Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134302e302f32342d3234203d3e203631383835.roa
File: 3133312e302e3134302e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier: 6p5vnbVVcccEJ9l7GDGjcXQPnMNDaS77FHOheurCgAg=
Subject key identifier: 36:47:A0:16:62:A9:C2:64:4E:91:47:18:FB:93:DC:52:2F:FE:62:54
Certificate issuer: /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial: 200DD740CE971F8FAEA304444030FC6AE2AA9673
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134302e302f32342d3234203d3e203631383835.roa
Signing time: Thu 29 Aug 2024 18:19:04 +0000
ROA not before: Thu 29 Aug 2024 18:14:04 +0000
ROA not after: Thu 28 Aug 2025 18:19:04 +0000
asID: 61885
IP address blocks: 131.0.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0d:d7:40:ce:97:1f:8f:ae:a3:04:44:40:30:fc:6a:e2:aa:96:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Validity
Not Before: Aug 29 18:14:04 2024 GMT
Not After : Aug 28 18:19:04 2025 GMT
Subject: CN=3647A01662A9C2644E914718FB93DC522FFE6254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:df:74:3b:7b:96:48:b0:19:4c:f4:2b:97:
5f:ae:1d:eb:8d:87:8d:ca:a7:4b:eb:d1:d8:a5:1d:
d0:72:27:9b:ee:6f:1b:82:69:65:66:70:71:80:87:
7c:72:75:11:7a:52:e7:07:2b:97:c7:cc:d1:a4:2c:
41:39:7a:75:fc:0f:a9:41:2d:14:95:d2:c5:83:1b:
fd:73:e7:58:e5:b1:ff:72:b2:aa:e8:07:ea:20:bd:
f9:6a:b5:75:ff:58:e7:81:3b:e4:0a:9e:64:34:f4:
29:80:08:8d:5b:09:4d:fb:4b:83:9a:b4:02:79:62:
93:66:b7:38:b2:1d:5c:60:c8:01:54:85:58:22:f6:
78:b5:dd:2a:1b:f3:26:69:05:5b:3c:9c:96:c8:50:
3c:45:1c:88:fb:6b:b7:f1:1d:20:21:d5:ee:85:0c:
c3:20:2c:2d:c8:fa:99:4e:1b:e7:e9:f1:66:f9:e8:
35:65:5c:16:9f:50:f5:d0:2a:cf:43:2a:50:64:ef:
10:0a:3a:0f:3f:65:25:1f:44:f6:4f:9c:69:5f:3a:
28:57:e0:fd:b0:4e:15:20:9b:29:47:90:b6:e8:18:
29:9c:91:11:89:e3:e3:02:3f:70:1c:40:09:67:e9:
8e:b2:20:05:00:81:37:04:6a:0e:a1:81:8e:26:e7:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:47:A0:16:62:A9:C2:64:4E:91:47:18:FB:93:DC:52:2F:FE:62:54
X509v3 Authority Key Identifier:
keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134302e302f32342d3234203d3e203631383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.140.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5d:bf:59:5d:a0:56:b1:eb:15:dc:fc:0b:fb:18:c9:82:4f:
27:e1:e4:b8:e5:cf:3c:cd:2a:09:66:ef:84:05:4a:f1:89:18:
89:ba:d3:c8:6f:36:8e:06:5f:fe:a0:66:32:f8:cd:bf:ab:ca:
87:cf:95:45:57:21:85:fd:68:5a:4e:cf:50:cc:be:0b:35:ec:
d9:60:96:36:98:7f:7a:e5:ae:16:9b:bd:ca:07:22:5a:ef:f6:
8d:1c:b7:60:6f:7a:5b:ff:27:2c:6d:dc:c1:9a:96:96:ec:9b:
35:37:0d:c1:f7:fb:37:20:0a:5f:5b:8f:7b:41:42:35:49:82:
22:7e:33:93:d7:b3:d6:0a:67:39:c0:59:70:0c:41:03:ff:c4:
82:3f:41:0a:05:42:6f:5d:32:60:51:f9:c2:d5:8e:04:b8:93:
7f:d7:28:46:88:ba:76:26:b0:d7:e0:1a:64:ad:59:e7:12:e3:
7b:10:1f:43:ad:bd:33:ec:da:2c:ae:fd:40:4e:49:c1:19:0c:
2e:bb:f3:b9:10:7b:be:e8:e0:44:52:f7:a6:14:a0:0c:b9:89:
2a:eb:c1:d7:a7:4c:aa:52:53:22:e1:a2:82:05:de:b9:ef:56:
a6:8f:b4:71:38:7f:ac:82:68:22:b8:66:e8:15:ad:1a:7a:8c:
72:7d:fd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:13:43 2025 by rpki-client