Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132302e302f32322d3232203d3e20323632353332.roa
File: 3132382e3230312e3132302e302f32322d3232203d3e20323632353332.roa (raw, json)
Hash identifier: Z+28Vi0ptV6raNIK9O9USAG/xWERTFIh14QLjiU8mYM=
Subject key identifier: 1D:1B:86:CB:45:05:3A:2F:2F:DD:04:54:03:81:C1:9A:6A:42:06:5D
Certificate issuer: /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial: 37C666536BB573DC76B0191CA2C48FB8C6DB92C0
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132302e302f32322d3232203d3e20323632353332.roa
Signing time: Wed 28 Feb 2024 14:12:31 +0000
ROA not before: Wed 28 Feb 2024 14:07:31 +0000
ROA not after: Wed 26 Feb 2025 14:12:31 +0000
asID: 262532
IP address blocks: 128.201.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c6:66:53:6b:b5:73:dc:76:b0:19:1c:a2:c4:8f:b8:c6:db:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Validity
Not Before: Feb 28 14:07:31 2024 GMT
Not After : Feb 26 14:12:31 2025 GMT
Subject: CN=1D1B86CB45053A2F2FDD04540381C19A6A42065D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:04:35:cb:98:fe:5f:26:6a:01:0c:ec:ec:62:
90:bd:7b:06:d0:64:98:52:a4:db:b6:f1:f1:ab:c6:
80:1e:08:db:11:20:f5:3d:5d:b5:33:3a:f7:d2:c3:
82:a4:8b:ab:5e:7f:7a:76:b1:b2:16:fb:f7:a4:38:
f6:3c:d8:be:42:0f:61:4a:c5:50:66:eb:62:4e:af:
60:a2:7c:5d:8b:91:ed:d5:9e:2e:90:47:4a:f6:f3:
ce:26:e2:74:ec:d3:d7:55:42:c3:c9:75:ce:de:5f:
5c:00:99:16:cf:57:78:73:bb:63:8b:04:00:30:07:
8d:f5:01:42:e7:73:47:89:f4:f6:cb:f3:ad:bf:c6:
96:8e:9e:9c:88:e6:cd:c5:cd:98:0b:64:e0:9a:c6:
94:db:0e:d9:bd:15:77:1f:27:7d:1c:97:70:b3:6a:
c8:e1:da:52:2e:2b:9f:50:83:6b:51:e0:13:9a:45:
63:31:92:5c:ff:c4:39:1a:e2:51:d5:cc:e1:5e:fa:
60:ce:00:65:66:b3:45:27:6b:e2:ab:bf:a8:73:3b:
a7:3a:d6:cd:7a:78:b2:7a:6c:9d:43:be:e7:d0:e2:
0c:48:78:09:fd:23:2a:e4:a8:2e:fc:b3:57:db:4b:
2e:1d:d2:51:d3:a4:4f:32:74:97:e1:76:31:53:84:
1b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:86:CB:45:05:3A:2F:2F:DD:04:54:03:81:C1:9A:6A:42:06:5D
X509v3 Authority Key Identifier:
keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132302e302f32322d3232203d3e20323632353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.120.0/22
Signature Algorithm: sha256WithRSAEncryption
94:63:83:71:02:75:99:96:e6:cc:2b:17:a4:21:7d:e9:ba:de:
77:59:b7:e4:1c:3b:72:9a:95:8f:78:15:45:b4:10:c0:b3:eb:
cc:bb:cb:b8:32:7a:1c:0c:d1:58:fc:a8:9d:33:be:04:0f:8c:
66:8f:3d:6b:2a:2a:68:96:01:a7:8c:b8:e8:b3:5d:45:2b:8d:
38:d7:53:62:1b:3c:82:4d:83:09:73:4e:df:01:95:bd:a5:43:
00:c2:18:2d:c6:b6:93:d0:1a:ed:13:2b:64:6d:48:70:8a:9d:
75:a4:66:95:5b:d1:94:6d:5a:e1:1e:cd:04:ee:ee:e0:43:39:
5a:a7:f5:2e:5b:49:f8:93:51:c1:a1:c4:48:98:1c:af:1e:70:
ce:aa:8f:6b:d1:28:b9:e5:fc:40:73:e8:8b:6f:99:90:57:6b:
75:5b:dd:71:65:ea:e0:c4:95:a8:2e:f9:68:aa:81:89:c9:b9:
1f:37:c1:00:45:d8:f3:51:ca:db:9c:a7:74:90:92:94:cc:58:
98:65:07:c1:5b:6d:1d:89:20:c9:3a:4e:2c:f4:e0:e4:57:8b:
a9:d8:ab:82:04:15:9f:ec:b6:1b:63:dd:de:3e:76:cc:a8:0f:
e8:c3:58:b0:63:49:b4:ea:66:69:b9:b4:25:d6:1a:df:b0:fe:
c5:dd:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:47 2025 by rpki-client