Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3233332e37322e302f32312d3231203d3e203238323730.roa
File: 3138362e3233332e37322e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier: eHkVT4LiyrDh80q5yFQduqG7c5TbkqLF5eFbqOUj6OI=
Subject key identifier: D3:91:65:28:9E:4A:F3:C2:3D:19:E8:33:3B:93:55:75:CC:B1:CF:7A
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 0D1D1A2D9AAEFB03CB581AAB4B70437C8978FA29
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3233332e37322e302f32312d3231203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:11 +0000
ROA not before: Thu 07 Nov 2024 20:35:11 +0000
ROA not after: Thu 06 Nov 2025 20:40:11 +0000
asID: 28270
IP address blocks: 186.233.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:1d:1a:2d:9a:ae:fb:03:cb:58:1a:ab:4b:70:43:7c:89:78:fa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:11 2024 GMT
Not After : Nov 6 20:40:11 2025 GMT
Subject: CN=D39165289E4AF3C23D19E8333B935575CCB1CF7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:44:dd:25:59:4a:1b:6e:66:ed:1d:02:04:
98:b4:d8:b4:d9:8f:c0:19:c9:ce:dc:f4:84:a9:15:
3a:07:5a:91:04:ac:54:6b:ee:f2:c3:7f:9d:b5:2f:
89:84:91:12:61:94:92:d3:6a:7f:7b:fb:af:11:61:
d3:ad:1f:42:de:df:cc:36:e3:4c:fe:9f:84:37:ef:
e9:b0:5a:b5:21:01:b4:53:69:cb:2c:39:06:11:5a:
b7:2d:7b:52:00:6f:cd:a3:32:a3:8f:0b:88:b5:8a:
2b:42:4c:8e:95:94:87:98:7c:9c:a9:06:1e:38:9d:
47:21:b4:63:83:22:7d:f6:67:f2:11:e2:f1:7d:a3:
63:11:35:15:f0:47:c4:1c:e8:9f:cc:9f:f1:0d:80:
6c:71:de:83:f9:33:d5:ea:d6:05:3f:cd:be:da:85:
b6:dd:e3:16:f4:c1:28:56:cf:b2:83:ca:dd:f5:1d:
e1:ab:fa:8b:91:02:4d:38:0c:35:7c:5f:26:25:43:
de:52:41:93:8a:5e:be:af:06:c5:26:d7:25:91:e8:
1b:52:88:43:ff:f0:92:b3:f5:c4:4f:d2:1e:a7:e2:
8a:6a:91:33:9c:f4:2f:8c:91:ef:ef:fb:b2:3c:aa:
3e:73:58:03:4b:01:77:e4:7d:1f:41:50:2b:c0:4e:
b4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:91:65:28:9E:4A:F3:C2:3D:19:E8:33:3B:93:55:75:CC:B1:CF:7A
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3233332e37322e302f32312d3231203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.233.72.0/21
Signature Algorithm: sha256WithRSAEncryption
33:34:8d:a2:d4:8f:6e:cc:ec:6f:47:21:13:a2:5c:61:d1:f2:
68:3a:a8:11:af:8e:32:87:30:7e:21:13:5f:1a:22:72:a2:19:
8b:0e:ed:48:5b:37:30:a0:2c:f2:24:15:30:34:d3:cb:63:cd:
47:0e:16:95:c2:a2:33:e1:d6:4c:f2:98:bd:fe:19:87:e6:ae:
f1:ac:35:ce:f2:33:64:10:78:1d:a1:26:55:13:fc:c8:c5:0b:
91:62:48:2e:4b:3a:3d:86:fe:6b:6f:f5:86:e4:ee:85:46:86:
8a:fa:dd:87:fe:63:3a:6f:0f:41:1f:54:7f:e0:c9:52:aa:4b:
6a:2f:43:92:80:29:e7:31:3e:45:72:48:9b:27:89:38:82:0c:
02:60:ba:26:27:5e:5d:51:39:52:ce:d8:38:77:1c:1c:61:3d:
7e:ac:03:92:4a:da:b1:34:fa:a1:24:6c:7b:97:53:5c:12:c3:
9f:58:96:86:9c:79:47:b0:28:61:b8:ec:2e:c4:b0:40:bc:49:
64:3e:98:d2:16:2f:46:1e:89:c6:d7:d2:0c:5a:1c:a8:f7:59:
45:8c:11:ba:87:b7:3d:4d:a4:d1:06:6d:f2:d5:64:6c:5b:19:
be:ea:98:1b:e2:55:2f:aa:22:a6:d1:59:c3:fa:5a:ee:ce:53:
20:77:ce:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org