Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3133312e37322e3135322e302f32322d3332203d3e203631373435.roa
File: 3133312e37322e3135322e302f32322d3332203d3e203631373435.roa (raw, json)
Hash identifier: aaX0evGI+LGTHR5P0i5qo8nlo7eCrPGc7oIK0Znz8is=
Subject key identifier: A1:A0:80:E3:A6:F2:EB:26:49:86:2B:7F:E4:CA:0A:E5:F0:D7:9D:16
Certificate issuer: /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial: 7EBEF7BB0CDC25D75A358CD30008B561628D12F5
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3133312e37322e3135322e302f32322d3332203d3e203631373435.roa
Signing time: Tue 26 Nov 2024 10:18:45 +0000
ROA not before: Tue 26 Nov 2024 10:13:45 +0000
ROA not after: Tue 25 Nov 2025 10:18:45 +0000
asID: 61745
IP address blocks: 131.72.152.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:be:f7:bb:0c:dc:25:d7:5a:35:8c:d3:00:08:b5:61:62:8d:12:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Validity
Not Before: Nov 26 10:13:45 2024 GMT
Not After : Nov 25 10:18:45 2025 GMT
Subject: CN=A1A080E3A6F2EB2649862B7FE4CA0AE5F0D79D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:4d:10:e3:6d:0c:eb:b8:55:05:1d:b7:7f:
41:f0:32:9b:3d:c6:f8:64:3d:b7:f1:52:33:03:db:
00:a1:3d:0a:ba:4d:c8:a6:cb:bf:fa:32:6e:f0:82:
c1:d1:a5:d2:5c:8d:db:fa:aa:6a:f8:b3:90:06:1d:
39:7e:e5:af:e4:89:ea:3f:a2:e7:df:e9:ea:5b:ed:
50:e4:ec:4b:63:d6:45:79:b8:3a:25:fb:c2:26:22:
ba:10:1d:6e:f8:42:ce:85:32:9f:00:b5:0b:bb:1f:
73:6b:5f:d5:30:96:d0:df:ba:03:ba:c9:20:73:69:
fb:b3:a0:fa:56:03:da:62:bf:08:09:8e:85:34:56:
2c:9c:27:08:4b:04:35:0e:23:bd:62:b1:ec:d8:13:
cf:d2:13:19:c3:02:84:3c:44:87:58:30:c5:9b:8c:
36:b4:80:e9:1d:de:33:08:1b:89:af:66:8b:ae:b3:
e3:04:32:50:23:86:60:55:09:63:3f:6e:76:65:0a:
ad:31:ac:cc:3a:8d:a0:04:93:b8:38:74:73:54:2e:
81:9d:26:72:6b:f5:59:92:3e:9c:64:93:6a:9c:89:
e4:c0:37:7f:05:cd:a5:0b:43:1c:4f:de:af:5c:57:
2f:32:13:28:56:ab:3f:a5:68:5a:af:69:1e:77:b5:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A0:80:E3:A6:F2:EB:26:49:86:2B:7F:E4:CA:0A:E5:F0:D7:9D:16
X509v3 Authority Key Identifier:
keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3133312e37322e3135322e302f32322d3332203d3e203631373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:b5:3f:27:70:6f:7f:fe:06:f9:0b:33:17:ff:57:a2:fa:18:
48:60:05:e8:cc:fc:96:7b:ef:5c:10:43:cc:09:c1:66:d6:4d:
f3:0f:87:d8:d7:6b:d6:2d:cc:c6:59:41:a0:6a:20:a3:91:e7:
e1:57:0f:7c:7b:b9:e2:2b:12:cc:1e:1e:c3:b8:93:be:7c:61:
7d:e6:f7:b2:4e:1b:46:cc:77:6d:48:13:ef:88:be:6e:26:bd:
cc:c8:a9:6c:a0:9b:71:1c:16:b2:0c:6d:1c:4e:0d:55:b2:11:
3f:fb:26:d1:90:c4:70:78:f8:0d:e5:5e:ba:c4:46:eb:24:d4:
1b:1e:85:03:a3:84:40:de:ca:52:2d:7e:bd:66:92:10:7e:01:
e9:c8:71:1d:ef:30:7e:5e:37:97:8a:b9:dd:62:84:d1:cb:75:
97:af:38:be:45:04:8e:35:4d:a5:f3:0f:30:68:f2:44:44:97:
6a:70:40:a2:c3:e5:95:f0:0d:cb:fb:16:d6:81:f0:6f:33:fe:
fa:e4:26:1b:5f:e2:5a:04:e0:0c:9e:26:0c:33:cc:50:a0:b2:
f6:bf:1e:6b:12:82:fd:2e:2d:d4:e0:10:2d:de:43:d4:24:ed:
80:67:c0:fc:49:7b:5e:18:23:f3:a5:11:a5:db:15:d5:90:d7:
e3:98:80:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:45:20 2025 by rpki-client