Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/3133312e3136312e34302e302f32322d3234203d3e203532363734.roa
File: 3133312e3136312e34302e302f32322d3234203d3e203532363734.roa (raw, json)
Hash identifier: WfUhwdVTvReFYIGmOc0jdhNR/svekUAIl1o/PkuaSxA=
Subject key identifier: AB:46:CA:D9:35:28:6A:99:5B:87:29:CF:37:0E:6C:94:95:F8:C7:59
Certificate issuer: /CN=D35F81E9E55C4E76424E39703EB07E6238E47B82
Certificate serial: 60B45F5F850B285234915AFDEACC97F45B53D1C1
Authority key identifier: D3:5F:81:E9:E5:5C:4E:76:42:4E:39:70:3E:B0:7E:62:38:E4:7B:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F81E9E55C4E76424E39703EB07E6238E47B82.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/3133312e3136312e34302e302f32322d3234203d3e203532363734.roa
Signing time: Thu 02 Mar 2023 20:52:03 +0000
ROA not before: Thu 02 Mar 2023 20:47:03 +0000
ROA not after: Thu 29 Feb 2024 20:52:03 +0000
asID: 52674
IP address blocks: 131.161.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b4:5f:5f:85:0b:28:52:34:91:5a:fd:ea:cc:97:f4:5b:53:d1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D35F81E9E55C4E76424E39703EB07E6238E47B82
Validity
Not Before: Mar 2 20:47:03 2023 GMT
Not After : Feb 29 20:52:03 2024 GMT
Subject: CN=AB46CAD935286A995B8729CF370E6C9495F8C759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:21:16:85:6e:03:f9:9d:b4:9b:30:15:ab:
f7:de:e6:ce:fb:ff:70:31:77:72:9d:45:52:d9:31:
ce:88:73:d7:cf:a9:67:29:1d:d2:70:f2:26:30:50:
a3:1b:fc:28:60:b0:dc:79:83:9e:fd:dd:28:69:03:
c3:5b:01:4c:ac:1b:18:05:7d:91:cb:73:12:54:0f:
a2:c2:58:79:87:14:ab:1e:4e:6d:e2:43:7c:a6:bc:
9f:c6:06:7c:a3:0e:c5:d6:bf:14:24:c5:90:9a:e7:
59:cd:8f:7f:ba:eb:de:93:d8:f8:46:48:a3:22:25:
d7:d7:47:d0:e9:f3:d0:f3:0a:e3:a9:ce:eb:df:0c:
47:83:a3:4c:57:01:2b:b4:b6:51:74:e4:71:78:cd:
0c:7c:fe:dd:3c:31:a8:72:42:f4:9a:45:0c:df:1a:
2c:aa:28:ca:c4:c5:24:15:02:45:71:7a:6a:11:25:
3f:58:7e:b8:7c:ce:51:b0:9f:ad:09:4b:2d:ad:9b:
53:89:67:a1:89:10:78:23:50:32:a3:ef:86:b0:8a:
9a:2e:06:72:52:bc:87:66:3f:de:73:3f:7c:f6:ad:
e9:52:3b:70:11:42:86:cf:7c:2e:f1:a1:95:89:be:
2a:b0:7f:ec:4e:eb:77:1c:5c:95:aa:a3:53:27:11:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:46:CA:D9:35:28:6A:99:5B:87:29:CF:37:0E:6C:94:95:F8:C7:59
X509v3 Authority Key Identifier:
keyid:D3:5F:81:E9:E5:5C:4E:76:42:4E:39:70:3E:B0:7E:62:38:E4:7B:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/D35F81E9E55C4E76424E39703EB07E6238E47B82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F81E9E55C4E76424E39703EB07E6238E47B82.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/3133312e3136312e34302e302f32322d3234203d3e203532363734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.40.0/22
Signature Algorithm: sha256WithRSAEncryption
92:d0:80:04:79:ad:69:10:de:b9:ef:40:af:c2:51:3d:cb:5c:
d3:90:5e:e9:41:71:ba:5e:69:e2:47:0a:20:8a:c3:67:54:77:
03:3c:ce:40:8b:70:8c:15:8b:3e:c5:64:d0:14:a7:a0:8e:35:
3b:70:62:7b:64:9b:0b:a6:ea:77:26:de:76:14:e8:9b:52:3c:
2b:d0:3d:36:a8:4b:e8:a9:e7:b1:12:2b:c0:4a:8c:68:5b:51:
88:83:f1:c8:01:b3:7c:41:da:04:2f:f5:29:0d:71:26:47:66:
86:a2:dd:b8:81:da:48:c4:ac:11:55:b6:85:fe:99:ae:a5:da:
00:9d:c5:83:f6:d6:39:58:96:e4:6b:91:4b:67:8b:9e:51:80:
9e:8c:7c:fe:6e:71:b2:8e:c6:ee:a0:95:50:4a:63:8f:3f:04:
4b:3e:e2:91:1c:30:6d:f5:3a:34:84:19:57:27:f0:89:a8:ac:
fa:c9:c3:b7:fc:18:15:bd:e4:37:9f:3a:51:4d:f4:aa:86:3b:
02:12:ca:79:18:9a:4a:bd:2e:76:94:44:5f:81:9e:38:98:8d:
41:3d:ba:68:b2:9d:e0:3d:b8:16:aa:ff:81:92:f4:e6:87:65:
3a:d4:4d:7d:b6:cb:0c:71:f1:19:ff:66:6e:f7:b5:35:0f:a1:
be:2a:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:42 2025 by rpki-client