Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323730.roa
File: 3138372e3131302e3230382e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier: QqNbDUVp7yS+pKX1zo4XGsZUGNzhG7bhVlkH8Xrveqo=
Subject key identifier: 9A:C2:FC:B4:03:57:BC:CE:4B:8D:45:BB:0A:89:F2:2B:AF:27:2A:97
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 255639E852261F81F7F3688085CC483DD43F7AFB
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:16 +0000
ROA not before: Thu 07 Nov 2024 20:35:16 +0000
ROA not after: Thu 06 Nov 2025 20:40:16 +0000
asID: 28270
IP address blocks: 187.110.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:56:39:e8:52:26:1f:81:f7:f3:68:80:85:cc:48:3d:d4:3f:7a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:16 2024 GMT
Not After : Nov 6 20:40:16 2025 GMT
Subject: CN=9AC2FCB40357BCCE4B8D45BB0A89F22BAF272A97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:26:80:30:9a:85:1f:e1:5b:90:5e:99:03:
d8:53:ba:5e:3e:f1:64:36:a1:07:d6:ed:f2:96:56:
88:70:56:e3:7b:50:2a:ae:87:dd:fa:81:58:4b:70:
47:82:64:1f:f4:8b:db:f3:19:c5:9d:dd:b7:ef:8f:
6f:9f:00:0f:af:ac:65:aa:3e:69:1d:7f:b4:a9:59:
25:27:af:84:a2:fa:86:43:de:db:eb:cf:22:50:28:
52:1c:eb:63:8f:58:05:93:04:90:15:eb:92:98:27:
33:e3:10:af:d4:a7:75:26:88:12:03:80:f5:6c:f4:
74:f4:15:26:ad:1c:1d:9b:2a:59:0a:c4:5b:bb:ae:
81:be:09:00:a6:0d:f0:2e:a7:c2:e7:7f:a0:32:39:
23:38:9a:db:0f:73:34:46:00:0a:45:39:3e:95:70:
dc:2b:af:6a:5c:6b:8f:d9:c0:16:c9:ad:69:35:69:
cd:8d:48:1b:af:c5:6c:eb:3f:c9:2c:ad:2e:b0:22:
97:b3:15:48:f2:bf:20:5a:94:67:54:9b:c2:eb:26:
60:ff:15:ea:f8:bc:3e:d6:46:c4:04:39:ba:46:d8:
5d:73:0a:af:a6:70:c2:87:e8:eb:a2:f1:e0:b6:8d:
a1:9c:fd:00:40:42:2b:dd:15:6f:c7:4c:cf:97:28:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C2:FC:B4:03:57:BC:CE:4B:8D:45:BB:0A:89:F2:2B:AF:27:2A:97
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.110.208.0/20
Signature Algorithm: sha256WithRSAEncryption
09:02:06:af:8c:9d:32:f9:16:09:d6:55:b5:77:30:75:45:d1:
36:cc:7b:2d:57:c9:fc:6c:78:42:5e:81:3f:da:7b:81:3d:cf:
76:e2:12:6c:20:ae:5d:de:36:39:3d:be:3a:1f:2c:e4:97:e8:
37:25:3a:13:71:ec:14:55:5b:d5:47:73:d3:9d:d7:e6:a5:16:
76:7d:ad:9b:11:ca:94:e8:06:ab:fd:b6:20:c2:31:74:0c:3b:
90:65:b7:fd:60:d1:6a:e2:39:73:44:b5:78:35:5a:fb:8d:5e:
c7:07:07:1c:08:7a:fb:ef:7c:03:8c:1f:71:74:d2:2b:e6:63:
72:98:d9:36:ac:89:77:9f:12:2f:83:eb:89:c5:fe:3a:13:1e:
be:22:35:11:62:21:e0:52:60:ed:cc:72:89:a8:2d:32:63:41:
53:8e:1b:de:93:c3:62:60:7b:e5:39:84:88:dc:a0:b1:f4:45:
21:f0:25:63:bb:39:88:65:d9:25:e2:8f:15:d9:fa:9b:95:f0:
6b:fc:e7:75:ee:1a:2a:2a:87:50:da:42:f3:af:07:cd:05:9b:
89:62:9d:8a:6c:5b:3b:5e:fd:61:ee:23:95:13:e2:fe:2d:a7:
62:1a:88:b5:a3:ff:70:6d:1d:c1:29:3a:91:dc:b2:59:92:57:
8c:57:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org