Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
File: 3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier: 9aA7Y2HL7uIkdok14bhPrbQBDGS2dtwqnBIr7fZVWrI=
Subject key identifier: 99:13:E5:09:70:61:F6:C1:7A:B3:52:2A:4D:52:95:5C:42:F4:17:71
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 10AF35FCEA21A6A09AABF0F1FD41A41E808BF2F4
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
Signing time: Thu 07 Nov 2024 20:40:11 +0000
ROA not before: Thu 07 Nov 2024 20:35:11 +0000
ROA not after: Thu 06 Nov 2025 20:40:11 +0000
asID: 28220
IP address blocks: 187.110.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:af:35:fc:ea:21:a6:a0:9a:ab:f0:f1:fd:41:a4:1e:80:8b:f2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:11 2024 GMT
Not After : Nov 6 20:40:11 2025 GMT
Subject: CN=9913E5097061F6C17AB3522A4D52955C42F41771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:e6:f9:d1:7e:e4:4e:bd:a8:c9:d4:4a:86:
84:02:19:55:be:b7:52:f7:e5:c2:aa:53:f9:5a:c2:
02:1b:ea:fc:e0:63:d5:bb:d8:20:ec:8c:7f:df:b4:
bf:9d:db:d6:39:6a:0b:1e:26:c7:16:9a:75:00:9d:
0d:76:33:00:7c:b7:0e:f1:e8:53:d6:7e:d1:94:f8:
fe:d0:e8:31:b2:73:a7:2d:f4:9e:d4:44:03:b1:f1:
ed:8c:9e:2f:17:d7:50:ab:6a:a2:92:68:dd:dc:f8:
f9:6a:49:f8:d9:c4:66:91:67:c0:ec:e8:16:aa:9b:
67:e5:9f:8a:c9:58:80:b1:7c:22:01:22:a6:9f:80:
d8:37:44:88:68:b2:61:ca:d8:94:72:88:9b:22:a7:
c7:c3:22:e7:8a:ed:2a:f3:e1:78:8a:fa:1e:48:52:
4b:5c:c4:66:72:7e:f7:6e:32:9a:ef:36:4d:52:db:
1e:21:47:c0:06:b1:91:b3:25:3e:7f:cd:ef:17:89:
03:00:81:3e:87:7a:27:9e:ff:13:6f:b6:15:12:61:
94:9c:6a:a7:8f:b8:ad:99:e1:e5:b9:15:ba:bc:de:
92:c5:09:94:10:b8:1e:de:27:6d:8b:a0:17:aa:69:
bf:d9:99:24:47:6b:91:aa:ce:04:82:28:34:11:be:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:13:E5:09:70:61:F6:C1:7A:B3:52:2A:4D:52:95:5C:42:F4:17:71
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.110.208.0/20
Signature Algorithm: sha256WithRSAEncryption
50:fd:d1:58:bf:5b:e2:69:4e:0a:ec:e2:59:5e:c1:c4:68:26:
e7:32:ea:2f:ee:db:a5:55:e8:e5:c6:7f:bf:32:05:b7:0c:20:
7a:58:47:5f:ee:b6:7c:48:50:1b:a3:b1:50:d5:a8:cb:8e:c1:
25:3a:98:30:2f:df:7b:2d:a7:c1:e1:00:ad:4d:e4:fd:b8:1c:
64:05:2e:17:7e:62:a4:a7:2c:45:a3:c2:08:a6:a8:8b:55:13:
85:96:d2:29:eb:af:53:b0:70:78:c6:d0:7a:c4:d1:43:e5:89:
de:9d:6b:b6:5d:ea:a3:1d:aa:2b:84:db:62:66:44:97:76:c1:
1a:4b:93:b3:6d:37:91:07:1d:ad:5a:91:68:62:4b:f3:92:e5:
3b:98:b4:73:40:3f:cd:e5:8f:5c:fc:1e:03:2a:29:9a:b5:3b:
11:31:ca:0b:2b:21:ff:26:7f:50:aa:77:0b:12:7a:7d:99:4a:
18:ad:61:ab:7b:2e:d4:3f:68:2a:46:5c:aa:0f:06:17:56:4b:
c1:40:b8:02:c6:27:94:ac:41:65:21:60:2c:88:fe:bb:b0:10:
f4:44:0c:c5:26:8e:bb:9e:ed:22:10:53:16:a5:0c:8f:4c:95:
9e:24:85:b7:00:a5:b3:ce:63:4d:18:52:09:35:c9:f5:9b:dc:
0f:c8:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org