Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa
File: 3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa (raw, json)
Hash identifier: xTDPQ+K0dm5oanJ1APudOG7OtBZqAwOABZGn/993EGk=
Subject key identifier: BE:B6:D4:D2:58:31:98:D9:7F:C9:F7:8A:80:C5:85:D6:13:E3:93:F9
Certificate issuer: /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Certificate serial: 74C25B87852CA07CB4F175A212DAAAC9E5C30099
Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa
Signing time: Fri 05 Apr 2024 01:04:59 +0000
ROA not before: Fri 05 Apr 2024 00:59:59 +0000
ROA not after: Fri 04 Apr 2025 01:04:59 +0000
asID: 264411
IP address blocks: 131.221.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:c2:5b:87:85:2c:a0:7c:b4:f1:75:a2:12:da:aa:c9:e5:c3:00:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Validity
Not Before: Apr 5 00:59:59 2024 GMT
Not After : Apr 4 01:04:59 2025 GMT
Subject: CN=BEB6D4D2583198D97FC9F78A80C585D613E393F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:73:e1:d0:2d:b7:6a:ee:ef:23:69:2a:50:
f5:1e:84:55:64:b6:42:f3:78:d8:73:14:2f:79:98:
7f:ed:ba:e8:05:ea:73:48:a0:4f:14:34:e0:f4:93:
dd:97:af:86:d4:56:25:fc:36:c3:5c:7a:f8:74:97:
28:83:96:22:d7:cf:5d:0b:46:f3:26:a1:0f:45:b8:
90:13:00:68:be:8b:88:eb:d1:9a:c3:5c:e4:34:7a:
b2:83:58:8d:f9:70:28:ae:0a:8f:31:b6:44:4c:86:
b0:1b:f4:d6:d9:46:b6:f0:a0:9a:84:75:25:40:3d:
2e:b0:e4:99:d0:41:c4:6e:c7:ad:f1:4d:b8:e3:d9:
3f:f7:61:3c:e9:29:22:a7:92:d0:a2:8a:29:8d:21:
a0:61:1c:10:60:d8:47:35:7a:55:84:5c:30:6e:8a:
85:ae:b6:de:e4:22:7a:0a:76:68:94:a5:fd:a6:7c:
89:66:2a:15:54:46:62:b5:36:e5:40:8b:73:b8:c6:
2f:1f:fa:94:cc:ec:62:81:ec:c3:fd:a7:5a:3f:11:
6b:c5:eb:b8:99:fb:ae:5d:80:c3:09:61:c3:9d:66:
3c:23:1d:81:28:b9:6f:4d:a4:c9:e3:88:aa:cf:68:
86:41:33:69:06:b5:e4:6e:4e:9d:86:d3:d4:25:2c:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B6:D4:D2:58:31:98:D9:7F:C9:F7:8A:80:C5:85:D6:13:E3:93:F9
X509v3 Authority Key Identifier:
keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:d2:d4:d8:d9:9e:2d:b6:a0:d3:68:33:06:f4:84:ab:18:bf:
b2:94:5f:60:70:f6:8e:02:a4:02:26:65:ed:30:bc:c1:ce:e5:
e1:18:13:f5:1d:db:95:e4:f4:48:2f:30:dc:76:56:f4:a1:ae:
5c:8e:0d:f3:2f:78:9a:76:8a:73:68:ff:03:dd:47:cc:4d:c0:
8f:f3:f7:4f:4c:5c:1e:72:65:b4:4f:24:e7:7f:fd:70:42:62:
39:88:b3:5f:52:b8:62:e4:35:24:71:a2:99:bf:1f:19:89:d4:
66:17:16:37:0d:c1:ea:26:f5:b8:03:9c:a9:69:ea:91:ce:b0:
17:34:3a:9c:4d:e7:cd:d9:67:a1:0d:60:bf:5c:62:09:da:0c:
61:3c:68:17:bc:db:ab:8d:76:44:1b:4b:e2:72:fb:0e:df:12:
28:35:a8:80:a2:df:5b:04:71:99:e2:5e:0c:db:fb:63:46:d6:
23:5e:f6:ff:33:1c:4b:dd:61:8c:0a:b6:19:94:53:71:93:c7:
ea:39:85:f4:4f:a7:4a:37:dc:9b:77:c3:cc:06:f8:7d:0e:71:
f5:92:4a:ac:bb:2b:7b:39:6b:5a:17:0f:7a:cf:a8:5b:75:04:
81:f2:46:e7:4e:48:eb:27:19:cf:ca:de:f2:96:bf:06:89:c6:
ba:f9:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:29:23 2025 by rpki-client