Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133312e302e32382e302f32322d3232203d3e203238323130.roa
File: 3133312e302e32382e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier: BjVaJY5TwSg8WgGKcl9a2FuJnKUpTHuuxVlxLdT4ImY=
Subject key identifier: 06:D9:29:F5:AD:B5:B2:C3:24:F8:E0:9D:BA:AC:14:0C:69:AD:3E:44
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 066D8BBBACCF9F09425FBE4F8B59C2431E844AF7
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133312e302e32382e302f32322d3232203d3e203238323130.roa
Signing time: Thu 04 Apr 2024 04:37:48 +0000
ROA not before: Thu 04 Apr 2024 04:32:48 +0000
ROA not after: Thu 03 Apr 2025 04:37:48 +0000
asID: 28210
IP address blocks: 131.0.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:6d:8b:bb:ac:cf:9f:09:42:5f:be:4f:8b:59:c2:43:1e:84:4a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Apr 4 04:32:48 2024 GMT
Not After : Apr 3 04:37:48 2025 GMT
Subject: CN=06D929F5ADB5B2C324F8E09DBAAC140C69AD3E44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:b0:c6:22:e3:3e:b5:9d:d4:09:2f:74:4c:
04:60:31:4b:10:21:20:c3:92:f5:d8:c1:b4:cf:a3:
58:36:c0:d5:a2:50:c2:8a:cb:ae:cf:41:5d:83:fc:
6e:26:09:22:5e:46:67:2e:58:4c:28:44:82:b8:f4:
b3:f0:b0:25:e7:4a:f4:28:b3:f0:93:3e:34:ed:16:
fc:0e:70:5d:7d:95:b5:b0:d6:91:ce:73:63:96:58:
a1:77:19:6b:99:90:e6:95:bc:4a:ca:01:39:30:b5:
b5:f5:51:37:f5:95:87:64:95:2b:7e:72:9c:59:cc:
84:81:ea:4d:3f:a7:86:3f:db:a8:5e:ca:c3:05:ea:
78:f4:31:8e:6d:5e:f6:ab:a7:1e:02:37:98:47:bd:
1c:2e:01:e0:fc:59:32:53:d5:cb:4a:f5:ab:5b:54:
6c:b2:08:3c:42:6b:62:b1:b7:99:de:af:9d:94:93:
42:f1:a4:06:04:c4:3b:3f:13:80:da:3d:dd:21:e6:
61:30:07:0b:8d:c8:6d:b3:1e:d3:5b:ec:c4:53:c5:
f8:f5:84:33:f6:06:4d:f4:3f:75:06:0e:47:8f:87:
d7:fd:8b:5f:c6:95:01:44:f4:6f:9e:6c:da:86:55:
91:14:8c:78:c0:4d:a5:ae:03:99:ed:c5:45:77:e9:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D9:29:F5:AD:B5:B2:C3:24:F8:E0:9D:BA:AC:14:0C:69:AD:3E:44
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133312e302e32382e302f32322d3232203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.28.0/22
Signature Algorithm: sha256WithRSAEncryption
39:93:1a:6c:43:c9:c7:71:48:81:05:62:9d:db:72:15:5c:6a:
5c:70:b6:5c:64:63:45:eb:d1:6f:38:f9:ca:a7:3e:41:6c:ae:
b1:83:7b:06:70:8f:e2:af:41:29:da:2d:c9:8b:eb:0a:51:5e:
0b:9d:3b:2e:91:74:f6:9d:15:20:9f:d8:69:8e:64:56:01:6a:
6b:ab:d1:8a:d5:c1:c3:c6:0f:0f:02:77:a5:e9:ed:37:93:9c:
94:38:1c:d7:ec:38:92:06:8a:8f:0a:ba:4f:79:17:e6:75:d6:
36:af:10:9c:84:dc:8e:6b:e1:eb:e7:12:ab:8c:df:0c:85:c1:
31:9c:d7:60:f5:bd:e3:17:4e:07:49:e3:ad:4c:c4:6b:a4:94:
e7:d5:82:0e:b6:48:39:7b:82:b0:6f:3c:3f:cb:2b:5d:b8:b8:
b6:d8:34:be:d3:d5:25:b5:a2:e3:f5:a9:1d:b8:44:5c:9e:a2:
fa:91:29:1b:0c:6c:db:49:2c:0a:a1:d5:d3:db:0c:cd:87:f5:
19:b7:69:e7:84:ba:84:0b:28:6d:5b:fc:dd:b8:6e:07:d6:47:
59:6f:69:a4:5a:fc:e8:8b:c4:73:d8:ef:be:0f:17:26:ff:22:
bc:20:5a:09:24:4f:41:a9:fe:08:44:6d:4a:32:f6:73:7b:56:
0f:7a:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:15:19 2025 by rpki-client