Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32322d3232203d3e203533313533.roa
File: 3138362e3230392e39362e302f32322d3232203d3e203533313533.roa (raw, json)
Hash identifier: maYNcxo/F54uASn4tcP9GYw+bNaBECBrOQ8HzOCUDFU=
Subject key identifier: 8B:C3:C8:51:20:1A:63:E2:E5:AB:6C:A7:C5:8F:E1:A7:06:0A:9E:66
Certificate issuer: /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial: 3AD158C35BD7BC341E62513E6E10A9F79CE912CF
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32322d3232203d3e203533313533.roa
Signing time: Wed 15 Mar 2023 20:08:01 +0000
ROA not before: Wed 15 Mar 2023 20:03:01 +0000
ROA not after: Wed 13 Mar 2024 20:08:01 +0000
asID: 53153
IP address blocks: 186.209.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d1:58:c3:5b:d7:bc:34:1e:62:51:3e:6e:10:a9:f7:9c:e9:12:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Validity
Not Before: Mar 15 20:03:01 2023 GMT
Not After : Mar 13 20:08:01 2024 GMT
Subject: CN=8BC3C851201A63E2E5AB6CA7C58FE1A7060A9E66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:0b:08:24:85:c0:c4:9d:30:f2:bf:64:de:
bf:85:75:dd:3f:15:9c:d9:94:3d:5b:57:90:dd:ef:
75:15:65:22:8c:aa:77:a4:20:03:de:e6:e5:79:00:
7e:fe:2d:1f:02:f0:c2:70:4a:a1:6e:fc:1a:65:98:
9b:b8:6f:d3:7f:d3:2f:6e:de:04:e6:7f:d1:eb:92:
be:3f:de:58:b6:9a:d1:ab:ef:fc:4c:84:99:62:c5:
02:54:4b:cb:b9:3e:27:75:ac:70:9a:b4:fd:74:e0:
75:31:01:ee:72:94:d3:b4:b3:9d:d3:e1:88:5e:b0:
9b:e3:6e:1c:55:ea:af:59:26:63:e3:bf:97:b9:bb:
71:c4:13:22:ba:72:48:e0:e3:0d:54:9f:ec:3d:64:
4b:14:04:57:df:c0:78:ab:95:4e:76:a1:38:45:c5:
1a:c2:3b:58:e1:48:3e:dc:ce:ea:92:8f:22:66:b1:
42:98:20:f1:1d:d9:6a:2f:03:8f:8d:0f:a4:1c:39:
ce:07:c2:08:fa:9c:a8:ab:af:da:ef:3e:6c:f9:45:
52:b0:1e:b0:db:a9:69:c8:e4:b8:26:8b:4a:c8:66:
ec:aa:32:8c:ae:48:9a:79:e5:7a:2b:a7:3f:b6:c1:
0b:48:b4:0e:ae:6d:bd:93:c5:d2:70:7a:d1:14:cd:
56:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C3:C8:51:20:1A:63:E2:E5:AB:6C:A7:C5:8F:E1:A7:06:0A:9E:66
X509v3 Authority Key Identifier:
keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32322d3232203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.96.0/22
Signature Algorithm: sha256WithRSAEncryption
77:b1:10:7e:a7:81:d2:a2:ba:a7:fd:13:57:f8:80:24:87:46:
99:9c:b3:9d:1c:41:5c:fc:51:af:5a:27:9c:9d:77:b2:77:96:
06:c9:7b:8d:db:3f:48:cf:bc:bb:54:86:b7:0f:1e:bc:df:da:
ff:b6:47:8b:29:21:55:62:42:7f:01:60:55:52:3e:a5:ea:db:
0d:69:7b:89:a5:1c:64:fc:bc:ed:f4:46:e9:45:51:9b:3e:cb:
cf:03:9c:ee:a5:b9:fd:ec:8c:53:64:f0:0c:c4:95:33:74:85:
e6:3a:e3:95:f5:77:9f:9f:e8:3c:7f:25:66:88:ee:9c:c0:fc:
8d:f5:e8:1e:5c:ac:b7:e9:47:5c:4c:5a:fb:d9:38:70:e3:e8:
5c:5f:0d:f2:6b:e2:37:83:01:91:ca:da:8f:eb:88:cc:6f:05:
6a:64:a3:25:f2:49:13:3e:ff:1a:1a:5f:67:2d:ed:9e:f1:33:
e8:2c:13:e1:d9:c0:1a:e1:c0:d7:32:4e:66:91:16:37:de:27:
50:32:4a:1e:ae:5a:a2:78:11:c7:24:04:c4:8d:cd:d7:9a:62:
08:e8:d4:07:21:33:f3:90:fa:f1:1f:15:11:50:84:c9:08:7b:
47:11:7a:fd:97:a3:ca:3c:b1:63:c9:ef:02:d4:87:b9:1e:d1:
1a:45:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:47 2025 by rpki-client