Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
File: 3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa (raw, json)
Hash identifier: 6cNuXpM/hVKussaKp8OiKygMcJMioHGg827oNChqSVg=
Subject key identifier: AF:06:A4:CB:EA:11:2F:77:9D:E7:73:C3:1A:3F:9D:C7:1B:F4:79:96
Certificate issuer: /CN=23C2D57C49C7C40A3D2573BC3A41D088A1E86C97
Certificate serial: 2BFE354C0623964A10D10197B2C89ECACB8D7FA4
Authority key identifier: 23:C2:D5:7C:49:C7:C4:0A:3D:25:73:BC:3A:41:D0:88:A1:E8:6C:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
Signing time: Fri 24 Jan 2025 13:36:34 +0000
ROA not before: Fri 24 Jan 2025 13:31:34 +0000
ROA not after: Fri 23 Jan 2026 13:36:34 +0000
asID: 263252
IP address blocks: 189.201.232.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:fe:35:4c:06:23:96:4a:10:d1:01:97:b2:c8:9e:ca:cb:8d:7f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23C2D57C49C7C40A3D2573BC3A41D088A1E86C97
Validity
Not Before: Jan 24 13:31:34 2025 GMT
Not After : Jan 23 13:36:34 2026 GMT
Subject: CN=AF06A4CBEA112F779DE773C31A3F9DC71BF47996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:b6:95:f4:d7:11:28:52:c9:53:5a:43:c1:
4f:62:5a:11:9b:c3:d6:8f:ca:6d:5a:aa:26:db:16:
49:49:93:10:9e:37:c2:2f:a8:8f:f3:20:90:72:49:
0e:4c:da:f8:34:4d:f4:d3:89:82:59:46:a1:0e:6e:
29:01:a8:f4:09:f3:b3:ce:1b:5f:28:bb:d7:86:f7:
d2:b9:a8:08:5e:13:1c:fe:82:76:c0:61:a5:bf:22:
d7:eb:b3:3a:7d:d7:f9:19:f0:5b:43:4c:e2:55:d9:
cf:06:6a:af:1f:12:b7:7d:60:c8:97:36:6b:49:08:
7c:31:53:16:40:c3:9e:63:d3:56:0c:8f:1c:7f:53:
aa:1c:2e:0f:af:bc:32:25:2c:75:7f:b4:bf:ff:cf:
ed:4b:44:19:52:94:5d:7d:57:a8:82:84:61:af:84:
34:9c:f0:29:b0:ec:08:30:f6:84:2d:ce:c2:83:e4:
64:ab:0f:2d:40:5b:3c:26:d2:a6:78:1f:9e:0d:50:
c1:3a:54:83:d8:ca:29:c1:32:d4:e4:e7:ba:8c:2c:
e4:fa:d7:ea:ab:3a:af:b8:64:c1:29:26:09:d5:e1:
73:53:c7:2f:c4:f4:84:64:12:ba:16:09:72:69:77:
57:28:92:a0:fd:d6:16:71:7f:9f:3d:db:78:7e:24:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:06:A4:CB:EA:11:2F:77:9D:E7:73:C3:1A:3F:9D:C7:1B:F4:79:96
X509v3 Authority Key Identifier:
keyid:23:C2:D5:7C:49:C7:C4:0A:3D:25:73:BC:3A:41:D0:88:A1:E8:6C:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.232.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:b7:b2:19:84:ed:bc:79:8f:0a:fc:39:64:32:2d:e0:a6:63:
52:b0:fa:be:c7:fc:25:ca:33:b4:c6:23:c6:49:83:6e:b6:b9:
dd:0b:52:c7:3f:d1:c7:7b:4d:17:26:fd:29:14:f2:1a:ec:c6:
d4:c5:9d:28:a5:81:dc:17:84:f9:37:3d:e6:cb:5d:2b:e1:c8:
98:96:80:b7:cd:6e:96:28:e8:4c:31:d3:a9:88:ab:81:69:95:
28:fe:ed:0f:52:33:1f:5e:e1:08:9d:c4:29:af:7f:d9:fc:ca:
9d:84:1d:f9:ee:d7:3d:ff:70:38:ba:a0:63:7e:d4:23:6e:7c:
58:73:7f:31:19:9b:8d:68:bf:0e:a7:df:d2:f4:d4:22:c8:34:
c7:3c:3a:ec:05:c0:7a:d4:17:59:52:42:a1:f6:20:30:ef:0c:
f3:18:96:01:2b:b8:95:8e:50:0c:ec:bc:64:d8:ac:2d:8d:09:
b1:c1:68:91:38:f0:ba:50:55:a5:28:60:47:3f:69:1a:ac:c4:
7c:fe:51:10:3e:9c:78:1b:96:4e:b3:b9:0b:a8:81:01:a7:8e:
3f:8d:1b:4b:d1:cf:f3:a7:a6:6d:c5:91:63:e1:61:93:9f:25:
10:5c:42:fd:95:c3:af:7f:fb:a9:70:d6:b0:88:ba:09:fb:d7:
2a:5f:cf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:10:24 2025 by rpki-client