Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235332e302f32342d3234203d3e20323636343333.roa
File: 3133312e3130382e3235332e302f32342d3234203d3e20323636343333.roa (raw, json)
Hash identifier: eQH9dOOHAiUytUhG9qhFLpjxMR8mkttmm54dWq9Bmyc=
Subject key identifier: 56:7A:3C:2B:05:C1:37:BC:9B:64:E5:36:BF:54:92:25:9B:AB:ED:7F
Certificate issuer: /CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
Certificate serial: 6C42ECE4E6D01B4F8F6DE9BD20B50874F066E586
Authority key identifier: C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235332e302f32342d3234203d3e20323636343333.roa
Signing time: Thu 04 Jul 2024 22:03:16 +0000
ROA not before: Thu 04 Jul 2024 21:58:16 +0000
ROA not after: Thu 03 Jul 2025 22:03:16 +0000
asID: 266433
IP address blocks: 131.108.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:42:ec:e4:e6:d0:1b:4f:8f:6d:e9:bd:20:b5:08:74:f0:66:e5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
Validity
Not Before: Jul 4 21:58:16 2024 GMT
Not After : Jul 3 22:03:16 2025 GMT
Subject: CN=567A3C2B05C137BC9B64E536BF5492259BABED7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:95:b5:02:0b:48:96:91:d3:49:47:94:24:
c5:f3:50:a0:e6:f4:b3:f5:2d:4d:2c:c3:3f:df:32:
cc:52:b4:73:38:8f:05:0b:68:b5:17:e8:9e:25:58:
c8:d0:54:50:83:38:aa:0a:67:c3:7d:03:07:51:31:
60:c6:8b:50:d7:83:53:ac:4e:64:a5:22:0c:c8:63:
2b:68:f5:ed:12:b7:1d:ba:13:7c:25:46:94:57:a9:
53:ac:3b:6e:04:39:48:51:95:4d:38:2e:98:f3:c6:
ca:73:7d:18:d5:20:48:b6:5e:52:ec:52:fb:a8:61:
61:d4:aa:b1:7f:93:89:f0:1c:81:51:df:fc:4e:6a:
48:44:61:9d:71:91:42:a3:61:16:b6:c1:59:d5:74:
f8:23:93:cc:71:2f:cf:ec:1b:69:13:a3:2a:73:e6:
0c:e7:c8:a3:1d:aa:54:2d:2f:7e:b4:10:1b:18:b7:
69:0e:9e:b9:d4:b1:43:78:fc:2f:18:96:a1:f0:54:
ed:64:c3:42:82:9f:25:88:9a:7d:82:58:e6:73:b2:
32:cd:e5:3d:21:90:55:20:0e:df:2e:69:06:3a:74:
14:24:f9:e5:ab:f1:a9:1f:bd:a1:0c:54:ff:e4:dd:
1b:55:f8:f5:79:26:68:77:87:7c:aa:23:86:37:c7:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7A:3C:2B:05:C1:37:BC:9B:64:E5:36:BF:54:92:25:9B:AB:ED:7F
X509v3 Authority Key Identifier:
keyid:C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/C3AFF141530D91097156CCAECCDD429D2C9F5738.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235332e302f32342d3234203d3e20323636343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.253.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e7:e2:c6:15:2d:75:4e:db:c3:f6:00:ed:07:47:02:30:11:
c3:28:91:99:2d:a2:e4:75:11:c0:fe:cd:81:dd:52:74:04:76:
e6:28:5f:a8:83:20:c4:23:22:51:71:f4:33:2e:d0:1f:c4:21:
c5:e9:04:b2:94:f7:cd:de:32:d5:93:88:75:5a:d8:89:4e:19:
6d:60:1b:e0:d9:3d:66:de:72:22:3a:ef:28:3e:50:f4:06:93:
d5:65:c6:39:38:25:9b:bc:1f:1d:79:f6:0d:f2:32:20:71:a2:
a8:0e:33:43:8d:60:81:fc:f8:00:72:f4:06:ee:10:11:ef:c9:
74:55:55:7d:89:91:59:dd:d7:7f:e1:1f:ce:4c:11:7e:46:b8:
db:49:89:c1:d0:a1:81:97:cf:23:fe:33:25:67:5e:45:58:ce:
6c:4d:84:d8:c0:d2:a2:4f:69:dd:91:b1:7f:68:d9:f8:32:52:
1d:4e:f7:ce:be:85:f7:a8:67:96:f5:e1:75:35:df:7b:f5:0f:
e0:df:34:6e:3e:fb:7b:3f:c2:32:d9:6e:a5:f5:b6:5a:5f:57:
0d:64:9e:e8:74:c9:ca:6f:54:0b:65:58:43:04:80:9d:fc:dd:
97:40:1f:46:01:7b:bb:3e:4f:e4:c7:c6:1c:eb:54:ec:b7:63:
79:71:f8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:52:32 2025 by rpki-client