Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa
File: 3138372e36312e3131312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: maYcro83r8rrQ1YPXfWBdT93v2MCQxl2UnRridCwvDo=
Subject key identifier: 34:60:B5:6A:FB:FC:0E:0D:D9:6D:93:C1:0A:86:96:D0:9F:3A:F7:90
Certificate issuer: /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial: 787428F19468188ED686C41C14FCA773FFD1D89B
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa
Signing time: Wed 04 Dec 2024 15:42:54 +0000
ROA not before: Wed 04 Dec 2024 15:37:54 +0000
ROA not after: Wed 03 Dec 2025 15:42:54 +0000
asID: 53153
IP address blocks: 187.61.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:74:28:f1:94:68:18:8e:d6:86:c4:1c:14:fc:a7:73:ff:d1:d8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Validity
Not Before: Dec 4 15:37:54 2024 GMT
Not After : Dec 3 15:42:54 2025 GMT
Subject: CN=3460B56AFBFC0E0DD96D93C10A8696D09F3AF790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:97:00:cc:44:b6:d0:7b:84:95:4a:07:85:
d3:ac:45:47:dd:0e:89:30:e9:e4:c3:99:f9:ec:6f:
84:16:04:b1:bb:34:63:4a:40:fd:c8:f5:e6:e7:fe:
17:29:cd:7b:c7:8f:7b:c8:21:4d:ea:7d:54:ab:ab:
5f:b3:eb:d5:4a:00:44:f9:8b:32:0b:d4:f7:02:02:
5e:4f:d0:74:d1:a2:a7:32:33:1b:fc:84:ab:8f:1d:
ad:a7:8a:96:b6:13:0c:7e:b8:5a:fb:ae:6f:5c:eb:
b5:17:e5:2a:c0:c7:54:ef:19:7d:e8:e1:9a:e7:a4:
e2:ca:d3:e9:80:b7:0d:ae:cc:36:2c:48:ea:05:0d:
76:e4:5e:76:06:a4:55:cb:d2:39:53:2e:a0:2d:65:
11:da:39:50:57:9e:88:ca:de:49:11:bc:f8:57:42:
d6:a6:78:ef:c6:d6:e2:74:fa:b9:04:62:0f:38:65:
66:d9:b6:41:a8:75:a1:40:fd:7b:d2:41:c7:04:3d:
56:70:43:77:0f:d2:f8:3a:57:71:db:e9:a2:ba:37:
bd:79:24:d8:9b:4e:d2:ec:47:ee:d4:6b:6d:8d:6a:
89:2b:b8:c7:96:b0:00:68:2a:5b:1b:af:91:8e:4f:
46:0e:c1:f8:7c:ae:a5:91:d0:8b:93:06:f0:91:ef:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:B5:6A:FB:FC:0E:0D:D9:6D:93:C1:0A:86:96:D0:9F:3A:F7:90
X509v3 Authority Key Identifier:
keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.111.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9f:59:7c:9e:ad:f4:1b:f0:73:c5:85:10:71:7f:5c:a7:d2:
60:3e:ea:df:52:0d:d4:cb:af:d8:77:ec:8a:2c:fd:36:68:9c:
7e:83:39:8a:7a:60:6d:f5:61:a6:59:db:e2:ef:1d:d7:8d:32:
41:96:7f:4f:8f:9d:f3:66:95:6c:56:56:11:70:27:05:d8:bd:
33:e8:3c:71:fd:f8:bc:fd:5d:9a:c5:e6:f7:4b:fd:cf:7e:dd:
7c:f8:a4:2c:39:b1:e4:0b:82:ad:df:0b:be:a6:ad:7b:ab:02:
91:77:3a:8f:aa:c0:c9:81:c1:c5:a0:89:c2:e2:d6:fb:87:60:
a2:48:b6:56:50:95:36:81:45:40:40:66:91:79:1e:80:6f:5f:
91:4f:07:67:e6:b1:1e:8b:c1:67:02:52:fd:83:34:bc:9a:d2:
98:30:17:6b:07:58:38:4d:3a:57:9f:78:b5:d0:6f:a3:cc:3f:
24:c9:fd:b0:c1:41:37:06:a5:5f:01:c9:c2:48:a0:a5:c5:f4:
54:89:c2:e2:69:07:df:f3:34:74:4e:8d:76:93:33:91:ab:37:
55:df:43:78:59:53:1d:9f:56:6f:29:8a:a3:db:42:df:3c:b1:
d7:41:20:c7:a6:a7:50:d4:1a:ac:87:2b:22:41:56:c3:d7:5e:
32:c8:38:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:23:12 2025 by rpki-client