Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3133312e3232312e3132382e302f32322d3234203d3e20323633353639.roa
File: 3133312e3232312e3132382e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier: Xv+kcgBYFqQgiDbESFFalhMi7sxHvf8HTluvaxZptM4=
Subject key identifier: B9:55:F1:57:E4:FD:EE:8E:D5:96:0A:94:3D:0D:19:C3:1C:7C:2F:C1
Certificate issuer: /CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
Certificate serial: 4AC9EDECE17FD5D83E9544E65A5D1B7081295227
Authority key identifier: 82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3133312e3232312e3132382e302f32322d3234203d3e20323633353639.roa
Signing time: Fri 24 Jan 2025 18:46:26 +0000
ROA not before: Fri 24 Jan 2025 18:41:26 +0000
ROA not after: Fri 23 Jan 2026 18:46:26 +0000
asID: 263569
IP address blocks: 131.221.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c9:ed:ec:e1:7f:d5:d8:3e:95:44:e6:5a:5d:1b:70:81:29:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
Validity
Not Before: Jan 24 18:41:26 2025 GMT
Not After : Jan 23 18:46:26 2026 GMT
Subject: CN=B955F157E4FDEE8ED5960A943D0D19C31C7C2FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:1b:86:17:bc:ed:9e:10:4a:d3:b5:72:7e:
57:3a:dc:33:9f:79:f5:bc:59:0e:29:84:e4:7c:8a:
ea:91:a3:9b:16:60:f8:36:4e:98:3a:fe:ba:30:a2:
d1:0b:85:5f:0d:7c:82:03:5a:9b:4c:0a:95:6f:de:
e0:34:4d:06:0f:57:d6:bb:ba:ce:64:a0:6b:7e:df:
da:38:cb:d8:fb:3b:af:e5:23:24:1c:c2:41:25:32:
c7:d4:ce:92:b0:a6:1d:f3:79:0a:60:c9:6e:c2:6d:
cd:12:f8:5c:4f:a2:b7:8e:7c:6b:14:65:19:fc:60:
69:2e:be:e1:9e:7c:18:d3:e6:fb:ae:ce:97:9b:40:
3f:36:8e:45:5b:ac:a2:c8:73:96:a0:bf:83:f6:a0:
49:dd:8f:b7:f4:86:b9:88:11:3d:f3:d6:16:59:1a:
ae:83:3b:69:f7:60:4b:3e:10:70:e7:48:a3:f5:e8:
6e:7b:8b:06:c7:9c:5e:3c:cc:22:86:6a:ce:ce:61:
7a:90:6c:45:2c:bb:b4:79:a1:f4:f2:e8:b0:62:15:
f2:b5:ee:cd:5d:bd:d6:56:91:60:8f:98:16:d1:90:
04:5d:57:39:6f:25:1a:64:c1:a6:28:fc:37:95:7e:
85:56:d6:2a:fe:d7:77:cd:45:22:45:6b:01:5e:11:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:55:F1:57:E4:FD:EE:8E:D5:96:0A:94:3D:0D:19:C3:1C:7C:2F:C1
X509v3 Authority Key Identifier:
keyid:82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/82BD943EADDE8D043442C08B37EFCE567D8A3660.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3133312e3232312e3132382e302f32322d3234203d3e20323633353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.128.0/22
Signature Algorithm: sha256WithRSAEncryption
16:dc:93:d9:c9:c3:27:74:59:7a:1e:13:e6:60:ff:e0:06:c4:
96:e8:08:9b:d8:f9:66:c2:12:f2:87:37:27:91:9a:20:cb:0f:
19:e9:bd:8b:71:58:70:90:45:be:f5:71:7c:03:47:a3:2a:43:
0e:b8:c4:75:53:9a:08:d5:d4:ed:57:1a:a0:e2:eb:fe:e7:b9:
d9:5a:3b:38:9d:b1:df:d5:d3:97:a7:ee:fa:75:21:93:a7:d5:
12:28:58:bd:a5:ed:b5:48:40:7c:5c:15:35:2c:fa:0c:4b:47:
93:ba:70:d9:fc:ef:fe:83:2c:cd:e4:40:98:0d:05:89:d0:48:
83:3a:f3:af:a1:99:34:e7:5b:43:7f:a0:1d:c9:55:c0:5a:39:
dc:bb:5d:de:34:76:f2:e0:dc:c5:dd:79:88:d2:84:21:f5:0e:
85:5e:df:54:49:0f:d1:7c:80:b4:de:37:19:bc:1a:a5:4e:1b:
22:16:25:1e:9f:83:7a:b8:bd:f5:eb:34:41:97:5d:2d:6f:d7:
0b:55:1c:d5:e1:94:16:1b:7d:26:17:3a:e6:6d:4f:45:c8:12:
49:ab:c8:6f:c3:d9:65:24:91:c3:7e:9f:65:2a:88:92:81:58:
13:dd:48:83:3a:2b:72:a1:fb:17:d8:01:09:37:5c:81:c4:0d:
d4:7e:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:18:22 2025 by rpki-client