Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa
File: 3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier: L+Z7pUEh9jZE/+1s+qcFbRpaGBccp5fkDozREspDuQ4=
Subject key identifier: 58:F7:43:3D:93:90:E3:24:C7:51:79:B4:49:65:45:CE:12:F7:6B:1F
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 2849C58C5E9785CFE6C1DC6676DD4769E70904BB
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 271724
IP address blocks: 179.191.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:49:c5:8c:5e:97:85:cf:e6:c1:dc:66:76:dd:47:69:e7:09:04:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=58F7433D9390E324C75179B4496545CE12F76B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:bc:44:b1:8c:d5:2d:60:64:48:e4:42:09:
45:e5:eb:45:98:92:58:5b:cd:05:5e:ab:af:5b:5b:
64:e4:a7:f9:f0:a1:e5:62:3c:1c:89:38:0d:24:28:
43:24:8f:ca:5c:f1:c7:3f:bb:a5:35:72:a3:e2:fa:
1d:df:5e:59:3d:ac:a4:8b:ab:41:9f:96:8c:c9:b4:
04:ef:9b:43:e2:f9:c0:fc:5a:bb:78:50:87:36:ff:
94:40:c3:92:6f:cc:ef:92:fc:ce:84:dc:26:bf:03:
9a:cd:c0:b5:75:df:d3:96:99:cb:a3:36:28:ce:a5:
af:ec:92:ab:14:4c:d0:3d:e2:51:2f:ad:8b:91:47:
28:5d:e1:dd:8c:4a:29:38:97:9a:06:7a:1e:36:00:
b1:94:75:2e:42:f5:24:17:f5:a3:86:b9:4e:9b:09:
ee:05:a5:47:de:c8:d5:83:30:e0:12:c3:8d:c7:e8:
8c:68:34:aa:a1:38:3b:51:ca:e6:47:d4:42:d2:e7:
02:89:e6:79:63:04:21:89:5d:0a:cc:dc:07:1e:2a:
41:3c:42:14:6d:6c:0a:6e:78:de:0e:52:cb:b2:55:
76:89:f5:93:62:f7:e3:c2:ff:ae:04:d6:9a:c1:27:
bd:25:38:88:31:9b:d0:2e:7e:7b:1a:b7:09:92:38:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F7:43:3D:93:90:E3:24:C7:51:79:B4:49:65:45:CE:12:F7:6B:1F
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.191.144.0/20
Signature Algorithm: sha256WithRSAEncryption
86:f2:90:15:17:d5:8d:6b:97:b3:a2:be:d2:b0:d9:bb:bf:19:
76:7e:3c:6f:a4:b2:1b:06:3a:80:e3:e9:67:21:64:bd:4f:fa:
79:81:f2:d0:0d:26:01:96:97:9d:e8:5e:72:ae:24:ff:b0:f1:
08:48:8d:a5:64:4c:11:83:83:ae:63:22:16:19:58:2d:d4:47:
e6:58:0b:b7:13:bd:c5:d6:4b:d0:43:73:6f:7a:15:cb:80:55:
16:d1:c6:cf:5d:8f:72:59:ee:65:30:e8:0c:23:10:87:16:f4:
ac:eb:b1:fd:32:8d:9b:3a:c7:7f:19:82:d4:f5:f1:e2:71:b7:
4a:da:b3:ea:87:d1:79:c0:1d:0a:52:a8:f9:50:77:fb:fd:6f:
9d:51:21:9f:dd:01:82:7d:41:d2:08:ea:26:76:ba:4a:7a:34:
e7:0a:5e:3c:3e:64:5f:27:e8:c7:48:32:72:74:fd:a7:cf:54:
ea:3e:b9:80:31:fd:49:1c:8b:a8:94:dd:a2:02:dc:82:f9:85:
b5:55:2d:bd:6e:56:a9:0b:cd:cf:58:26:68:ce:0d:fc:cf:25:
e5:d7:d3:88:72:04:73:17:c0:85:cc:4f:a2:ac:ca:1d:e9:b2:
5d:54:44:af:c3:02:cf:b0:96:a0:d0:50:6f:16:82:78:a9:d9:
5c:ed:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:18:53 2025 by rpki-client