Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38372e3131322e302f32302d3230203d3e203238323230.roa
File: 3138372e38372e3131322e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier: 3nTH0OMnMfLPYhGcNQ6FhrfnZhnI9a7aTwwygdzpZQU=
Subject key identifier: 12:F9:09:77:B3:AF:B9:B7:9D:37:89:1F:EE:8C:EB:A0:9D:B9:54:D3
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 32B058B0583670D1B175930E131640C9984BBD4A
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38372e3131322e302f32302d3230203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:13 +0000
ROA not before: Mon 08 Apr 2024 20:00:13 +0000
ROA not after: Mon 07 Apr 2025 20:05:13 +0000
asID: 28220
IP address blocks: 187.87.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b0:58:b0:58:36:70:d1:b1:75:93:0e:13:16:40:c9:98:4b:bd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:13 2024 GMT
Not After : Apr 7 20:05:13 2025 GMT
Subject: CN=12F90977B3AFB9B79D37891FEE8CEBA09DB954D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:46:ba:72:e8:39:48:d0:cc:45:5f:07:4c:
9d:c5:fc:96:e2:f9:46:f3:90:14:ff:8c:ab:5a:b1:
82:48:6a:44:b0:09:07:10:fd:20:10:b3:74:07:9d:
4c:be:d2:32:cf:cd:eb:bd:cd:79:08:2b:7b:17:78:
8a:b5:41:9d:0c:c3:c6:e4:4f:0d:80:c8:e8:48:54:
23:bc:e9:12:75:8a:66:d8:03:cc:8a:9e:7c:e2:6e:
07:f6:72:96:22:c4:ea:64:72:62:a9:40:00:2b:8f:
43:55:f6:8e:42:05:bc:cd:be:64:b2:48:17:42:26:
f0:3a:85:8c:34:cd:23:fe:42:43:7c:80:e9:f8:ff:
4b:ce:3e:6c:45:36:32:61:0e:79:09:c3:5c:98:3d:
17:b7:4d:69:a6:02:ea:2e:a8:d2:21:6d:69:e9:92:
3e:1f:41:df:99:a1:d5:30:8f:3c:31:c2:de:da:70:
6d:cc:ba:c1:d4:bb:08:06:5c:18:f6:50:f6:f1:1d:
7e:5f:8c:58:b3:5f:c6:54:d5:10:8c:81:83:4f:95:
d6:9d:c3:b0:9a:c5:4f:b7:66:bb:34:62:cf:bb:fa:
48:d8:8c:25:24:52:7a:67:89:5d:a4:6a:18:17:6c:
05:f1:9f:4b:08:dc:d4:2b:1e:9f:5c:c6:ef:d8:6f:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:09:77:B3:AF:B9:B7:9D:37:89:1F:EE:8C:EB:A0:9D:B9:54:D3
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38372e3131322e302f32302d3230203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.87.112.0/20
Signature Algorithm: sha256WithRSAEncryption
46:d1:32:2f:3f:9d:5b:dd:1e:31:ab:48:98:65:cc:cf:5e:b1:
b8:45:d9:01:81:6d:41:ef:2f:34:0e:a5:56:6b:f1:28:df:71:
5e:3f:17:6e:88:4c:07:05:d9:bb:17:33:be:ac:80:a3:30:73:
ed:9c:cd:3d:ae:3b:08:50:d2:f2:25:c4:d7:4d:d7:0f:f0:a9:
bd:03:91:2e:95:17:7f:d9:71:6c:dc:08:5a:29:f9:8c:70:d6:
69:ee:ca:c3:a2:9f:81:ca:bc:5c:87:94:62:0a:a6:df:64:aa:
e8:2b:e0:70:cf:50:a9:72:ff:61:98:af:db:61:7e:4e:bd:8e:
7a:93:05:38:f8:81:6c:fa:d3:77:91:3e:2b:d4:29:2a:bb:cc:
95:fd:af:fa:7a:f2:9a:af:b4:f7:82:dc:09:4b:10:df:55:96:
b9:1c:19:7d:17:bc:47:a8:9b:2a:9d:6b:99:5c:f7:f1:b3:7b:
af:63:08:3f:b6:aa:6c:8d:2c:e0:31:b8:fd:11:7b:8a:6c:5a:
a3:d2:fa:47:3d:c6:fa:39:13:33:c4:ba:cb:b9:e5:87:01:e9:
9f:f8:7b:6e:ad:21:72:01:b9:99:7d:65:79:c7:51:52:c1:bc:
84:dc:74:46:46:d6:fa:fd:bc:14:df:bb:e7:3e:a5:98:bf:95:
77:36:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:57:08 2025 by rpki-client