Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3130382e3131312e302f32342d3234203d3e203238323730.roa
File: 3138372e3130382e3131312e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: K0YcRSzQ13vdmCRe+ulHFa/C8J7QCd3iYM1BpkNup1Q=
Subject key identifier: A5:EC:A9:39:12:2B:C9:F1:C6:EF:9D:39:4F:98:70:6A:0D:EA:CA:D1
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 0B929801426858E7DD0A4A1FD412433DDA787401
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3130382e3131312e302f32342d3234203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:50 +0000
ROA not before: Mon 14 Oct 2024 01:44:50 +0000
ROA not after: Mon 13 Oct 2025 01:49:50 +0000
asID: 28270
IP address blocks: 187.108.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:92:98:01:42:68:58:e7:dd:0a:4a:1f:d4:12:43:3d:da:78:74:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:50 2024 GMT
Not After : Oct 13 01:49:50 2025 GMT
Subject: CN=A5ECA939122BC9F1C6EF9D394F98706A0DEACAD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:18:27:28:0b:2e:ff:df:2a:4f:a2:75:c3:
a1:fc:bc:7d:f9:7c:1e:16:4c:cc:bc:64:16:b4:89:
0c:63:f6:09:26:41:0a:1d:8e:51:3c:3d:6b:9d:33:
fb:fd:5d:33:9b:51:47:bc:a7:4c:ae:a4:58:18:c9:
47:35:cc:16:4d:af:8d:f4:b3:fb:c1:85:db:67:0e:
ce:0e:39:2f:88:57:34:7e:86:43:2b:47:90:af:05:
6e:d4:a2:1f:12:77:a2:15:0d:d4:91:04:dd:26:d6:
57:83:3d:3d:e4:87:9c:a3:8f:be:e9:45:78:6d:9e:
c4:59:34:e2:20:c6:5e:4e:e8:95:de:55:61:6d:81:
83:3a:79:cf:8e:8e:a7:fe:3e:4d:19:fd:bd:8a:40:
e4:2c:a5:19:94:07:e2:28:76:b3:39:f1:ef:e6:bf:
9c:4a:a0:b8:a8:db:c1:a4:9f:60:20:9a:90:e5:4e:
57:93:03:c1:66:04:14:24:4e:a5:35:17:b2:38:ec:
b6:b2:50:a5:a8:45:ff:20:32:7c:64:60:50:65:b2:
16:4c:9c:f2:0d:98:a3:fa:62:50:e4:c7:df:8e:59:
52:4b:8f:33:34:c6:5a:97:77:67:51:85:46:b0:2e:
08:6a:6d:94:9f:6b:62:5a:ff:54:87:05:ee:c5:b4:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EC:A9:39:12:2B:C9:F1:C6:EF:9D:39:4F:98:70:6A:0D:EA:CA:D1
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3130382e3131312e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.108.111.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f9:e1:1e:ff:6e:01:67:ea:1b:d4:a9:be:1c:e3:1e:f0:0b:
c7:31:f1:a2:3b:ce:ae:2f:fc:a4:27:f3:49:4c:37:1e:7f:0f:
f9:12:df:0c:72:0e:2d:88:85:d7:58:d0:e3:4d:d9:06:bc:32:
c1:f5:e6:0e:c7:d0:f2:2a:e7:6e:4f:e3:66:9b:99:a5:c5:9b:
2b:23:6f:79:00:86:32:d2:13:9c:29:77:ee:2b:7a:c2:9a:70:
f4:8e:51:34:6d:80:3b:48:4d:ec:0a:a1:7b:ef:3e:77:43:86:
7d:68:b8:0d:92:7a:31:12:6b:07:66:61:d6:85:e6:4a:ff:df:
1d:ff:ec:5b:ca:38:03:64:79:fc:37:ee:31:50:ca:41:cc:40:
b9:4d:4d:f2:a9:4f:1f:1e:80:2c:3d:8c:3b:8a:9a:b9:c9:39:
f4:9a:89:85:1b:c1:1b:6a:04:32:2f:62:5f:d5:8f:03:72:d6:
30:4e:7d:5e:b0:9a:3e:19:4e:b2:6b:99:3a:0e:79:d9:69:90:
4f:65:47:88:aa:4a:40:5d:ec:0d:6e:b7:91:8b:98:6d:18:65:
39:f5:d0:f7:a9:86:7c:bd:50:7f:e3:28:da:ee:fe:be:b9:f2:
e8:e3:c5:92:bf:3f:be:cd:40:43:9b:15:44:7c:ac:f1:fa:d2:
0f:1e:b0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:55 2025 by rpki-client