Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e39362e302f32342d3234203d3e203238323230.roa
File: 3138372e38362e39362e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: gNbTxnP+l3ZHdVSMZ8rbLew/c4hdP7i9+kZ0N0eKBIE=
Subject key identifier: DD:6A:3B:50:1C:84:B2:C6:59:4B:69:FA:10:96:B5:BC:B5:E5:7D:FA
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 3504EC5D4F85F7E7801B3AEA7A7472FE917023EB
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e39362e302f32342d3234203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:21 +0000
ROA not before: Mon 08 Apr 2024 20:00:21 +0000
ROA not after: Mon 07 Apr 2025 20:05:21 +0000
asID: 28220
IP address blocks: 187.86.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:04:ec:5d:4f:85:f7:e7:80:1b:3a:ea:7a:74:72:fe:91:70:23:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:21 2024 GMT
Not After : Apr 7 20:05:21 2025 GMT
Subject: CN=DD6A3B501C84B2C6594B69FA1096B5BCB5E57DFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:2b:18:8a:7f:19:f1:c8:35:d4:50:a6:33:
c2:c1:d4:28:1d:84:a6:69:27:a0:d0:c2:c9:1b:53:
05:c1:32:27:e1:fd:56:66:af:e3:ee:63:b4:e3:24:
07:f1:57:f4:bd:77:47:45:4c:f5:64:c2:25:57:62:
83:25:59:93:e7:c1:96:77:61:49:e8:a3:32:22:6b:
ae:be:11:8e:23:6a:c3:8b:20:3d:bb:1c:54:d9:ce:
93:06:b5:48:98:6b:b9:80:2e:cf:1e:de:a1:a0:91:
37:71:1e:a0:37:45:75:1b:c7:77:e3:10:9c:62:ce:
db:e9:5d:c5:9f:6a:1c:3e:26:04:d0:51:ca:e6:9c:
14:c0:87:98:cd:2e:ec:dd:42:94:80:df:93:01:40:
41:72:7c:30:3a:72:55:23:eb:21:8c:b3:9f:bd:e3:
ae:9c:88:7c:01:83:cf:f5:07:56:ba:cc:42:db:e3:
bc:5e:c5:cb:13:2f:02:e7:1c:0b:7c:49:f4:0c:c2:
ed:eb:d0:32:b5:9b:ac:76:c8:d4:24:80:55:04:fb:
27:08:a6:21:27:db:c6:cd:f1:01:9c:70:b5:39:1c:
b5:6b:f5:89:73:40:4c:ee:75:3e:31:5c:4f:45:35:
dc:e1:10:42:f1:df:05:17:67:8e:e0:f4:06:25:6b:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6A:3B:50:1C:84:B2:C6:59:4B:69:FA:10:96:B5:BC:B5:E5:7D:FA
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e39362e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.86.96.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d6:cb:72:5c:f5:c8:62:e5:45:62:cf:22:f9:50:eb:54:82:
8a:b3:fc:d5:4b:9c:8d:85:9a:f5:94:4b:9b:10:20:11:1a:cf:
7c:3d:75:0f:1f:b7:8b:8b:60:e8:7c:ac:a5:99:21:32:7b:17:
73:8c:42:d6:c6:0f:6c:95:f3:69:38:c0:33:c3:f6:6f:f1:32:
00:6e:f3:42:fc:de:26:d3:f0:2a:98:5c:e2:fa:55:d0:13:af:
80:f1:2b:b1:a8:fc:5e:20:57:09:02:ad:ec:e6:36:fb:ea:98:
8a:f0:39:d0:c1:ab:1c:26:7c:98:75:75:0c:5a:1f:d2:57:de:
33:36:b3:03:2e:20:79:80:6d:e6:07:42:bc:e3:38:66:af:c7:
4a:d8:30:e7:6e:51:06:98:b5:7e:8a:e5:86:30:bd:80:4b:c0:
2b:bd:b1:d2:c8:49:1a:27:72:ab:0e:5c:69:6d:f2:f5:ec:5b:
e0:6d:66:52:f7:05:fe:15:02:18:b7:08:43:03:88:b5:98:5a:
f2:ea:39:94:75:8b:f2:b9:28:b6:f7:72:c1:26:2e:53:2a:1d:
e4:e9:d6:1f:39:f0:97:89:d2:e9:4a:f9:cb:60:c4:ad:ef:7f:
f1:78:fd:f0:96:ed:09:f7:ea:bb:c3:72:37:a4:0a:ba:b3:e0:
76:e3:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:22 2025 by rpki-client