Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36382e302f32332d3233203d3e20323632373430.roa
File: 3138362e3230382e36382e302f32332d3233203d3e20323632373430.roa (raw, json)
Hash identifier: N6D992F7TC9pHsQFne3CbvFq2wZf+iHmK7bsyr3ToRU=
Subject key identifier: 8B:35:5E:7B:BC:20:D3:9F:1D:42:51:10:D7:F7:35:8D:AF:39:AC:E8
Certificate issuer: /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial: 22ED6E8B03C0DA2A36CAF224CF80CC7E9202DF44
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36382e302f32332d3233203d3e20323632373430.roa
Signing time: Mon 23 Sep 2024 20:54:55 +0000
ROA not before: Mon 23 Sep 2024 20:49:55 +0000
ROA not after: Mon 22 Sep 2025 20:54:55 +0000
asID: 262740
IP address blocks: 186.208.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ed:6e:8b:03:c0:da:2a:36:ca:f2:24:cf:80:cc:7e:92:02:df:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Validity
Not Before: Sep 23 20:49:55 2024 GMT
Not After : Sep 22 20:54:55 2025 GMT
Subject: CN=8B355E7BBC20D39F1D425110D7F7358DAF39ACE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:61:2f:37:32:9d:ba:e3:dc:28:4d:14:79:
dc:f8:20:11:46:f8:5a:21:c7:4e:95:51:a6:08:03:
71:d8:ea:99:03:b3:9b:80:a3:fb:5a:3a:c5:9e:a5:
2a:be:ca:5b:46:fb:0f:90:60:94:e2:17:67:d3:55:
62:4b:b5:7d:32:54:bb:2b:de:52:5c:70:ca:a5:1a:
51:38:a7:1c:f7:b5:31:d7:9a:70:12:e1:f0:6f:52:
94:3a:7a:62:55:3e:60:58:80:97:a2:33:8f:6c:66:
69:6e:a0:e2:28:11:61:9c:d1:91:91:20:62:9b:34:
91:7a:78:e6:2b:0a:a4:27:b2:d0:91:a8:77:5d:61:
76:d3:f1:b0:c4:01:ac:87:14:cc:21:09:52:be:97:
56:e3:28:24:ff:97:24:e5:43:50:48:d8:1f:86:bb:
c1:83:89:73:96:f3:2a:43:bb:ab:c7:f2:4c:22:d0:
98:17:60:1e:90:0b:ee:b8:95:05:cc:35:ae:a5:5a:
3b:44:50:12:cb:e7:c2:a9:fa:83:cd:b9:9d:69:8d:
d1:cb:bf:65:50:55:a9:c1:69:3b:40:e2:9c:2f:55:
42:62:70:52:5c:fa:28:62:dc:e9:10:b0:fa:9a:ab:
4d:46:96:49:61:7a:c6:71:8e:5f:e0:15:80:2f:bd:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:5E:7B:BC:20:D3:9F:1D:42:51:10:D7:F7:35:8D:AF:39:AC:E8
X509v3 Authority Key Identifier:
keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36382e302f32332d3233203d3e20323632373430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.208.68.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:9f:b1:3c:31:bc:67:b9:c3:f2:15:18:6a:63:80:cb:28:17:
83:ae:e3:e7:be:c0:bb:db:08:06:9c:25:dd:16:9a:6d:6b:d3:
0a:a2:2a:c4:59:37:56:32:01:8a:69:c4:6a:f2:f8:b2:78:57:
7b:a4:54:75:e8:09:83:10:11:ca:fa:8e:1f:af:33:60:09:4f:
79:3b:6f:2b:62:79:32:cf:e2:d0:58:66:14:9f:9c:7f:9f:91:
fd:a9:e8:d6:fe:c4:b4:d4:19:0f:4f:7f:29:2a:67:de:6e:f0:
e9:40:72:d1:2c:5f:15:88:03:46:a3:1b:d5:28:fa:72:c4:26:
a4:6d:5b:3b:4e:fd:bd:64:3b:32:eb:e2:a3:1c:62:16:d3:0f:
02:77:f2:4d:3d:5d:b7:ad:a0:b8:33:e6:2a:24:c4:d7:bc:e3:
ae:5a:d3:c3:37:f1:89:40:14:7a:de:fd:90:ee:92:a0:84:04:
38:22:ce:fd:cd:40:18:d3:2b:bf:2a:70:37:a6:30:28:1c:63:
fd:52:73:15:40:52:c2:2d:37:38:1a:4d:90:55:47:9f:19:95:
92:fe:1b:6e:87:6f:38:c3:78:27:99:bd:0f:1b:1e:68:6e:89:
8c:d5:77:b5:32:df:8b:27:c3:ff:ab:28:ca:6b:a0:ea:91:cb:
ea:26:27:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:35:46 2025 by rpki-client