Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
File: 3138372e31382e3132382e302f31372d3137203d3e203238323730.roa (raw, json)
Hash identifier: k9hfahXt4Bj90lXsVKtIKpDIhTyakewYfUERZyZ29wI=
Subject key identifier: D5:1A:87:15:5D:DF:57:65:3A:BF:18:E3:E8:1B:5E:F8:FA:BC:26:A1
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 0218985362143CF2ED7F710DF1D7E23C15849C00
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:06:59 +0000
ROA not before: Mon 08 Apr 2024 20:01:59 +0000
ROA not after: Mon 07 Apr 2025 20:06:59 +0000
asID: 28270
IP address blocks: 187.18.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:18:98:53:62:14:3c:f2:ed:7f:71:0d:f1:d7:e2:3c:15:84:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:01:59 2024 GMT
Not After : Apr 7 20:06:59 2025 GMT
Subject: CN=D51A87155DDF57653ABF18E3E81B5EF8FABC26A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:5d:47:28:49:cb:15:aa:72:3b:7f:33:5c:
89:1c:25:0f:eb:f0:b9:97:55:9a:61:8c:29:12:dd:
39:94:d0:24:cb:d6:39:41:a4:a4:10:98:d0:eb:ce:
4f:31:a0:e0:55:32:08:64:77:7f:40:ad:17:f7:64:
73:12:13:99:86:48:3c:67:64:c3:4e:c3:d6:de:0a:
79:b4:8d:3c:7a:0d:f5:1c:5b:e9:37:1f:f1:ca:c4:
50:6b:f8:27:c0:cf:ad:0c:21:cb:fd:e3:79:b0:c7:
c8:69:d9:33:96:85:39:c3:2b:3c:fc:e1:be:ed:6c:
7f:ae:0f:cb:bc:2d:f5:b2:14:e0:8d:88:eb:8e:32:
9a:e8:7e:93:20:bc:09:43:2a:8d:39:b6:5e:23:e0:
78:bf:db:13:ac:95:af:2a:0f:59:a0:71:1d:81:ff:
9e:d6:37:fb:f9:da:e1:7c:8c:b5:d5:a5:0e:98:1d:
31:9e:ec:c4:af:9d:26:05:59:61:f7:ff:be:18:15:
52:5b:d2:7c:4d:df:af:93:52:4c:c6:7f:90:9e:e4:
65:9f:d2:49:f0:fc:5e:30:fa:9c:5a:31:1d:85:32:
23:9e:94:c9:6b:0a:59:e8:e0:d0:31:64:08:25:49:
87:aa:ec:6e:e0:91:70:9c:5b:a8:df:53:be:48:64:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1A:87:15:5D:DF:57:65:3A:BF:18:E3:E8:1B:5E:F8:FA:BC:26:A1
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.18.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b9:14:a1:7e:34:b9:43:ef:f1:61:2c:ea:d1:db:22:26:5a:11:
c7:3d:7d:11:bf:91:93:48:d7:4c:40:ae:5b:96:11:5c:fb:83:
7b:23:ac:3e:63:ae:92:d0:ab:e0:4f:b5:8f:7c:cd:c6:a3:8e:
c3:17:27:21:8d:e2:33:63:3f:46:39:f8:98:fc:ca:29:93:50:
73:1b:a8:1b:00:09:53:10:be:f5:08:5a:ea:47:b2:14:ea:36:
60:cf:03:77:77:1e:17:dc:12:cf:46:84:b5:bd:5b:81:b4:f8:
ac:5f:04:ed:1b:26:fd:0c:52:d0:8f:97:98:fd:ca:2c:e6:5b:
f5:c6:f8:99:41:02:72:db:b8:47:94:52:a2:39:43:3e:ac:ca:
5a:9c:fd:4a:47:c0:d6:ad:c0:ce:4d:16:1f:c6:4f:78:3c:95:
41:78:04:97:08:b6:d7:64:97:67:96:4b:dd:04:66:8c:b0:e7:
4e:71:f6:0e:92:15:3e:c6:41:bc:7d:7c:4c:65:d1:64:39:41:
c0:8e:19:44:76:db:0a:31:65:d5:2c:39:da:88:d6:6b:6b:e1:
0e:2f:de:af:67:ec:4e:f4:7e:1c:07:de:38:d1:90:13:47:5a:
63:1a:aa:75:ed:2b:38:06:24:4e:93:c0:b8:45:f2:bc:2d:82:
46:af:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:34 2025 by rpki-client