Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37322e302f32312d3231203d3e20323632373430.roa
File: 3138362e3230382e37322e302f32312d3231203d3e20323632373430.roa (raw, json)
Hash identifier: 4kQBWvzsLyepALmRGo72MzYTlEzsLrre+wdc7PfFphI=
Subject key identifier: 54:6E:23:84:42:A6:37:E1:21:48:65:B6:14:51:48:FC:14:2B:A8:BE
Certificate issuer: /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial: 217ED8F1AFC3C9A1239661A9BAF79B12E1317579
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37322e302f32312d3231203d3e20323632373430.roa
Signing time: Mon 23 Sep 2024 20:55:00 +0000
ROA not before: Mon 23 Sep 2024 20:50:00 +0000
ROA not after: Mon 22 Sep 2025 20:55:00 +0000
asID: 262740
IP address blocks: 186.208.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:7e:d8:f1:af:c3:c9:a1:23:96:61:a9:ba:f7:9b:12:e1:31:75:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Validity
Not Before: Sep 23 20:50:00 2024 GMT
Not After : Sep 22 20:55:00 2025 GMT
Subject: CN=546E238442A637E1214865B6145148FC142BA8BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:67:f2:d3:e0:26:cc:0e:e4:11:35:05:01:33:
15:11:94:e8:2b:cc:46:6f:2d:74:15:6e:94:f1:ab:
ef:01:65:97:32:24:6c:b6:e0:b5:0e:cd:54:2a:40:
ef:2b:2f:7c:60:d5:48:fb:f0:a7:18:7f:26:1d:6b:
17:ef:33:a2:88:d6:b3:d3:91:72:80:d9:ea:f8:98:
cd:eb:4f:23:fe:ae:00:11:a9:01:b2:0a:b9:a3:97:
96:40:9d:92:56:bf:6a:c1:e1:7e:3d:70:43:f8:be:
66:0d:d3:db:ea:43:2c:44:33:74:c5:31:35:3c:2e:
0b:93:c9:eb:58:e4:e5:d2:ae:4b:3e:93:66:04:64:
07:88:d9:e4:f0:e0:a0:a9:fe:5e:e3:c9:af:cc:ce:
46:9f:bc:49:36:8d:80:8f:7d:75:82:e5:39:dd:76:
71:64:58:0a:61:cb:8b:ad:93:6a:6d:1a:a2:24:18:
ec:25:0d:9c:14:07:f5:76:77:a2:30:1c:31:c6:e5:
3c:c2:8a:10:d0:fe:56:50:2e:a7:04:02:09:cf:a3:
1d:3d:d8:c8:9b:79:28:5a:87:c3:c5:06:f8:a8:f2:
d5:bf:9a:80:ad:5a:88:80:a3:f5:38:e5:f5:3a:fb:
79:8a:8a:7a:4c:7f:84:52:18:84:bf:3c:22:49:fb:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6E:23:84:42:A6:37:E1:21:48:65:B6:14:51:48:FC:14:2B:A8:BE
X509v3 Authority Key Identifier:
keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37322e302f32312d3231203d3e20323632373430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.208.72.0/21
Signature Algorithm: sha256WithRSAEncryption
cb:c6:72:fe:d6:9a:ce:f3:02:af:76:a6:26:25:82:8d:2a:f4:
3b:e2:7c:d9:d2:3a:75:6b:94:4d:f6:d3:d0:4c:da:03:bb:9b:
cb:99:95:f7:b4:39:8d:80:df:f2:bd:9c:b9:4b:52:a4:42:4e:
23:1f:0b:68:9c:28:5a:0d:2f:60:26:f3:e4:15:2d:0a:e1:2f:
4c:72:fd:23:a5:74:f5:bd:f9:b5:72:73:05:bd:df:43:86:e1:
ff:51:3d:a6:16:96:61:4c:7a:31:97:6e:da:a6:15:f6:e4:26:
76:63:d1:ad:6d:3e:1d:2e:db:5c:13:b4:46:68:61:65:53:fe:
e4:c4:4d:04:a5:77:14:c9:ea:8f:29:74:90:f8:3e:17:d9:9f:
91:ba:6b:53:33:23:41:20:01:90:19:50:8c:92:80:06:f3:6e:
fa:03:c9:16:0c:08:a4:c0:7f:9a:24:03:3b:ae:26:d6:7d:1a:
9e:d2:2b:46:53:69:72:b8:ea:2e:b9:86:5d:89:13:ab:cc:33:
cd:1a:b9:10:76:de:70:d7:67:af:e0:03:80:fc:f9:a9:fe:b1:
81:aa:a1:11:61:f1:89:7a:0c:d3:b2:02:bd:6e:23:04:b2:95:
fa:3c:5e:e0:17:99:9b:ef:74:6e:59:97:44:b9:08:e4:63:c2:
94:b1:4e:d6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIX7Y8a/DyaEjlmGpuvebEuExdXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhBRDU5ODlDOTY5MkNFMjlEQjlDM0ZFNDA0NDhBNDc2
MjJDNDJDQjAeFw0yNDA5MjMyMDUwMDBaFw0yNTA5MjIyMDU1MDBaMDMxMTAvBgNV
BAMTKDU0NkUyMzg0NDJBNjM3RTEyMTQ4NjVCNjE0NTE0OEZDMTQyQkE4QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhZ/LT4CbMDuQRNQUBMxURlOgr
zEZvLXQVbpTxq+8BZZcyJGy24LUOzVQqQO8rL3xg1Uj78KcYfyYdaxfvM6KI1rPT
kXKA2er4mM3rTyP+rgARqQGyCrmjl5ZAnZJWv2rB4X49cEP4vmYN09vqQyxEM3TF
MTU8LguTyetY5OXSrks+k2YEZAeI2eTw4KCp/l7jya/MzkafvEk2jYCPfXWC5Tnd
dnFkWAphy4utk2ptGqIkGOwlDZwUB/V2d6IwHDHG5TzCihDQ/lZQLqcEAgnPox09
2MibeShah8PFBvio8tW/moCtWoiAo/U45fU6+3mKinpMf4RSGIS/PCJJ+7F5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVG4jhEKmN+EhSGW2FFFI/BQrqL4wHwYDVR0j
BBgwFoAUyK1ZiclpLOKducP+QESKR2IsQsswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21yZGlMc1FCa0xKaTFTQ25ZdjVRUXM0MVBTaURmUmlQTVNVQmlYWW93
bU4vMC9DOEFENTk4OUM5NjkyQ0UyOURCOUMzRkU0MDQ0OEE0NzYyMkM0MkNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QUQ1OTg5Qzk2OTJDRTI5
REI5QzNGRTQwNDQ4QTQ3NjIyQzQyQ0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtcmRpTHNRQmtMSmkxU0NuWXY1UVFzNDFQU2lEZlJpUE1TVUJpWFlvd21OLzAv
MzEzODM2MmUzMjMwMzgyZTM3MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzNzM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO60EgwDQYJKoZIhvcNAQELBQADggEBAMvGcv7W
ms7zAq92piYlgo0q9DvifNnSOnVrlE3209BM2gO7m8uZlfe0OY2A3/K9nLlLUqRC
TiMfC2icKFoNL2Am8+QVLQrhL0xy/SOldPW9+bVycwW930OG4f9RPaYWlmFMejGX
btqmFfbkJnZj0a1tPh0u21wTtEZoYWVT/uTETQSldxTJ6o8pdJD4PhfZn5G6a1Mz
I0EgAZAZUIySgAbzbvoDyRYMCKTAf5okAzuuJtZ9Gp7SK0ZTaXK46i65hl2JE6vM
M80auRB23nDXZ6/gA4D8+an+sYGqoRFh8Yl6DNOyAr1uIwSylfo8XuAXmZvvdG5Z
l0S5CORjwpSxTtY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:38:14 2025 by rpki-client