Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132302e302f32342d3234203d3e20323632353332.roa
File: 3132382e3230312e3132302e302f32342d3234203d3e20323632353332.roa (raw, json)
Hash identifier: rx6WpGeb7OiLRyWDf64SI5MKgC8ec5iSyCiUuVNComg=
Subject key identifier: F1:8C:EC:5A:2A:08:7F:91:F7:BB:22:36:36:5E:E2:8F:9F:70:C8:45
Certificate issuer: /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial: 5C54387EE3725AE78C6C11AEA84D4B44F13C1893
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132302e302f32342d3234203d3e20323632353332.roa
Signing time: Wed 28 Feb 2024 14:12:52 +0000
ROA not before: Wed 28 Feb 2024 14:07:52 +0000
ROA not after: Wed 26 Feb 2025 14:12:52 +0000
asID: 262532
IP address blocks: 128.201.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:54:38:7e:e3:72:5a:e7:8c:6c:11:ae:a8:4d:4b:44:f1:3c:18:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Validity
Not Before: Feb 28 14:07:52 2024 GMT
Not After : Feb 26 14:12:52 2025 GMT
Subject: CN=F18CEC5A2A087F91F7BB2236365EE28F9F70C845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:7b:2b:6b:03:1b:d6:8f:dd:ac:6b:25:75:
26:6e:62:c3:96:35:3d:af:75:af:2e:07:cd:f3:49:
95:8d:a2:3b:dd:bc:b3:72:59:03:b7:00:62:c7:2b:
18:f1:78:e2:83:9e:c3:91:39:b7:4e:0b:6b:17:b0:
41:a0:79:b8:ad:e5:0b:b1:9f:98:16:d5:42:74:0a:
b1:46:bb:d9:5d:36:4e:3d:dc:83:0d:cc:ca:77:6b:
c4:91:53:3b:00:3a:b4:b0:7d:d4:95:6e:34:ba:86:
ea:58:63:3c:f5:19:b6:91:60:12:4f:75:0b:2b:5d:
56:5f:fc:ed:b6:d8:73:ea:9f:01:0a:4b:05:3e:de:
11:59:6b:29:b8:09:84:36:6f:19:24:87:92:bc:84:
d7:ff:6f:1a:d2:ca:1d:8c:83:67:2d:21:83:e7:03:
a7:05:39:28:f0:3d:07:d6:08:d0:1d:b4:28:e4:1a:
4e:ef:52:69:39:74:a1:48:f2:02:c1:c1:36:0a:17:
cc:6e:1e:f2:ec:5a:0e:8f:89:7d:fd:c2:76:33:c4:
33:20:8f:f3:01:c6:6c:8e:86:19:4f:24:5d:21:2d:
29:30:78:ad:e8:03:ae:4c:62:ff:b1:5c:c1:d8:ec:
8b:dc:e7:36:84:76:0b:bd:69:4b:29:c1:00:50:e8:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8C:EC:5A:2A:08:7F:91:F7:BB:22:36:36:5E:E2:8F:9F:70:C8:45
X509v3 Authority Key Identifier:
keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132302e302f32342d3234203d3e20323632353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.120.0/24
Signature Algorithm: sha256WithRSAEncryption
96:95:ab:b5:5b:b5:79:bf:37:90:ca:33:fa:21:bf:99:c6:d8:
76:04:8d:00:c9:61:07:f4:25:c6:94:d0:9e:6b:ce:97:90:d0:
3b:1f:de:37:c1:9e:76:d5:2c:b9:0a:59:82:e5:e0:49:70:34:
f8:de:f2:fe:b2:b4:93:ef:33:de:7e:67:d9:62:97:ad:5f:5b:
13:28:80:09:b9:dc:c1:e8:1f:d7:69:1b:80:8a:b6:9c:a2:a8:
2d:f1:1b:48:d3:b1:45:2f:53:ed:ee:86:32:d7:77:48:ca:0e:
89:8d:0f:15:53:5d:29:80:41:17:17:24:4d:84:bb:06:92:de:
6b:74:61:97:9d:d9:ac:ce:66:b7:3c:21:fd:f2:4b:98:f8:c5:
32:f6:8c:c4:96:37:d4:bd:cb:5d:68:b2:09:31:23:fd:39:ee:
35:82:6d:c2:19:db:5f:e3:5a:86:ba:e1:1c:b5:9f:99:f0:bb:
34:f4:2b:0f:af:f5:c1:0b:68:cf:9b:f4:69:6a:44:30:61:db:
75:cb:73:63:4f:17:c1:02:eb:20:0c:bb:d2:71:09:fd:58:3e:
39:3e:eb:60:bd:b4:8a:01:5c:b1:ca:2d:08:be:6a:a7:d4:7c:
43:4c:a5:eb:2f:4e:91:7f:07:b0:1d:4d:58:c2:9c:a4:63:78:
ac:c8:20:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:54 2025 by rpki-client