Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e38382e302f32332d3233203d3e203238363130.roa
File: 3138362e3230392e38382e302f32332d3233203d3e203238363130.roa (raw, json)
Hash identifier: qOpoetW6z1A/HRZbayTAWLRqFdhvqCevx+DKcN+Rkes=
Subject key identifier: 5E:7C:2D:FE:97:D1:AE:A5:DE:0F:BD:B3:1E:05:B3:E1:42:81:36:F5
Certificate issuer: /CN=4B5276CDFF6FA0A23F162671193E4C132CBC55E8
Certificate serial: 3DF13F2357BAE01C92737A82AD755742688EDE3F
Authority key identifier: 4B:52:76:CD:FF:6F:A0:A2:3F:16:26:71:19:3E:4C:13:2C:BC:55:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e38382e302f32332d3233203d3e203238363130.roa
Signing time: Thu 04 Apr 2024 20:03:03 +0000
ROA not before: Thu 04 Apr 2024 19:58:03 +0000
ROA not after: Thu 03 Apr 2025 20:03:03 +0000
asID: 28610
IP address blocks: 186.209.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f1:3f:23:57:ba:e0:1c:92:73:7a:82:ad:75:57:42:68:8e:de:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B5276CDFF6FA0A23F162671193E4C132CBC55E8
Validity
Not Before: Apr 4 19:58:03 2024 GMT
Not After : Apr 3 20:03:03 2025 GMT
Subject: CN=5E7C2DFE97D1AEA5DE0FBDB31E05B3E1428136F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:1e:c5:ef:ef:e0:59:d7:64:85:57:3c:a6:
29:a1:2d:a4:a8:34:7b:13:cd:40:65:22:a4:fe:9c:
c7:2f:b7:b2:58:c0:5c:97:56:c0:55:d4:5f:07:db:
27:4e:a0:cf:72:ae:9e:ef:be:ba:ab:44:04:20:54:
68:0e:a2:ec:69:e7:f8:7d:ab:58:1d:14:2f:81:24:
2e:f3:28:be:93:64:a7:7d:87:02:5a:6c:1b:ac:fa:
18:df:9a:3b:30:72:11:07:da:9e:df:0a:5f:8d:b2:
2f:64:79:92:19:17:20:c1:a8:10:51:ed:bb:87:2d:
36:c1:22:1a:4e:72:eb:fc:b3:e8:5c:5e:5c:90:9b:
db:a3:3e:60:47:e5:81:3f:aa:36:5b:ad:ec:c1:f6:
c9:57:ed:2f:df:83:d5:35:3a:43:51:bf:1a:2c:d0:
05:28:a8:a3:ff:48:2f:fa:1e:fe:81:8c:df:f6:59:
36:6e:fe:6c:ee:0a:79:97:0c:56:10:db:12:40:3d:
b4:97:21:d2:1d:46:08:3b:97:5e:c4:37:48:6a:a6:
86:46:80:df:5a:71:3d:fd:85:0a:e8:9e:2a:20:6d:
c2:5e:62:ca:1c:e0:18:0d:ae:df:1f:19:d9:34:80:
3c:19:c6:21:d6:5d:0b:ed:ac:e9:d7:83:94:d0:f0:
7a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7C:2D:FE:97:D1:AE:A5:DE:0F:BD:B3:1E:05:B3:E1:42:81:36:F5
X509v3 Authority Key Identifier:
keyid:4B:52:76:CD:FF:6F:A0:A2:3F:16:26:71:19:3E:4C:13:2C:BC:55:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e38382e302f32332d3233203d3e203238363130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.88.0/23
Signature Algorithm: sha256WithRSAEncryption
66:68:30:26:f9:63:11:da:1a:5b:d9:08:36:0a:41:fd:6a:2e:
c0:d5:17:3b:4e:ac:c6:dc:ca:8c:5b:be:e9:ac:9a:6e:93:e9:
25:7f:02:cc:f1:69:55:95:65:ee:a7:12:35:cf:f8:1a:fb:da:
bc:c5:00:39:4f:6a:38:e8:b4:3b:d2:08:43:af:33:8a:d0:0e:
8d:2a:04:0a:e3:74:79:2b:20:2b:d4:ce:51:90:42:8e:06:12:
e2:a5:94:9d:77:01:10:b0:8c:61:88:b0:34:2f:4e:02:5d:2d:
85:2a:8f:38:1a:c6:51:27:8a:ff:12:af:6c:6f:9d:00:fd:64:
fe:45:1e:83:ee:0c:4b:46:88:5c:2e:04:a9:c1:ff:ff:50:f9:
49:cd:59:8c:e0:30:1d:fa:5d:78:a8:f6:12:2f:70:54:1b:31:
74:4e:22:5d:2c:9b:44:3d:08:f0:5e:dc:90:90:7c:77:e1:83:
17:c5:95:14:30:6b:0f:71:f6:32:dd:38:17:07:7d:79:a6:fe:
22:f5:79:8b:d2:90:cd:7c:00:d5:64:b9:15:34:b5:f2:b5:b0:
1e:ec:eb:27:b1:ff:2b:48:cd:75:25:5b:2b:9b:f8:de:94:ab:
b9:4e:9a:13:f3:6c:c5:aa:cb:a6:eb:89:e1:8b:a0:aa:56:69:
27:46:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:00:46 2024 by rpki-client on console-fra.rpki-client.org