Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e3130342e302f32312d3231203d3e203238323230.roa
File: 3138372e38362e3130342e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier: fhRotB5B+Qqw6Hjcqt48P950uJo8w1S3dWDRhx9qNb4=
Subject key identifier: 36:4D:68:FC:59:FD:CD:E7:20:D7:95:C9:D2:87:58:99:08:D8:0D:7C
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 64D3F83CDBDAA3218E79C331EFF88A2A9AA9D457
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e3130342e302f32312d3231203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:22 +0000
ROA not before: Tue 12 Mar 2024 19:46:22 +0000
ROA not after: Tue 11 Mar 2025 19:51:22 +0000
asID: 28220
IP address blocks: 187.86.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d3:f8:3c:db:da:a3:21:8e:79:c3:31:ef:f8:8a:2a:9a:a9:d4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:22 2024 GMT
Not After : Mar 11 19:51:22 2025 GMT
Subject: CN=364D68FC59FDCDE720D795C9D287589908D80D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:8e:45:c5:a6:35:96:29:22:4c:a1:1b:5e:
00:ee:55:35:57:18:aa:dc:ea:14:60:98:36:69:cc:
d2:78:f2:34:8b:4e:54:76:cd:13:c9:5a:73:dd:1d:
d6:43:b9:73:44:7a:50:a4:cb:73:01:0a:b2:5b:f5:
3f:75:8e:f4:47:cb:c6:db:db:45:31:f0:de:59:02:
95:65:1f:20:42:79:39:1f:5d:a2:4c:62:d5:1a:9f:
eb:09:1b:48:66:50:7b:56:ba:16:d0:5d:c9:42:d5:
c7:aa:40:18:d5:e4:ca:52:77:5b:ca:34:56:b9:b5:
2e:09:a6:08:b7:c3:da:a4:04:36:18:c8:e1:7a:e2:
a6:54:9e:a3:ad:59:14:e4:34:30:f9:6e:00:2c:aa:
96:0d:56:85:cc:72:78:23:d6:00:b1:7f:7a:95:d8:
f6:7c:c0:3d:45:01:52:24:7c:98:27:59:ab:89:08:
50:1c:91:86:9d:8c:a6:a8:6d:34:7b:4a:ea:68:e0:
af:5b:15:57:64:49:6f:a5:1b:07:1c:18:0a:45:fc:
85:f9:7a:a5:9d:6b:c3:3e:bc:2c:7a:5d:44:3e:0f:
7c:81:30:b3:86:89:84:89:89:40:34:4a:48:e2:de:
7a:c3:ac:da:0f:35:e3:3d:1f:b4:0c:b4:d9:69:42:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4D:68:FC:59:FD:CD:E7:20:D7:95:C9:D2:87:58:99:08:D8:0D:7C
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e3130342e302f32312d3231203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.86.104.0/21
Signature Algorithm: sha256WithRSAEncryption
91:f2:02:39:0f:09:fe:17:9a:d8:e9:3c:03:17:77:bd:6d:af:
f9:8b:c9:dc:ea:4f:4b:57:df:6d:6c:4d:45:5b:ce:99:50:76:
44:2a:72:55:35:87:2d:0b:96:cc:9c:1b:52:62:4c:a4:bf:fd:
e0:85:04:3d:81:25:39:2b:60:31:05:10:6e:df:30:2f:69:6b:
1c:5e:bd:62:d6:e7:c6:2f:d9:51:d0:4e:5e:cd:e4:dd:d7:22:
3b:d4:7e:33:fd:41:f7:30:e3:d1:ad:88:b8:00:ef:c3:6d:b8:
62:a2:f6:e1:74:a5:ea:46:46:c7:78:86:bc:5f:e8:88:f8:99:
ef:4d:51:86:a5:36:c3:98:65:39:62:1d:59:a3:f7:54:ac:08:
dc:d4:e5:d6:aa:45:d0:e3:a4:59:dc:00:01:58:ef:67:ab:b3:
21:fa:77:3c:08:46:ea:d1:f1:64:58:cc:44:05:97:38:ef:aa:
99:c0:3b:de:c7:16:45:6c:0c:06:b4:ca:61:4c:fe:c7:71:57:
94:10:fa:f9:78:c9:5c:c9:15:b6:e3:97:2c:30:98:f3:8e:b2:
80:89:a3:09:33:f2:4b:5c:53:9e:18:ce:bd:6f:93:97:67:7a:
84:a9:0a:b6:3d:3b:0c:81:de:42:1c:52:17:18:ab:89:3d:20:
79:76:9e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:06 2024 by rpki-client on console-ams.rpki-client.org