Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa
File: 3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: aoyE1W5ffh7xWp5M0VUCetpWazWGChYfdrSoJ6gvUig=
Subject key identifier: A4:AF:67:DA:69:54:50:F7:F3:4D:92:26:EC:48:77:9E:D2:82:E4:40
Certificate issuer: /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial: 7BAB759CD73A2EB453DD19280F1FA6C05AEC0C78
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa
Signing time: Wed 04 Dec 2024 15:41:44 +0000
ROA not before: Wed 04 Dec 2024 15:36:44 +0000
ROA not after: Wed 03 Dec 2025 15:41:44 +0000
asID: 53153
IP address blocks: 186.209.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ab:75:9c:d7:3a:2e:b4:53:dd:19:28:0f:1f:a6:c0:5a:ec:0c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Validity
Not Before: Dec 4 15:36:44 2024 GMT
Not After : Dec 3 15:41:44 2025 GMT
Subject: CN=A4AF67DA695450F7F34D9226EC48779ED282E440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:dd:9b:d9:0d:13:a0:37:73:bc:17:1f:2b:
a6:a6:e6:93:48:a4:db:5b:94:78:0b:43:09:47:8b:
a4:f6:68:59:9b:68:3c:b0:9f:4e:97:d1:33:41:79:
fe:8f:91:b0:df:53:37:93:13:cb:2c:de:10:9f:9d:
97:8c:cb:86:7a:13:b8:81:ba:22:9c:b9:1e:a9:37:
76:13:1a:f8:1f:54:94:66:9a:f4:74:04:ff:79:7b:
2d:0c:76:ab:d4:3a:2e:64:2b:7f:ea:ab:c1:10:8a:
f4:68:57:c2:46:e8:be:8d:b9:fa:c9:05:07:4d:99:
45:92:f1:3c:67:c8:1a:15:54:81:25:e6:5c:1b:13:
27:f0:64:5d:e7:e6:d1:e9:e5:f8:79:90:f7:c7:b0:
23:13:b7:d5:fd:d5:a1:8a:9e:27:c3:96:be:9e:71:
62:71:9a:57:c1:fb:c8:9d:04:a5:3d:06:61:92:9d:
6d:eb:d1:bc:aa:44:b3:fe:c1:4b:d2:38:99:d8:4c:
8a:3a:e8:5e:ea:e1:b7:17:5d:bc:a8:6f:c8:8b:76:
1e:54:74:03:b0:14:9b:b8:8f:6d:4f:da:76:e2:3d:
9c:db:ae:ea:94:36:07:2f:f7:27:d1:46:80:58:51:
2e:ac:7c:66:7a:ba:59:f4:34:2a:b0:5f:d8:09:af:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AF:67:DA:69:54:50:F7:F3:4D:92:26:EC:48:77:9E:D2:82:E4:40
X509v3 Authority Key Identifier:
keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.101.0/24
Signature Algorithm: sha256WithRSAEncryption
92:28:02:3a:03:c2:19:ca:26:e9:4c:c8:6b:43:a1:95:8a:4e:
eb:d1:59:b4:70:af:a0:be:58:0c:93:be:48:25:02:79:87:a7:
34:a2:9d:a2:4b:18:30:48:de:fb:cb:25:d0:86:ed:28:39:9d:
df:c2:5e:29:82:92:92:03:0b:74:21:bc:90:6c:ef:66:bf:aa:
40:02:ec:62:67:fd:9e:9c:6d:5c:fc:35:5d:3b:cf:d6:ac:19:
dc:cc:67:39:d5:e3:55:89:81:12:8a:68:52:ba:c7:cb:87:ea:
d3:fd:7b:58:7a:11:f7:9a:a1:cc:b8:40:52:89:06:da:af:16:
31:0f:49:01:8a:83:43:8c:bb:b7:a8:45:05:70:cf:69:a1:3a:
e1:22:79:f5:63:96:96:7f:34:ea:9a:94:ad:bc:f3:48:bd:98:
05:24:98:b1:2d:58:f0:92:a4:19:4d:3c:06:be:4b:e5:56:7f:
18:ee:74:45:66:4c:22:3b:a2:4c:10:fd:38:a9:ac:b8:1a:38:
c3:86:df:2d:ea:d0:08:ae:e0:74:93:72:77:37:e6:15:65:3b:
dd:b5:c0:36:b2:fe:89:c0:a8:53:bf:3c:54:a7:f6:9c:32:fc:
18:ba:36:13:30:6c:de:99:1f:2e:24:0f:1c:5d:a1:fb:d9:d9:
e6:72:7f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:38:07 2025 by rpki-client