Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32322d3234203d3e20323730333035.roa
File: 3230312e3231362e3132302e302f32322d3234203d3e20323730333035.roa (raw, json)
Hash identifier: IjgReOz2SKRw66rKZNiKNkIoTQuVCtjcUIPQru1FJo0=
Subject key identifier: F3:FA:3A:3F:1A:DD:51:BF:21:C1:14:03:2C:C6:EB:E0:06:A1:4F:09
Certificate issuer: /CN=78E0E3DA12B6955DA5A7545389B2671B15D7C570
Certificate serial: 56163B1A2D663F7DCF328700EF2D32425AFD85BD
Authority key identifier: 78:E0:E3:DA:12:B6:95:5D:A5:A7:54:53:89:B2:67:1B:15:D7:C5:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E0E3DA12B6955DA5A7545389B2671B15D7C570.cer
Subject info access: rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32322d3234203d3e20323730333035.roa
Signing time: Mon 29 Apr 2024 18:03:54 +0000
ROA not before: Mon 29 Apr 2024 17:58:54 +0000
ROA not after: Mon 28 Apr 2025 18:03:54 +0000
asID: 270305
IP address blocks: 201.216.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:16:3b:1a:2d:66:3f:7d:cf:32:87:00:ef:2d:32:42:5a:fd:85:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78E0E3DA12B6955DA5A7545389B2671B15D7C570
Validity
Not Before: Apr 29 17:58:54 2024 GMT
Not After : Apr 28 18:03:54 2025 GMT
Subject: CN=F3FA3A3F1ADD51BF21C114032CC6EBE006A14F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:10:30:c6:a0:f3:83:e2:a1:1a:c9:10:80:
de:8e:7c:0c:16:d1:4a:39:ef:11:e0:8a:a3:d5:29:
a2:16:9e:cc:d4:06:f3:f6:00:38:f8:6c:e9:7d:83:
49:c3:d7:14:93:8a:2e:1f:65:38:a9:11:30:bd:3f:
07:bc:dd:e9:db:32:47:6f:f9:ca:7f:11:59:83:15:
05:d9:86:0d:4f:84:e1:82:7b:3e:ea:92:1f:3f:fc:
01:e9:d4:65:d8:fc:8c:8e:72:bf:5c:27:27:51:e2:
aa:85:10:f2:0b:4b:14:cd:e6:9e:86:c5:9f:f6:60:
8e:90:50:46:8c:15:42:fb:b2:19:35:f8:0e:0a:ff:
8a:56:46:60:67:47:dc:af:55:c6:13:69:8f:9a:08:
dc:b4:1c:ac:a7:93:a6:30:44:44:1b:bf:1b:b1:82:
eb:fe:1e:26:6c:8f:b8:ba:13:92:c3:06:11:ad:2f:
06:79:8e:b0:6c:9f:19:77:d0:9a:18:ce:1a:19:ca:
0e:f8:11:54:eb:90:54:36:57:72:aa:5c:b1:54:52:
31:d0:ad:0a:4d:d9:22:98:ab:0f:60:9b:af:84:17:
85:51:18:e4:2c:44:0d:17:50:a4:4e:20:5e:7a:65:
ed:73:90:1f:79:ff:66:fe:09:53:b2:95:55:e5:92:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FA:3A:3F:1A:DD:51:BF:21:C1:14:03:2C:C6:EB:E0:06:A1:4F:09
X509v3 Authority Key Identifier:
keyid:78:E0:E3:DA:12:B6:95:5D:A5:A7:54:53:89:B2:67:1B:15:D7:C5:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/78E0E3DA12B6955DA5A7545389B2671B15D7C570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E0E3DA12B6955DA5A7545389B2671B15D7C570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32322d3234203d3e20323730333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.120.0/22
Signature Algorithm: sha256WithRSAEncryption
14:bc:11:18:df:14:85:27:82:f4:66:6a:f5:3b:d1:6c:61:b7:
a8:31:8a:21:a9:47:83:41:79:01:07:f8:7b:f5:89:52:0e:da:
70:a8:f7:30:81:cb:e7:c7:53:94:84:0a:eb:0a:65:39:6e:08:
5a:ae:42:4e:c5:66:eb:9f:29:86:4e:65:31:7a:cb:fe:25:da:
aa:ad:25:bf:94:0c:7c:2d:bd:dd:60:3c:a0:ca:34:07:85:df:
01:5d:3d:3b:b2:fe:e8:d5:cf:dd:8b:ad:d4:d2:df:3d:af:00:
34:75:24:56:5a:ea:42:15:df:03:f2:7d:ab:7e:53:97:8f:8a:
32:85:b0:df:40:9b:e8:5f:06:76:07:ae:29:fa:89:88:03:a7:
0a:de:b2:77:e7:5f:d0:78:f5:3c:9f:6d:fb:6a:34:ad:4c:82:
e0:a5:44:a2:bf:b8:19:d7:88:88:9b:2a:d2:42:dc:82:aa:39:
ad:39:51:93:a3:25:7e:cb:e3:d2:48:8c:ba:fb:2e:17:d8:5e:
3b:a6:54:d3:ac:62:bb:5c:6e:3b:4a:e3:69:79:56:9f:86:5c:
6c:2a:da:7d:2a:c7:e8:e3:80:0d:2f:34:5b:2c:32:29:c9:bd:
00:a0:13:55:a4:b9:60:44:75:32:57:bc:76:25:d5:2f:a8:b4:
de:06:50:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:37:44 2025 by rpki-client