Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
File: 3138392e32382e3134342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier: Qx/441LfiQtjOq71JsZRnv8itJviDZMzA3mwtLxoZtA=
Subject key identifier: 6E:56:49:B9:75:8B:10:D2:A4:C4:F2:65:40:B7:08:81:77:D4:05:45
Certificate issuer: /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial: 6C1C2411ED45D18CBB4BFAD52694B41EAC306242
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
Signing time: Fri 03 Nov 2023 13:03:39 +0000
ROA not before: Fri 03 Nov 2023 12:58:39 +0000
ROA not after: Fri 01 Nov 2024 13:03:39 +0000
asID: 28669
IP address blocks: 189.28.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1c:24:11:ed:45:d1:8c:bb:4b:fa:d5:26:94:b4:1e:ac:30:62:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Validity
Not Before: Nov 3 12:58:39 2023 GMT
Not After : Nov 1 13:03:39 2024 GMT
Subject: CN=6E5649B9758B10D2A4C4F26540B7088177D40545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:57:f3:b5:15:81:d9:fa:45:8f:b6:31:00:
a5:6e:e6:db:52:44:d5:24:61:38:28:39:68:79:3d:
ac:3a:db:8a:7a:b6:2e:d3:a2:79:b5:f0:5a:c2:cb:
97:2b:20:e1:29:29:1e:b5:db:32:2d:75:89:c8:05:
5e:04:21:7f:94:7f:60:53:ca:6b:c9:ab:02:40:07:
6d:e4:89:d9:43:9a:9a:c5:7b:13:35:5b:28:47:e5:
5d:2d:89:b0:a3:b2:79:ee:69:76:5b:a9:59:7c:dd:
58:d0:95:dd:91:0d:d7:14:18:17:36:d9:18:fe:ba:
48:ad:90:6e:90:a5:77:0b:c7:53:66:1b:e9:c9:03:
60:d8:26:95:d1:0f:23:44:88:db:30:52:6d:94:1d:
5e:8f:7b:9c:32:09:28:9a:14:b2:c3:89:c8:5a:cf:
d8:e7:c1:f1:2b:7b:2a:fa:97:c2:36:f7:21:eb:44:
bb:a5:f3:52:d3:74:a0:83:15:c9:4a:01:70:09:5a:
d6:ed:ca:c3:9b:76:d4:62:09:df:68:ac:90:61:59:
35:4b:c8:e8:e3:ce:48:12:8e:cd:d7:8f:4e:fc:0a:
a7:b5:36:f2:dc:ab:4f:77:d9:80:9f:21:28:03:ec:
28:b5:b0:17:d3:ab:c3:a6:39:10:3c:52:42:a6:da:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:56:49:B9:75:8B:10:D2:A4:C4:F2:65:40:B7:08:81:77:D4:05:45
X509v3 Authority Key Identifier:
keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.28.144.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:f9:a0:29:2f:41:81:0f:32:86:d0:6d:24:03:57:76:d5:db:
1d:3a:8e:57:42:44:92:c2:d3:87:80:c2:65:5f:5c:dc:79:47:
66:9e:3a:16:ad:bf:18:3c:5d:cc:b8:84:3b:c3:69:36:ab:3c:
b0:46:8e:fb:8e:d3:4d:cb:f2:fa:43:9d:bc:1c:cb:84:7a:c0:
6f:fa:6d:e6:f2:ac:fc:24:be:d0:98:29:bb:e7:d3:d5:2d:44:
3f:67:21:9f:d3:14:59:e1:9b:96:65:66:83:96:7c:50:9a:61:
fd:d3:f6:e9:2a:cc:a4:49:aa:29:d2:eb:7a:03:be:98:27:d5:
ec:49:f3:8e:ab:1c:dc:05:dd:33:ed:19:98:60:f5:b8:02:0b:
30:b1:08:a2:b1:b2:9c:25:db:25:47:b7:28:a2:46:d0:5b:fa:
16:fa:19:f2:cc:45:11:24:19:23:1a:46:d1:34:3f:98:d2:0d:
c1:2f:bb:b9:74:9b:d5:0e:1f:cf:aa:0d:92:51:a3:a2:c3:cc:
6f:5e:88:4a:12:aa:db:52:e5:1e:6e:4b:a9:6f:f7:42:4c:6f:
20:d2:de:44:b8:e8:75:11:7b:a7:25:70:5f:40:03:3a:fa:ce:
b7:cc:e1:a2:0a:86:7f:9e:1f:18:ce:9f:f3:8b:0d:f5:16:e8:
f1:2c:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:42:43 2025 by rpki-client