Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134392e302f32342d3234203d3e203238323730.roa
File: 3138362e3231392e3134392e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: HaDkFIY+6QYpFAixLbYfnusb7nOaBl31kbdhkDzJCI4=
Subject key identifier: 53:13:01:9C:D4:2D:91:DA:E3:76:E6:A8:74:0A:8C:3B:20:8E:F3:0F
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 41C5743F27B658D8A3913DFEAF599CB96BAC0EB2
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134392e302f32342d3234203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 28270
IP address blocks: 186.219.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c5:74:3f:27:b6:58:d8:a3:91:3d:fe:af:59:9c:b9:6b:ac:0e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=5313019CD42D91DAE376E6A8740A8C3B208EF30F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:cc:66:87:7f:63:6b:a0:34:de:f1:16:1a:
90:59:85:3c:7f:8a:e7:99:be:ee:76:0b:5f:3c:97:
54:33:69:d6:0a:ac:78:05:cc:10:87:60:ce:97:32:
f9:8a:84:f5:3d:cf:25:07:ad:21:44:0b:14:47:b0:
db:36:ed:39:cb:4f:53:0e:1d:65:68:1d:7f:2b:72:
b2:a3:bc:63:c0:6f:82:ce:fd:cd:63:f8:98:f4:d4:
6b:a9:bc:20:6a:d5:11:38:b0:5a:18:25:75:8d:89:
90:d3:7f:64:e1:ae:6d:40:0e:e3:50:b6:51:3c:85:
54:dc:a2:b7:ce:fd:51:05:9d:cd:8d:51:81:5e:0e:
b8:76:36:29:67:ae:c0:68:87:e8:49:9b:24:55:6a:
b8:16:c3:67:6b:4e:36:85:d3:59:f3:15:a9:89:9d:
82:24:55:fd:aa:27:b9:68:be:11:05:3c:b6:2f:44:
12:34:20:76:a2:35:55:55:1b:c1:6f:94:e0:73:87:
5b:1e:6b:22:9a:1e:6f:d8:6a:17:d4:33:e5:ea:43:
56:71:8e:a5:64:70:94:bf:5f:19:e0:bb:3d:e4:3c:
b3:1f:1c:4a:45:db:1f:2a:65:c4:af:7f:41:ee:20:
9e:be:b1:79:d0:96:70:49:bb:51:08:40:3c:f6:e2:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:13:01:9C:D4:2D:91:DA:E3:76:E6:A8:74:0A:8C:3B:20:8E:F3:0F
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134392e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.219.149.0/24
Signature Algorithm: sha256WithRSAEncryption
22:88:11:cb:f3:73:7f:03:b8:fb:65:35:3c:6c:2f:3b:a6:cc:
10:57:0e:72:25:76:62:90:34:2f:44:54:ac:86:f9:a8:38:b8:
65:5b:21:73:a8:0d:1f:67:e2:c8:db:1c:6a:3f:11:66:59:83:
ea:f6:5c:7b:20:5c:da:b8:0c:96:68:17:7e:d7:a9:85:65:6a:
18:9d:47:64:27:6b:b7:f2:81:2c:5e:4e:7a:88:52:a6:57:96:
c9:48:46:04:0d:d8:09:14:8c:7a:81:14:95:0a:8d:6d:74:de:
9c:80:ad:9a:41:67:06:8c:e9:70:54:ce:be:5c:f1:0a:68:42:
a3:1a:8d:13:52:89:e8:1c:92:f6:1d:60:e2:49:01:bf:a5:d4:
5d:7c:8f:ec:1a:31:23:36:af:08:6d:fc:45:4d:80:c7:2d:4c:
37:7e:0d:a8:0e:0c:f1:ff:fd:3f:68:8c:0f:0c:56:e3:8e:98:
f4:d1:08:3d:f3:bb:16:b8:98:d4:34:ad:50:c4:ce:d6:1a:29:
ce:42:c9:c3:6d:55:60:42:2f:de:68:f2:33:ed:56:d4:b9:ba:
c4:c8:1f:6b:ae:fc:22:3a:29:c9:60:1e:42:ee:ca:44:15:0a:
ce:c0:ff:7e:ea:6a:84:2d:06:f0:5a:e2:94:36:7d:a2:a7:90:
53:e2:8f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:35 2025 by rpki-client