Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e39372e302f32342d3234203d3e203238323230.roa
File: 3138372e38362e39372e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: yPOVB02Mxxe2WDqEyWYUTW01+nPaKEFJL9pBYDFsE9w=
Subject key identifier: 30:94:CF:58:44:AA:64:57:61:91:60:57:8B:FC:DC:F3:B4:7A:3F:7C
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 4DF367FC520ED4D3FEA6FE07AF01C582F1D86BB6
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e39372e302f32342d3234203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:12 +0000
ROA not before: Mon 08 Apr 2024 20:00:12 +0000
ROA not after: Mon 07 Apr 2025 20:05:12 +0000
asID: 28220
IP address blocks: 187.86.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f3:67:fc:52:0e:d4:d3:fe:a6:fe:07:af:01:c5:82:f1:d8:6b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:12 2024 GMT
Not After : Apr 7 20:05:12 2025 GMT
Subject: CN=3094CF5844AA6457619160578BFCDCF3B47A3F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:3e:6d:9f:f8:80:39:31:42:80:e1:b4:81:
44:e1:83:d8:11:af:7f:df:76:cf:50:fa:62:10:65:
2f:77:2f:51:db:63:65:2e:46:12:6a:f7:cb:2c:cb:
7b:5d:f7:53:9a:2e:06:2b:d6:ea:41:a9:9d:a4:42:
30:6b:b3:98:8f:fe:23:b8:f2:28:94:32:97:e4:99:
64:30:c4:51:a1:23:9e:af:95:6f:2a:4a:2b:06:09:
ca:33:7e:98:82:da:01:80:03:a0:21:30:e5:6f:a1:
e4:49:87:40:14:68:e2:bc:88:0a:36:04:3e:cc:ec:
22:30:f0:41:fa:5b:59:2d:38:36:c1:34:cc:2f:7c:
22:59:b7:d4:17:5d:b2:3b:c6:aa:5c:2a:10:bd:31:
41:31:3f:1f:4d:f3:22:f4:5c:86:8e:f4:58:bb:a0:
67:fb:0f:6b:78:9c:67:05:a4:b7:9b:6c:50:77:5b:
e5:d8:19:ef:7d:45:4d:23:d5:18:51:68:60:ca:83:
38:76:2a:11:9b:f3:a7:a5:87:7f:39:1a:ab:7a:4c:
6a:ca:31:43:61:16:64:ee:1b:72:8c:aa:ab:6e:ba:
cc:fb:58:0e:cd:6c:e6:85:55:02:a5:50:64:ff:17:
01:75:3c:df:02:e1:2f:85:c1:29:9a:a3:af:4a:82:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:94:CF:58:44:AA:64:57:61:91:60:57:8B:FC:DC:F3:B4:7A:3F:7C
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e39372e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.86.97.0/24
Signature Algorithm: sha256WithRSAEncryption
03:39:0b:db:a5:9a:e4:a4:fa:9b:40:46:5d:d9:6a:87:50:d5:
2e:33:33:b8:a8:b0:02:0e:95:21:04:96:2a:3d:fd:fd:06:88:
f8:8f:20:7b:b8:0d:ee:ae:9b:f6:08:71:00:55:b6:8a:47:d4:
4f:e4:9f:2b:49:37:51:34:3f:55:82:d7:e8:7f:50:66:f3:e9:
f2:d2:be:10:c4:da:80:50:06:f2:a6:db:b9:b9:12:5d:c7:28:
3f:8e:8d:d5:4e:90:38:16:ec:08:7b:3e:8d:33:40:2c:bb:76:
1b:0c:7c:02:fb:46:4b:b0:ea:9d:d4:b7:99:df:b3:97:ae:b9:
7e:3c:6c:01:bd:a4:e0:6d:06:c6:9c:a5:b7:17:90:02:8a:99:
e5:6e:2c:a7:bd:5c:50:cc:28:cf:f3:b2:24:3b:81:c2:c4:9f:
80:06:32:2b:e3:1e:ed:92:a7:e7:2d:5d:09:0b:49:41:78:69:
fa:5f:15:21:32:d8:24:7e:05:af:ff:f3:44:44:79:1d:2c:b5:
f8:0a:9d:bf:31:51:f1:39:e8:a7:6c:11:4e:f3:49:14:a6:5a:
cf:48:b7:85:71:3c:62:eb:c7:5e:dd:ff:8d:19:5c:ab:c4:6f:
98:47:8d:8a:12:f7:0c:31:f6:e9:f9:06:9c:42:ba:75:95:9a:
94:9d:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:17:14 2025 by rpki-client