Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa
File: 3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa (raw, json)
Hash identifier: xgzYP9h4k+MU5MA1ta1Nh12nJ7NavmluOS/dpOQboFs=
Subject key identifier: 4B:8F:A6:96:30:D1:A2:11:CC:50:94:73:F7:31:B2:50:F1:C2:B4:C4
Certificate issuer: /CN=BD50BD2086E482CF8522C43B160CF72E7053F3E8
Certificate serial: 4DBCCC50A6D2D88E83FB0B9D77346B9868C23481
Authority key identifier: BD:50:BD:20:86:E4:82:CF:85:22:C4:3B:16:0C:F7:2E:70:53:F3:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD50BD2086E482CF8522C43B160CF72E7053F3E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa
Signing time: Tue 07 Jan 2025 15:10:02 +0000
ROA not before: Tue 07 Jan 2025 15:05:02 +0000
ROA not after: Tue 06 Jan 2026 15:10:02 +0000
asID: 265943
IP address blocks: 131.196.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:bc:cc:50:a6:d2:d8:8e:83:fb:0b:9d:77:34:6b:98:68:c2:34:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD50BD2086E482CF8522C43B160CF72E7053F3E8
Validity
Not Before: Jan 7 15:05:02 2025 GMT
Not After : Jan 6 15:10:02 2026 GMT
Subject: CN=4B8FA69630D1A211CC509473F731B250F1C2B4C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:5e:27:24:6d:15:77:7d:53:77:e5:38:06:
21:2b:d0:b0:60:cd:6a:ee:42:64:e0:87:0a:c3:95:
98:b8:18:57:5e:c7:82:fe:b0:84:7e:76:2e:17:e4:
e7:a7:30:f5:30:c2:0e:3e:f2:d0:2e:7c:76:1a:87:
e8:1e:18:e8:ef:ad:9e:13:03:7b:b1:3b:bc:34:a2:
2f:53:4b:ce:6d:62:18:bc:98:14:26:ce:01:54:50:
69:a3:3e:bc:7a:93:6e:cc:5f:2a:d4:6f:04:fb:01:
50:d9:57:95:a2:59:e9:aa:04:8a:81:46:96:81:a2:
1e:0d:16:eb:13:4a:a8:e2:7a:cc:c0:57:9f:ad:28:
16:62:f3:85:45:d6:a7:96:2e:15:9d:e5:71:e7:95:
38:52:14:29:ac:11:c3:77:ab:06:6a:ec:21:2c:d5:
55:42:15:82:5d:01:f2:15:00:52:3f:80:55:5e:1a:
18:8b:52:04:8b:e4:e4:e0:a4:c8:cb:87:2a:2f:d5:
e6:a4:f5:d0:bf:fd:52:04:14:93:a5:27:c7:85:9d:
65:0b:11:ee:8f:b5:12:5f:99:89:fc:2b:f1:7f:d2:
34:19:70:1d:47:3d:9c:1c:fc:25:ba:f2:d3:f9:16:
d9:20:b8:ff:cf:c1:cf:4c:c9:71:4f:af:68:b3:4e:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8F:A6:96:30:D1:A2:11:CC:50:94:73:F7:31:B2:50:F1:C2:B4:C4
X509v3 Authority Key Identifier:
keyid:BD:50:BD:20:86:E4:82:CF:85:22:C4:3B:16:0C:F7:2E:70:53:F3:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/BD50BD2086E482CF8522C43B160CF72E7053F3E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD50BD2086E482CF8522C43B160CF72E7053F3E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136322e302f32332d3233203d3e20323635393433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.162.0/23
Signature Algorithm: sha256WithRSAEncryption
82:49:15:35:7a:15:7a:dd:70:9b:53:66:2e:00:d3:e6:0c:0f:
aa:3c:4e:d5:f0:b0:68:ad:50:5a:ef:46:23:e4:f4:53:67:cb:
73:a5:66:3e:7c:11:1c:92:ca:6c:ea:37:e0:57:b0:f4:f2:b4:
5b:c9:5d:de:74:d0:2a:dc:56:62:42:70:f2:bf:a4:01:0c:7f:
39:15:2b:e9:45:54:ab:8e:8d:11:12:8e:4d:72:bd:4b:ac:01:
83:38:4d:5e:a7:8d:e2:69:e8:84:0d:ac:fa:50:b1:e1:12:0e:
ad:d6:27:79:62:2a:91:f2:d5:3d:d8:50:34:63:e4:c9:ab:c2:
c1:1f:54:c5:fe:5b:7c:a0:c9:0b:57:a6:47:99:d6:dd:4c:b1:
e1:2b:53:63:c5:39:5f:27:df:f5:9b:04:dd:c1:ef:f8:07:90:
22:17:f9:b5:72:47:0a:60:90:21:ba:ae:27:a5:9d:ac:00:23:
d9:18:6b:8f:b0:f5:18:5f:94:21:67:3e:53:2d:3e:b8:e7:f1:
19:ed:6a:3d:04:e0:e6:46:bb:c7:e5:20:30:20:11:2b:96:78:
90:63:69:da:c8:d1:46:2a:4c:5e:eb:3a:07:d6:70:e3:49:cd:
90:20:61:df:ec:fa:88:cd:3a:65:eb:12:8d:59:56:4d:b9:c5:
e6:18:ed:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:11:16 2025 by rpki-client