Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36302e36342e302f31392d3139203d3e203238323230.roa
File: 3138372e36302e36342e302f31392d3139203d3e203238323230.roa (raw, json)
Hash identifier: 6LrWhYe6nnYE9nQmFBI3zw6UcQ6otwnbIyESrP4BpJg=
Subject key identifier: E2:37:87:C8:0D:65:B9:C8:9E:85:97:DD:8F:03:78:DE:74:07:A9:F6
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 1184E0A1D697C9E167F767A5037C7003CB1ABB20
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36302e36342e302f31392d3139203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:15 +0000
ROA not before: Mon 08 Apr 2024 20:00:15 +0000
ROA not after: Mon 07 Apr 2025 20:05:15 +0000
asID: 28220
IP address blocks: 187.60.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:84:e0:a1:d6:97:c9:e1:67:f7:67:a5:03:7c:70:03:cb:1a:bb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:15 2024 GMT
Not After : Apr 7 20:05:15 2025 GMT
Subject: CN=E23787C80D65B9C89E8597DD8F0378DE7407A9F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:24:25:82:63:78:db:8b:b8:31:1c:ee:f5:
f3:ad:a4:4a:6f:c4:6d:55:1b:d7:7c:ed:07:33:b6:
f8:e3:a2:4b:6f:e3:cd:95:4f:9a:05:ab:21:fb:3d:
1b:b5:1a:ff:25:e2:96:d8:fe:51:ea:81:38:4d:b2:
46:95:34:c1:16:67:24:2b:9d:11:bc:bb:0d:05:6e:
a2:be:2f:33:fe:1d:0f:16:6f:e1:bd:8f:e7:a4:61:
f4:d1:fc:ea:31:c3:36:4d:54:fd:9c:40:0b:3e:3d:
dc:95:ce:d2:14:84:98:3d:97:f3:79:58:33:ed:63:
fa:c4:f7:70:8b:99:9b:23:25:02:5f:d8:01:09:71:
4a:70:53:3f:67:8a:3d:90:59:30:ad:71:c2:3a:5d:
ec:3b:99:0f:77:e2:6e:3b:65:9f:78:cf:bf:fb:54:
ce:be:cc:bc:d6:51:ac:aa:6e:5b:a1:30:05:b6:4e:
5e:d8:e5:1f:b2:b8:b7:45:05:1b:2f:35:59:78:06:
ba:9b:ca:86:f3:69:b0:90:12:8f:0a:30:55:6b:a9:
bd:a0:e3:29:4d:b0:ba:d5:8a:6d:8f:85:04:c5:b3:
d9:b3:fa:d4:2a:3a:f7:dd:85:b4:36:bc:38:90:df:
b1:dc:70:21:f5:7a:11:9b:88:06:65:69:b0:e7:9f:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:37:87:C8:0D:65:B9:C8:9E:85:97:DD:8F:03:78:DE:74:07:A9:F6
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36302e36342e302f31392d3139203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.60.64.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:d4:6b:71:af:7e:15:69:75:9f:b9:a8:f7:31:73:bb:6f:d7:
32:7d:44:a6:b1:50:f2:f3:e7:1b:6b:22:71:2e:68:23:2e:70:
06:f5:9a:5e:ce:9d:44:53:2d:cc:61:f8:4b:3d:38:f8:59:7f:
5f:01:59:1e:ac:0b:1d:7f:ab:6c:d7:87:59:1c:1c:e3:88:08:
6b:06:34:37:25:a3:47:36:52:29:5b:7c:02:b1:5b:62:c3:84:
62:9f:e0:fb:b1:ff:2c:e8:5c:7d:4c:03:7d:6d:28:99:87:2c:
07:4e:d3:5c:e1:ba:28:b9:7d:b0:56:48:75:ae:fb:9a:a0:aa:
11:60:b1:e8:63:d7:93:45:57:64:7f:35:b8:4f:3b:1a:bb:25:
0f:04:96:a7:b7:39:42:c0:71:4b:a1:c6:b2:c6:87:ba:2e:eb:
61:49:28:7d:18:19:3e:dd:bc:a8:70:e7:51:55:2f:7f:e5:5b:
b9:5c:9c:62:4d:e2:43:8f:41:b5:12:98:e3:8e:4e:59:5a:cb:
e9:59:a4:51:3e:23:cd:1d:c8:d8:1d:5b:5b:4a:f5:ac:2c:fe:
d8:e4:98:bc:8f:53:c5:39:cd:a6:36:31:f4:ca:f8:9c:f1:35:
ef:a7:0e:ce:07:91:42:b2:38:e6:42:2e:cb:b5:ed:d6:a5:c7:
8a:b7:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:21 2025 by rpki-client