Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3130382e39362e302f32302d3230203d3e203238323730.roa
File: 3138372e3130382e39362e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier: nX/1Gc4OHkqFYM5ncdCG7/xQ4aAXP5HP8hCJ2ipuWXc=
Subject key identifier: D0:80:97:63:F1:C0:E7:38:44:A0:F7:3E:CE:ED:D5:EC:4B:90:62:71
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 049AC0530B4D605AF9ADB6ED48D11960A112440D
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3130382e39362e302f32302d3230203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:11 +0000
ROA not before: Thu 07 Nov 2024 20:35:11 +0000
ROA not after: Thu 06 Nov 2025 20:40:11 +0000
asID: 28270
IP address blocks: 187.108.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:9a:c0:53:0b:4d:60:5a:f9:ad:b6:ed:48:d1:19:60:a1:12:44:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:11 2024 GMT
Not After : Nov 6 20:40:11 2025 GMT
Subject: CN=D0809763F1C0E73844A0F73ECEEDD5EC4B906271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:38:c6:48:d1:dc:7d:79:82:ca:96:29:3e:d7:
63:7d:27:f1:86:52:dd:d4:fc:51:94:84:a3:f7:af:
38:d7:58:d0:c6:72:65:66:7e:74:8d:b5:b4:7a:71:
a5:84:3a:db:ac:dc:ef:dc:19:b3:85:a7:2e:7f:4e:
4b:ab:5e:1e:89:69:b2:1a:2f:d9:c0:6b:e8:32:3e:
72:6d:0e:f5:12:83:85:f9:b6:4c:a2:b0:5d:80:10:
aa:cd:54:83:b1:ab:57:41:02:fe:66:26:26:4c:e8:
ef:b8:da:61:62:ae:34:67:cd:0c:25:53:3d:c0:ce:
80:1d:94:4c:08:03:28:ed:65:4a:51:ae:81:24:ab:
09:9c:58:f2:3b:d8:5f:b7:bd:07:87:29:fb:6d:13:
9b:1e:5c:ce:39:ee:54:e4:68:96:74:28:67:ad:2a:
99:13:38:bc:bc:fd:53:09:e5:03:4b:6b:7d:0f:95:
19:21:40:81:18:03:73:14:28:d9:31:e7:eb:1d:78:
93:af:3b:c1:d0:d0:5b:70:9c:ae:01:bf:df:78:4b:
d4:bb:fb:c2:18:c5:fe:cd:b7:f9:b5:34:d5:4a:40:
9f:c1:b6:c9:46:89:0b:45:17:fe:21:a1:5c:6f:3f:
05:d8:93:44:24:70:9b:ed:c0:4b:aa:35:19:27:a0:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:80:97:63:F1:C0:E7:38:44:A0:F7:3E:CE:ED:D5:EC:4B:90:62:71
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3130382e39362e302f32302d3230203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.108.96.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:b4:4d:1a:41:3f:e0:d9:cb:98:ea:69:68:51:44:f6:0d:f5:
af:9b:ca:46:e6:19:77:1b:63:4d:69:a7:ce:6b:38:dc:a5:b5:
19:99:78:ec:8c:98:36:0f:47:7d:35:12:c7:69:28:5a:55:14:
58:be:b6:ec:40:57:77:ae:49:68:b9:19:70:36:1a:8a:7e:ca:
3d:fe:e7:6e:fd:7c:5a:9f:83:7c:02:9f:56:af:a1:52:8c:2a:
ad:a4:09:e0:24:4a:06:76:52:3d:c1:d7:8b:33:23:4e:14:89:
2d:eb:64:2a:86:0d:e4:0e:f2:bf:2b:65:2e:d5:c5:a1:1b:17:
3f:3b:72:3c:b2:70:17:d8:5f:65:d9:9b:e8:22:e0:8b:02:6b:
a1:25:4f:69:b6:cf:85:2b:d0:bc:25:db:66:e3:13:ed:42:23:
af:d3:8b:41:2d:25:0f:d2:03:71:9c:1b:a3:c2:5e:06:ae:5f:
76:d2:33:80:3a:5c:b2:81:8a:e9:42:79:33:53:2e:b7:24:68:
70:c8:0e:0b:4f:80:70:c0:1c:a6:dd:cd:a2:c7:98:98:e1:80:
8f:10:ba:2d:7a:53:4b:b5:2f:ee:03:40:04:e7:3f:d3:6c:e5:
64:c9:9d:1b:4b:77:13:d7:02:03:2c:ab:37:20:ee:36:97:13:
37:4c:9a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:09:55 2025 by rpki-client