Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa
File: 3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier: EJJgyKoLPj2xojkIyer5c7ZCMCUBWw4YAm7KBrdVDaM=
Subject key identifier: 5F:1C:0A:36:B6:BF:63:08:9A:BD:BD:1C:A2:40:12:2B:F4:39:DA:5C
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 5F5624CD9CE5879B4B57023564BC8E3EBDE8EE7C
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 28270
IP address blocks: 186.219.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:56:24:cd:9c:e5:87:9b:4b:57:02:35:64:bc:8e:3e:bd:e8:ee:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=5F1C0A36B6BF63089ABDBD1CA240122BF439DA5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:ff:19:56:88:30:b6:7d:a9:6c:fe:db:c7:
e6:fc:0a:ed:32:e9:05:ce:20:3a:47:64:39:9b:96:
4e:54:fc:0c:88:03:65:60:51:15:88:3b:88:40:0b:
ea:82:02:17:fe:f7:ef:25:aa:68:c9:b9:c5:1b:94:
f6:9b:31:fe:52:3c:f9:3e:3b:44:e2:3a:32:1d:43:
52:49:10:af:58:a6:e7:f1:92:6d:25:b3:d8:ed:46:
d1:80:e3:75:ec:8a:f2:1b:b2:dd:74:d1:71:20:ec:
1f:6f:35:70:05:78:49:63:fe:56:16:07:08:3e:31:
08:3e:b8:cc:44:cc:d1:34:8f:97:7f:73:d4:a9:c3:
72:a6:12:46:aa:01:c8:00:18:ee:7a:a8:c7:c7:47:
48:64:f6:e1:bd:bc:94:6d:9b:ca:13:2d:c1:ab:a7:
6e:54:d1:a7:4c:04:59:94:8e:46:1d:f9:de:be:93:
1a:d3:e1:e3:32:3b:97:bb:62:79:a1:66:5c:39:f7:
5d:d8:4c:a0:4b:bd:90:7b:20:4c:ee:dc:ff:c7:1d:
32:8e:b4:f7:fa:68:47:55:8b:77:53:0a:85:54:7c:
28:f5:bf:cf:a6:ab:e5:61:b8:ab:f1:27:3f:13:21:
2a:1e:b0:e7:e1:41:fc:1f:78:05:60:d7:14:9c:ec:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1C:0A:36:B6:BF:63:08:9A:BD:BD:1C:A2:40:12:2B:F4:39:DA:5C
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.219.152.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:62:b6:1c:e5:ce:29:f7:59:eb:33:3e:92:1b:7a:ef:73:e5:
22:76:3d:92:21:d2:f7:1e:3d:ba:cb:19:de:73:5c:f5:ec:b3:
3a:cc:13:f3:3e:d3:5e:02:41:ed:ac:93:a4:b5:21:76:9f:b1:
90:f3:e3:4c:77:20:2f:75:80:b2:f5:5e:6d:96:5c:a9:ba:9b:
cc:c1:36:d6:27:26:f7:3c:24:72:5b:b4:70:ee:f7:07:1c:87:
4c:18:b9:c3:b2:06:97:66:53:88:d8:31:a1:dd:f2:22:f2:7f:
83:cf:2c:1f:4d:e3:a5:33:79:6c:96:96:c3:ed:82:31:bd:01:
72:46:0c:bf:4e:7b:c4:bc:e6:fa:1a:c0:af:60:ca:85:75:61:
97:fb:eb:89:ad:be:21:60:eb:82:74:b3:77:30:12:62:50:2b:
0b:c5:d7:cc:f4:9c:3d:5f:97:91:21:cf:ec:39:91:9f:d0:2a:
54:6f:0a:a4:a7:4e:d4:01:7b:1f:7f:31:ef:37:16:53:cb:0f:
3b:99:1b:09:7f:54:7a:42:1b:63:3e:6c:58:85:48:bf:88:11:
a1:9e:2a:3b:88:51:e9:12:10:5c:23:23:66:25:cb:54:cf:89:
2c:de:1d:84:64:64:88:71:8b:33:99:22:8d:67:01:cd:b3:e3:
b1:95:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org