Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa
File: 3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (raw, json)
Hash identifier: 21oIcCvYr6LFgR0ULw+qdT2QybP7b/FaqMT+DRPrAA0=
Subject key identifier: A9:EB:76:87:28:39:63:AF:C9:79:BD:61:ED:D8:90:C7:C7:F6:F8:E9
Certificate issuer: /CN=43A516A504F5064680E71E74458628230159DB80
Certificate serial: 10E4D4D13E63583FD993D8828031A015DB53DB94
Authority key identifier: 43:A5:16:A5:04:F5:06:46:80:E7:1E:74:45:86:28:23:01:59:DB:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A516A504F5064680E71E74458628230159DB80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa
Signing time: Mon 08 Apr 2024 18:21:07 +0000
ROA not before: Mon 08 Apr 2024 18:16:07 +0000
ROA not after: Mon 07 Apr 2025 18:21:07 +0000
asID: 263083
IP address blocks: 186.233.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e4:d4:d1:3e:63:58:3f:d9:93:d8:82:80:31:a0:15:db:53:db:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43A516A504F5064680E71E74458628230159DB80
Validity
Not Before: Apr 8 18:16:07 2024 GMT
Not After : Apr 7 18:21:07 2025 GMT
Subject: CN=A9EB7687283963AFC979BD61EDD890C7C7F6F8E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:c7:21:cd:3c:e1:29:4a:4f:5d:5d:a9:95:
98:b8:87:35:72:cc:ec:19:d3:44:07:bc:ba:34:e2:
1b:8e:c2:8a:8c:e9:c5:08:f2:9a:4b:6d:66:09:75:
c2:2c:de:ef:c4:37:2e:36:83:0b:ed:8b:8b:65:68:
31:7b:01:ab:c0:bf:3d:2b:7a:f2:56:b1:cd:0a:25:
98:fa:6e:d6:80:77:e4:2f:f5:34:96:f3:f4:32:e9:
2c:ed:67:e2:bb:cf:75:99:52:5a:6f:ca:0d:71:31:
08:40:56:13:74:43:5c:53:84:b2:15:aa:ed:c7:30:
c2:bf:d7:8b:cd:b8:b6:16:6c:7d:0c:d3:96:f3:25:
02:c7:42:9b:b7:31:b7:67:d7:1a:77:e6:14:f0:6c:
29:e0:a6:d2:3b:0d:3b:31:8c:f5:92:94:f5:11:7a:
bc:19:71:e4:91:a6:48:d1:6d:a8:83:9a:62:cf:fd:
21:a8:ca:87:02:dc:3f:f4:9f:d7:70:9c:6f:8a:53:
a3:a6:91:f6:5c:8d:07:9a:f0:46:9b:0c:51:a7:3e:
8e:d6:37:b5:99:a8:06:e6:5d:24:f6:8a:ee:8f:22:
e4:e9:e0:4b:77:67:e2:4e:3b:ee:58:fb:69:23:d7:
88:a6:eb:29:d0:b1:c2:33:29:1e:68:ff:de:70:f1:
8b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EB:76:87:28:39:63:AF:C9:79:BD:61:ED:D8:90:C7:C7:F6:F8:E9
X509v3 Authority Key Identifier:
keyid:43:A5:16:A5:04:F5:06:46:80:E7:1E:74:45:86:28:23:01:59:DB:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/43A516A504F5064680E71E74458628230159DB80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A516A504F5064680E71E74458628230159DB80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.233.12.0/22
Signature Algorithm: sha256WithRSAEncryption
09:c2:8c:22:34:49:54:1e:65:0d:f3:c3:cf:7f:ad:b3:2b:dd:
3b:ca:6b:bf:8e:3a:22:4a:33:24:a3:47:8e:05:5d:9f:1f:5b:
53:35:ad:6a:fa:39:d8:c2:bb:6f:12:a1:88:16:71:bf:35:bc:
1a:e9:8e:de:1d:bb:03:36:98:ce:f2:aa:4b:f4:e1:71:ee:15:
4e:43:68:7c:c5:b1:d6:03:3e:7e:6d:08:95:c2:51:13:0f:ee:
01:72:6a:56:3f:ea:0e:d7:18:94:c8:df:79:4f:36:f2:0c:37:
03:01:27:d2:13:37:22:37:76:a6:69:5f:1a:24:b7:5c:62:d9:
09:31:8f:4f:a7:31:bc:dd:1f:95:bd:07:d0:38:0c:43:c0:56:
fe:30:ca:fc:4a:6e:5f:a2:d1:64:49:76:80:d4:60:50:14:57:
ca:e0:0a:8d:77:ff:3d:c0:af:96:f4:67:30:94:e8:3a:2f:a2:
5a:41:24:3c:15:8d:bc:c6:42:64:5d:87:33:1a:57:fe:e1:2a:
e2:8b:46:3b:7b:e1:5d:86:d3:08:ab:b6:89:34:27:d8:7a:d0:
bc:92:82:27:d4:3b:c2:b3:b4:e0:01:8a:cc:2c:4a:f7:c4:5b:
fc:2c:d8:d1:60:69:32:79:1a:79:91:28:2d:61:3e:fb:2b:de:
b8:eb:ff:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:57 2025 by rpki-client