Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134392e302f32342d3234203d3e20323632393932.roa
File: 3138362e3231392e3134392e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier: G6YLZQkurYkEbTmxNr+VUl8djg1Bvnyr4HTwKAuP+mA=
Subject key identifier: 4D:28:E7:8B:B9:43:A6:70:C9:0C:53:24:56:87:1B:47:12:C8:3B:B2
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 2BEA967F11B35658D1FF03FB5D499C5843AA678B
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134392e302f32342d3234203d3e20323632393932.roa
Signing time: Thu 07 Nov 2024 20:40:14 +0000
ROA not before: Thu 07 Nov 2024 20:35:14 +0000
ROA not after: Thu 06 Nov 2025 20:40:14 +0000
asID: 262992
IP address blocks: 186.219.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ea:96:7f:11:b3:56:58:d1:ff:03:fb:5d:49:9c:58:43:aa:67:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:14 2024 GMT
Not After : Nov 6 20:40:14 2025 GMT
Subject: CN=4D28E78BB943A670C90C532456871B4712C83BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:44:d7:8c:a8:2e:99:40:85:03:1d:66:7a:
57:17:af:67:a4:a8:1f:a2:8b:26:d4:88:97:d8:49:
92:94:98:e1:3b:1a:99:bf:ab:a5:70:b0:92:29:0e:
5b:bf:c8:dd:9b:a7:ce:78:db:04:ed:e9:16:f5:8c:
6a:a8:94:ce:d5:38:04:89:32:2b:16:1a:f2:60:95:
ab:f4:ce:14:e6:d8:00:5e:2d:32:08:64:66:3a:cc:
b6:91:45:1d:2e:5a:13:7f:ae:bd:08:17:12:63:6d:
54:f5:01:32:3f:c1:ef:57:84:2f:3c:71:f1:a4:7d:
1b:3a:87:fd:a3:d0:ce:14:e2:6c:6a:e7:d3:72:ce:
d0:0c:b6:95:85:d9:31:b6:26:ff:4e:d0:58:35:19:
52:1a:c3:8e:3d:63:3f:e3:eb:82:93:c1:23:6a:93:
31:f1:fd:ba:ca:80:fd:42:90:8d:c1:a5:bc:8b:da:
c4:31:4b:cc:c4:9b:f6:cd:f7:5c:78:9a:d2:40:9b:
82:cf:cc:b2:fd:2b:f4:f2:7b:00:c4:6b:31:9f:e8:
d1:d6:7e:7a:9e:1d:0d:a7:9d:be:d7:c5:47:fe:d7:
74:ca:83:77:21:dd:9f:6d:f8:ce:25:49:10:e6:81:
20:59:4a:e4:1f:50:1c:85:d8:12:75:02:b7:6c:21:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:28:E7:8B:B9:43:A6:70:C9:0C:53:24:56:87:1B:47:12:C8:3B:B2
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134392e302f32342d3234203d3e20323632393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.219.149.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:73:78:25:5c:92:3d:15:70:89:14:ed:e6:e0:a9:f4:f6:b0:
c2:ab:3c:18:66:32:b2:e2:f9:ca:06:0a:75:f6:8f:c9:cc:09:
e0:a5:39:d8:7f:f9:f8:41:54:80:a2:e8:c1:c1:3b:d5:0c:44:
32:78:9f:cf:23:6e:70:05:67:3b:1f:59:99:0d:a2:0e:67:ff:
a0:a1:49:bc:0b:92:7a:67:24:54:19:18:1a:97:fc:fd:10:ac:
f0:14:55:2a:6a:50:5e:05:a7:0d:ad:04:53:ad:72:54:f6:3f:
a4:bc:f5:b6:8a:f3:c3:89:c2:98:36:b3:e7:66:d3:20:b6:76:
f2:e1:e7:e1:fa:c1:a9:02:11:da:db:22:16:dc:b5:e0:af:59:
9c:cf:05:97:13:30:bb:ab:bf:82:cd:5e:02:2e:42:81:15:f1:
85:3b:de:29:9a:c8:e0:ee:ea:0b:00:38:0d:99:fb:7c:ca:f8:
78:c3:7d:dc:79:3b:1e:d9:35:22:e3:61:9b:7c:28:0f:0b:3f:
a0:26:f8:5d:86:6c:d1:0f:b7:4e:20:bc:c9:4a:a0:32:9a:c4:
b7:fb:d2:f4:37:43:d8:61:45:ce:d5:64:88:d6:4c:50:50:1b:
b1:a2:10:4e:b4:24:43:0c:89:de:a8:28:61:87:2a:37:24:ce:
fe:8d:8d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:41 2025 by rpki-client