Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231302e302f32332d3233203d3e203238323230.roa
File: 3138362e3230382e3231302e302f32332d3233203d3e203238323230.roa (raw, json)
Hash identifier: 3mSlT4cqRvWz22+uL4nGqw2j78MUzU9sOhqOvWccOZk=
Subject key identifier: 4A:5A:32:BB:70:D7:2A:08:6A:C5:02:AD:30:E8:55:D9:39:81:27:0F
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 42512EB88264D36401D11651A24C9B5FE9DAAB4E
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231302e302f32332d3233203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:23 +0000
ROA not before: Tue 12 Mar 2024 19:46:23 +0000
ROA not after: Tue 11 Mar 2025 19:51:23 +0000
asID: 28220
IP address blocks: 186.208.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:51:2e:b8:82:64:d3:64:01:d1:16:51:a2:4c:9b:5f:e9:da:ab:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:23 2024 GMT
Not After : Mar 11 19:51:23 2025 GMT
Subject: CN=4A5A32BB70D72A086AC502AD30E855D93981270F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:00:31:6b:34:65:e3:6d:ec:65:4a:e7:6d:
b2:a3:b3:35:ae:de:41:fd:69:1f:d8:9b:b2:f3:e7:
92:69:96:74:d9:c1:0a:67:c9:4c:79:37:80:a1:60:
fd:ea:64:9e:46:5d:25:5a:f8:77:b1:5b:9e:ee:e9:
80:6e:d1:a9:04:44:fb:73:a7:fb:93:18:ce:df:b6:
26:53:0b:2a:44:68:9a:1c:0a:d2:35:79:bc:a5:ee:
bc:88:fb:80:56:18:3f:c0:f5:25:94:d5:45:76:64:
3b:05:1f:a8:d7:ba:3e:09:72:bb:02:ef:a2:b8:0b:
f4:96:e7:28:9a:7e:e8:c9:b1:8c:29:e3:a2:85:8e:
ac:f4:e5:28:0f:7d:b2:b4:74:ba:44:d4:65:91:18:
27:1f:4a:6b:3f:13:4a:67:08:76:b9:3b:b1:c2:e2:
c5:c7:50:9d:e5:75:fe:16:a4:63:2a:56:b8:02:6d:
00:df:fb:8f:84:62:0f:42:5c:1d:6b:ce:31:60:d8:
75:a6:ef:8a:cc:06:db:66:68:02:87:7f:9b:1d:18:
fa:76:d5:24:de:f8:1d:be:e5:70:be:ad:e3:dc:67:
71:a5:8d:60:c9:b2:78:2f:ef:c9:b4:a3:9f:56:4c:
cb:7e:ed:36:8d:fe:43:1d:81:71:7b:12:5f:33:7c:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5A:32:BB:70:D7:2A:08:6A:C5:02:AD:30:E8:55:D9:39:81:27:0F
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231302e302f32332d3233203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.208.210.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:7e:49:1f:7a:5e:c1:35:3d:12:5a:93:b0:f8:5f:a1:8c:ca:
71:5d:03:85:e0:16:7a:fe:c9:3c:ca:ae:e8:bf:14:28:b9:14:
f3:dc:c9:eb:67:3d:2e:39:7e:5a:5d:c2:39:d5:cf:e1:fc:bd:
8f:68:b6:c1:9c:fc:a8:3a:d0:1b:29:c6:03:b4:2c:d5:f2:43:
19:61:d1:0e:10:44:2a:18:4c:b6:67:c8:45:6e:24:e5:eb:96:
e7:bf:50:ec:54:ea:fb:1f:94:4e:f0:75:75:24:c3:a7:33:a8:
3e:18:fc:0a:8e:fa:4f:73:8f:c1:ea:aa:14:c4:7b:25:35:67:
6a:5d:d3:95:4c:8c:82:51:0d:f3:94:18:17:79:db:28:1b:77:
d2:7e:95:df:8c:b8:9a:49:af:1d:c6:74:3d:98:5b:20:4f:e4:
a8:02:cc:1a:41:73:c6:ac:57:70:c8:a1:d5:23:0c:e5:e5:b0:
d7:15:7c:40:56:47:d9:17:f3:b3:f6:a5:a0:34:fa:1d:26:91:
96:64:7c:52:8e:ed:61:18:2b:3e:ff:54:d0:fe:fe:30:4c:19:
83:11:69:1f:65:8a:9f:24:50:f3:3f:dd:14:9c:dc:f2:b3:53:
29:34:63:5f:d0:ff:08:24:b2:f1:5f:a7:04:25:6f:a7:e6:07:
81:c0:5c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org