Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134362e302f32342d3234203d3e20323632393932.roa
File: 3138362e3231392e3134362e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier: At9L/rvt1u3npgeM/LPJtGAhgI5kx2IXPZtqqFcseto=
Subject key identifier: BB:FE:22:7D:B3:D6:5A:2F:DA:4C:BA:F4:B2:D0:6E:53:F3:08:1E:F6
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 3DF8B32BDEDCAF298B88D47AE2B97765DBE9D024
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134362e302f32342d3234203d3e20323632393932.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 262992
IP address blocks: 186.219.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f8:b3:2b:de:dc:af:29:8b:88:d4:7a:e2:b9:77:65:db:e9:d0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=BBFE227DB3D65A2FDA4CBAF4B2D06E53F3081EF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:38:ef:06:89:90:3d:e0:ec:20:cd:45:ae:
cf:37:62:b0:df:d0:dc:1d:07:71:80:20:37:23:26:
53:ae:b9:ae:d7:ad:e7:2d:67:a0:6e:71:6c:2d:bd:
9a:f1:64:e4:46:fc:7d:65:53:07:4b:03:34:3b:d8:
3a:15:ae:1c:69:07:c8:97:42:fc:d4:75:36:fc:e8:
27:41:f4:b1:63:41:61:e3:ea:99:a1:15:0c:9f:fb:
df:fa:f9:7a:93:4b:52:fb:21:cf:9a:5b:e4:c0:99:
b3:22:40:08:f7:b0:61:c8:3c:00:51:37:0d:c5:74:
b4:47:71:a8:aa:a0:e0:13:09:1f:14:4e:0a:16:9a:
69:96:88:be:75:a1:c2:31:b0:f1:bf:d9:0e:d8:b2:
43:8e:f3:fa:c8:e5:9f:ab:22:25:1b:6d:17:b9:6f:
37:ce:6d:b8:5d:7b:e9:bd:9a:5f:0c:05:57:4a:9f:
fc:01:4d:45:42:5e:e0:01:ff:a9:c3:b0:47:6c:33:
3c:36:13:8c:4d:b4:cd:92:3e:db:05:9e:e7:b2:4b:
15:ab:f3:73:80:78:5d:70:0a:9a:bb:85:fa:46:ca:
60:71:66:77:36:f3:2c:4d:3c:1c:6a:db:17:a5:b3:
ff:94:59:81:e3:db:e4:d9:ee:03:f9:d8:68:f5:54:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FE:22:7D:B3:D6:5A:2F:DA:4C:BA:F4:B2:D0:6E:53:F3:08:1E:F6
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134362e302f32342d3234203d3e20323632393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.219.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:90:25:01:aa:41:40:2a:9c:b7:1f:00:f2:98:f5:53:4d:cf:
39:bf:68:7b:0a:d5:fa:c7:86:ca:1c:27:57:70:26:a0:54:f7:
37:b5:bf:c2:1a:ad:cf:98:c8:54:a7:47:57:c0:6c:7a:c4:e2:
0c:f0:bf:74:c7:0b:3c:54:fe:a0:d6:91:34:8b:ec:60:0e:b8:
f3:2b:b9:cc:fd:09:69:3c:3a:15:20:fa:dc:29:4f:65:4c:c3:
26:b6:30:81:59:eb:cb:22:7c:9a:44:74:4f:ac:74:f8:56:fd:
7b:bf:14:2c:4c:b1:7a:43:aa:aa:19:25:ca:68:f0:29:0c:fb:
00:a9:dc:e7:d9:ea:26:b2:a7:70:25:45:cd:63:b0:30:62:de:
8c:10:85:c4:76:9b:22:98:60:1e:56:ef:2c:62:f7:6d:2c:0b:
65:31:c4:0e:e9:61:16:0e:42:ea:f7:34:75:c4:a0:cc:bc:4e:
99:3f:0a:3d:8f:b7:c3:22:c5:65:45:bf:6c:e1:46:72:63:c2:
32:33:56:da:97:88:07:79:14:fa:4e:5f:71:de:4d:f3:20:76:
ef:65:4a:88:14:8e:5f:3b:81:24:a9:09:97:de:13:55:60:0b:
ad:1e:45:c6:eb:90:cf:39:c6:0c:d4:dc:61:5f:95:66:11:1b:
5c:73:7a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:47 2025 by rpki-client