Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa
File: 3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: gOnifVOpgar2KDcHi+gre9gZ+D3OBdCkh5g3vslTw6g=
Subject key identifier: BB:31:0F:76:52:01:19:F7:CA:74:FD:4C:81:08:E3:CC:73:BA:39:E6
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 37CA590C871DD5759F98D2B717DAA1B75B9665A9
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa
Signing time: Thu 07 Nov 2024 20:40:14 +0000
ROA not before: Thu 07 Nov 2024 20:35:14 +0000
ROA not after: Thu 06 Nov 2025 20:40:14 +0000
asID: 28220
IP address blocks: 187.110.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ca:59:0c:87:1d:d5:75:9f:98:d2:b7:17:da:a1:b7:5b:96:65:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:14 2024 GMT
Not After : Nov 6 20:40:14 2025 GMT
Subject: CN=BB310F76520119F7CA74FD4C8108E3CC73BA39E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:39:ed:63:9a:74:bc:60:81:aa:d4:1b:05:
26:3b:1d:9c:98:7e:fc:31:41:d1:37:2c:df:e1:71:
71:5e:e6:e9:90:f5:72:24:c9:66:96:93:d4:bc:b0:
67:f5:ad:be:67:d6:bf:c5:07:51:f8:09:6e:87:51:
e8:21:ba:fc:ad:63:33:83:bb:d7:73:45:e5:e6:03:
6c:47:0a:b9:18:47:d6:cb:87:9e:1c:7c:5f:71:34:
ea:c5:7e:b8:30:4b:4d:a7:d5:9c:ca:62:7c:e2:2d:
40:07:98:ee:65:76:27:c4:f3:80:d9:6c:3a:4d:2b:
63:64:87:30:d1:0a:4d:5b:1d:59:21:8d:c9:d4:52:
5e:a4:85:56:c2:c3:5a:d7:4b:02:a9:9b:50:ea:57:
9c:46:84:05:94:63:01:cc:f9:36:5f:d3:18:15:7a:
ff:72:6b:ca:16:b7:82:f4:d1:5d:83:c5:15:fa:24:
e7:8a:21:14:ab:12:fd:5d:b1:b5:ee:69:e6:32:ba:
6c:dc:f8:df:0b:a9:65:f2:cc:f2:5a:5e:17:3f:0d:
c5:4b:35:5f:83:c5:4b:c0:68:bb:f9:0b:a8:f5:a3:
cb:27:c6:94:7d:c4:7b:21:75:1c:60:c8:b7:98:05:
ac:59:ff:3f:0f:2d:dc:25:18:ff:60:20:e6:32:a6:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:31:0F:76:52:01:19:F7:CA:74:FD:4C:81:08:E3:CC:73:BA:39:E6
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.110.208.0/24
Signature Algorithm: sha256WithRSAEncryption
66:11:1d:fc:11:8e:c3:5c:57:d1:bc:c2:25:f9:82:c9:a6:1b:
59:a2:6f:d5:d8:6c:98:6a:1c:45:c4:83:2c:03:96:cd:f8:7e:
e4:42:5d:4f:64:a2:46:6c:48:2e:6f:45:26:68:00:13:c5:6f:
82:01:df:fd:8f:6b:5a:92:c8:11:27:e8:34:4a:1a:73:69:ec:
9c:b8:dc:2b:10:14:d1:1f:e8:fb:3e:c8:14:bb:d6:68:35:d3:
1b:11:27:8f:23:3a:1f:c1:c9:9f:d4:2e:6c:1c:6f:05:f1:e2:
5a:81:cc:69:bc:92:2f:51:d2:d7:41:9a:e5:68:e3:22:1c:9f:
32:b6:b0:b1:12:a4:46:b2:96:a2:71:c0:fd:ba:a1:e7:aa:b9:
7e:b0:4c:a6:f1:30:f3:e5:b6:17:b3:db:0f:b7:aa:0f:b1:a7:
62:30:ea:b9:20:64:ad:51:02:ac:fe:89:7b:7b:b5:15:73:a0:
a2:88:dc:f0:29:6e:9e:02:19:74:47:c1:c1:ac:ff:b3:a3:33:
98:10:9d:2f:d3:b2:6f:16:c7:c4:10:f5:44:83:19:2d:59:79:
d4:29:e7:5f:8d:dd:1a:3e:6d:51:89:5f:89:90:75:ff:3f:f6:
be:cf:55:17:96:11:9b:7f:23:5a:db:d3:89:00:1a:db:9a:30:
95:80:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org