Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32322d3232203d3e20323730333035.roa
File: 3230312e3231362e3132302e302f32322d3232203d3e20323730333035.roa (raw, json)
Hash identifier: CDI9md76lMxNOKDUzsjRxezKZo1f343yttBlydCTO5Y=
Subject key identifier: 08:B7:22:E3:DE:2D:FA:3C:6A:31:EB:4D:C1:B6:00:10:62:8B:72:B7
Certificate issuer: /CN=A72E802031F795155D91B28F1CAD336A9A80E192
Certificate serial: 2B93926539315E9D88517D83660366B756FB15CA
Authority key identifier: A7:2E:80:20:31:F7:95:15:5D:91:B2:8F:1C:AD:33:6A:9A:80:E1:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A72E802031F795155D91B28F1CAD336A9A80E192.cer
Subject info access: rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32322d3232203d3e20323730333035.roa
Signing time: Tue 18 Jul 2023 18:30:54 +0000
ROA not before: Tue 18 Jul 2023 18:25:54 +0000
ROA not after: Tue 16 Jul 2024 18:30:54 +0000
asID: 270305
IP address blocks: 201.216.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:93:92:65:39:31:5e:9d:88:51:7d:83:66:03:66:b7:56:fb:15:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A72E802031F795155D91B28F1CAD336A9A80E192
Validity
Not Before: Jul 18 18:25:54 2023 GMT
Not After : Jul 16 18:30:54 2024 GMT
Subject: CN=08B722E3DE2DFA3C6A31EB4DC1B60010628B72B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:46:1a:06:af:3f:b6:b4:0c:d1:69:05:57:
cb:c4:52:19:d2:ce:f2:df:10:3b:00:36:b6:40:93:
35:28:95:1c:42:a1:7e:bf:14:14:d6:9e:0b:4e:21:
d9:19:90:3f:8f:af:c8:3a:d8:c4:bd:5b:dc:ae:9d:
12:73:6e:6f:f1:c6:bf:48:88:49:69:90:84:98:c7:
f5:06:62:5c:29:51:76:14:c8:c0:fd:25:8a:af:40:
25:c0:ea:b1:0f:40:ca:8a:67:d2:6d:29:1a:66:f0:
01:35:54:a6:d2:11:22:72:46:01:5e:15:c6:d6:da:
06:03:a2:df:79:9f:ad:38:4c:56:2f:8e:55:3c:42:
e1:78:36:df:57:7a:e2:6a:60:bf:7d:f8:ae:46:72:
0e:a8:25:22:28:f8:46:af:03:46:69:b4:1b:b8:37:
ed:ff:f7:59:00:5d:ea:9d:b2:93:9c:a8:bd:de:25:
0d:80:90:73:73:67:ba:8e:df:c1:7d:8c:bb:7e:b1:
15:57:62:e4:2e:f7:d7:72:86:77:96:7f:b4:21:ae:
b3:8d:c6:e8:bc:8a:af:a9:1a:1b:34:07:6f:cb:36:
97:86:e8:a0:f8:bb:cf:57:fb:57:30:8b:52:ea:2d:
f4:29:da:79:35:7e:92:9b:dd:aa:7a:1f:64:31:55:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:22:E3:DE:2D:FA:3C:6A:31:EB:4D:C1:B6:00:10:62:8B:72:B7
X509v3 Authority Key Identifier:
keyid:A7:2E:80:20:31:F7:95:15:5D:91:B2:8F:1C:AD:33:6A:9A:80:E1:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/A72E802031F795155D91B28F1CAD336A9A80E192.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A72E802031F795155D91B28F1CAD336A9A80E192.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32322d3232203d3e20323730333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:ec:ab:e3:43:55:fe:f2:bc:0b:f5:7e:3d:f5:22:18:d6:1b:
b7:d1:60:ce:6a:32:85:cd:05:33:cb:c7:97:f8:45:08:ae:dd:
f3:13:18:af:97:5f:3c:8d:5f:59:df:66:c7:8a:01:23:5f:e3:
21:f8:69:f5:27:91:c6:bd:d3:71:7d:d9:da:3b:fb:88:29:27:
be:d7:3c:ff:f3:38:d2:bf:1d:34:71:f7:06:ad:12:15:b8:af:
92:7e:7c:ff:08:b6:e7:ef:ba:7d:90:b6:d8:34:cc:2a:5a:e1:
43:1f:18:7d:f5:71:17:db:f1:4b:f9:2c:e1:83:90:ed:f2:7a:
27:98:3f:05:3f:60:ed:21:a4:31:e0:f4:87:ef:17:a4:65:82:
41:25:9c:c3:18:5f:ae:f2:d5:6e:98:c5:21:68:13:e3:75:a7:
a2:c9:fc:ab:b6:40:3c:17:5a:7d:77:c7:df:f0:03:a3:d1:35:
6c:ca:7e:0b:d3:79:ca:f9:ed:72:86:5f:95:06:22:77:6e:3f:
1f:75:81:ec:ce:51:2b:84:6c:e8:12:f9:0e:14:cb:81:ea:77:
a7:1d:10:f8:9d:c8:5f:d5:59:cb:60:a0:5b:6e:e1:09:31:d2:
99:8e:49:5f:81:dd:64:aa:2b:dc:99:6a:e2:e2:9a:dc:b7:42:
fc:bc:a7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:01:10 2025 by rpki-client