6d:85:57:5b:e2:f1:a8:11:
8c:8c:7e:16:d0:2c:c9:e2:22:f6:7c:20:a6:89:f9:e4:44:6b:
9b:8f:67:b0:41:0d:9b:42:50:a0:ad:15:89:39:88:6b:de:4d:
bb:1f:af:0d:00:57:a7:02:d1:fc:47:2b:7b:bd:4e:90:20:21:
04:33:9e:3a:66:7a:cd:49:71:0c:66:98:b2:d8:06:d8:5c:dd:
a9:9d:53:70:b7:30:00:df:21:8f:cf:fd:22:15:6b:a1:aa:27:
47:01:5a:b0:d3:4d:7c:f2:52:f2:2d:3f:f6:c0:f1:e2:58:35:
5f:9f:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:35:20 2025 by rpki-client