Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa
File: 3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa (raw, json)
Hash identifier: eWXIiOaCOtS8yrUHLgPk6usk0v/j7vtKLU+yIOIB4iU=
Subject key identifier: 87:54:48:78:D3:42:08:B2:73:63:D0:E7:98:97:5A:1F:02:03:6C:58
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 367F1B3E58DDEB5017E1F27061027AB426D93B97
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa
Signing time: Mon 08 Apr 2024 20:06:52 +0000
ROA not before: Mon 08 Apr 2024 20:01:52 +0000
ROA not after: Mon 07 Apr 2025 20:06:52 +0000
asID: 262992
IP address blocks: 186.233.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7f:1b:3e:58:dd:eb:50:17:e1:f2:70:61:02:7a:b4:26:d9:3b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:01:52 2024 GMT
Not After : Apr 7 20:06:52 2025 GMT
Subject: CN=87544878D34208B27363D0E798975A1F02036C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:df:f0:b7:2e:90:4b:c9:6a:b6:ab:d3:8d:
9a:c2:71:4e:1b:c6:17:0f:f4:0e:9f:69:83:c1:eb:
61:f0:e9:f6:59:2c:3e:ff:71:f5:cf:e7:9d:99:00:
8c:28:b4:08:f6:92:9d:65:c7:13:a2:56:69:1d:60:
00:70:0f:eb:9e:c2:cb:78:65:f9:75:f4:de:af:13:
0a:e5:c7:c6:3f:17:17:09:6e:62:f7:2b:1f:28:0c:
76:75:06:66:4e:88:ac:1a:62:99:f4:16:87:d5:96:
5e:0a:35:82:09:1e:e6:ed:59:7b:46:72:ac:43:76:
67:41:b2:ad:18:78:cb:63:3d:c9:ef:b3:b1:9a:d6:
33:85:7e:6a:f8:ad:1d:82:17:57:3c:3d:86:02:e0:
a5:55:f3:67:ff:40:ab:2b:40:3a:ec:cf:45:63:ff:
4d:a4:7d:fa:e7:1d:f9:dd:d3:83:67:d2:16:64:f9:
63:68:e5:e9:dc:27:d3:be:96:40:58:cd:1f:98:f0:
95:8a:19:48:2f:2e:41:9c:73:9a:78:c7:73:60:4e:
ce:18:57:c3:8d:2e:f1:61:0e:7b:56:8b:1c:aa:76:
01:d3:29:eb:76:d0:cf:52:42:70:b2:6b:00:06:43:
9a:27:3e:78:a2:6d:2a:a7:6c:42:0f:c5:b4:0c:6a:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:54:48:78:D3:42:08:B2:73:63:D0:E7:98:97:5A:1F:02:03:6C:58
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.233.72.0/21
Signature Algorithm: sha256WithRSAEncryption
82:ff:f2:88:9a:a8:1e:e1:48:62:6e:06:55:59:39:39:c0:49:
f4:e8:b0:ec:d2:83:d4:dc:96:4d:f2:99:80:cc:38:5f:c0:c9:
38:cb:d0:3b:f3:16:31:88:bc:64:b1:7d:67:83:bd:1f:5e:9a:
54:a7:61:34:b0:9c:53:3d:98:bf:10:e8:ed:f1:93:7c:ea:74:
b7:42:1f:8e:8d:e4:84:f2:0f:80:88:99:82:86:19:0e:21:d1:
1c:10:29:9b:85:d9:37:d6:cf:62:1d:20:b7:de:5f:b9:74:0e:
5d:17:74:c3:7c:6c:d0:14:c9:2d:d7:9d:37:97:f1:4f:92:9f:
14:79:4c:7e:83:d4:a0:58:96:6f:ce:04:93:14:7b:c5:bc:a3:
43:4e:e3:1a:81:bc:af:8f:b8:3d:2d:bf:ca:ab:8a:4c:55:e8:
47:46:29:2b:28:d3:a3:ba:f2:68:18:ea:58:c5:fa:a3:68:12:
d1:52:cd:36:8b:27:9f:b5:9a:ea:be:b2:50:d9:7c:69:08:ed:
0d:e9:12:7f:1a:7f:dd:43:f2:f4:76:d6:ec:9f:8f:85:2d:b9:
b7:bb:62:b4:e2:96:2d:5e:59:d2:65:47:fe:eb:82:cc:60:d2:
5e:43:cb:56:10:63:e7:0d:f6:83:56:93:b4:27:f3:f0:20:bc:
26:e9:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:55 2025 by rpki-client