Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32342d3234203d3e203238323230.roa
File: 3138372e38362e39362e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: vDFXFed1Lv/zG3cuijSSmuy9nBwNHyjS82Xncvzu0og=
Subject key identifier: 13:0F:75:84:3D:EC:DA:7C:02:FD:C5:BE:5E:95:FB:A9:9A:D5:A2:71
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 38834A5374C0C6855F5A1EA1D27840F9DF11C6A6
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32342d3234203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:19 +0000
ROA not before: Tue 12 Mar 2024 19:46:19 +0000
ROA not after: Tue 11 Mar 2025 19:51:19 +0000
asID: 28220
IP address blocks: 187.86.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:83:4a:53:74:c0:c6:85:5f:5a:1e:a1:d2:78:40:f9:df:11:c6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:19 2024 GMT
Not After : Mar 11 19:51:19 2025 GMT
Subject: CN=130F75843DECDA7C02FDC5BE5E95FBA99AD5A271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:69:51:56:bc:78:6a:fc:20:68:e5:5b:ba:
6f:0d:84:fb:5e:5e:da:aa:59:aa:6c:5d:08:5a:16:
1d:1b:6b:16:fa:71:58:f7:97:92:26:0b:d9:bc:de:
57:be:7f:5f:3e:02:87:5a:90:8a:35:0f:98:33:93:
b2:03:ce:43:73:bf:2f:c0:35:7b:2e:2b:4e:81:20:
81:de:7e:a0:4f:3b:d5:5d:ef:c9:4e:8c:2f:d9:b6:
49:11:a6:60:af:8c:7b:d1:9d:93:7f:e8:ac:17:e7:
da:e1:e9:15:47:5e:17:0a:c7:f3:c0:79:70:65:f5:
48:c6:ef:19:2a:47:4f:57:b5:2e:13:39:94:ae:68:
5e:2d:e6:72:23:74:c4:fc:19:e4:bc:17:59:00:71:
39:f9:50:64:85:c0:f1:75:4e:4e:85:1d:36:29:3c:
1c:f7:0e:6f:b7:b0:46:e1:f2:1e:0b:22:53:c8:7d:
d3:e9:b6:92:1f:32:04:dc:5e:23:9f:39:2d:82:b5:
32:5b:6a:7b:3d:06:8a:a9:9f:a2:ec:23:36:bc:ab:
b1:ac:99:77:bd:05:c1:aa:b9:46:ac:0b:8b:ae:c9:
67:72:fe:44:a4:d3:b9:2b:85:af:fa:85:7c:c1:79:
8a:c5:8b:fb:01:2f:19:f8:2e:61:99:e1:0c:12:70:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0F:75:84:3D:EC:DA:7C:02:FD:C5:BE:5E:95:FB:A9:9A:D5:A2:71
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.86.96.0/24
Signature Algorithm: sha256WithRSAEncryption
16:83:5b:e5:30:24:dd:10:64:19:95:99:f4:9d:ae:94:6e:d9:
2c:d4:b5:df:f3:70:37:71:4c:80:1d:9d:93:88:12:bb:4d:cf:
7b:67:e4:89:3b:c4:64:43:2b:ac:7d:34:d0:1f:0e:80:89:d8:
2c:d3:bb:46:bc:16:7c:53:16:2d:ac:67:74:77:4b:bb:7a:51:
f9:76:11:42:63:eb:8a:77:09:a4:ae:90:09:2e:9d:74:fc:8c:
f6:d8:34:5e:89:0f:b5:86:1b:8d:94:01:08:31:25:3d:98:fb:
3b:dc:00:d5:2a:18:55:1a:92:c5:93:14:ff:0b:a6:a1:f8:5e:
25:2e:88:fa:a0:1b:a8:f9:7a:41:aa:a4:71:97:cd:ad:2a:c7:
92:42:6c:67:5b:c8:01:45:2a:0f:87:cc:6a:3f:bd:2d:cd:e3:
65:38:f2:e9:a2:7a:4a:a6:77:f2:32:74:7e:13:36:48:80:11:
b3:6e:1d:47:67:a8:00:a4:83:5b:4d:1a:40:fd:1c:fd:df:7a:
cd:90:b7:87:2a:7f:61:07:07:58:a3:ac:71:b9:ba:fc:14:bf:
7e:ba:d4:64:60:dd:90:33:74:5c:63:f6:7a:f4:06:92:45:a9:
d1:1f:3a:4c:f8:fd:b5:60:f7:9b:e1:9d:45:0f:20:a4:49:8a:
14:2d:b9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org