Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138362e3231362e36342e302f31382d3235203d3e203238323032.roa
File: 3138362e3231362e36342e302f31382d3235203d3e203238323032.roa (raw, json)
Hash identifier: lhkpf9ldXS5SgVTtGl4PZd0NYFzWHcnCg5eH6plfres=
Subject key identifier: B4:D9:64:47:5E:1B:B4:7D:6C:F7:25:59:4F:A8:52:E2:33:0A:C3:BC
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 416CFF00C76416E0E3725926AEA0A91EC52995CA
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138362e3231362e36342e302f31382d3235203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:13 +0000
ROA not before: Mon 13 Jan 2025 13:27:13 +0000
ROA not after: Mon 12 Jan 2026 13:32:13 +0000
asID: 28202
IP address blocks: 186.216.64.0/18 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6c:ff:00:c7:64:16:e0:e3:72:59:26:ae:a0:a9:1e:c5:29:95:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:13 2025 GMT
Not After : Jan 12 13:32:13 2026 GMT
Subject: CN=B4D964475E1BB47D6CF725594FA852E2330AC3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:0b:4e:a1:58:b7:d9:df:de:08:91:5d:18:
3e:fd:21:93:58:5d:c4:d5:60:79:84:4c:88:1d:ee:
8a:63:32:b1:2e:f8:db:01:e2:98:dc:ca:9a:a2:31:
c5:26:e7:97:17:84:98:e2:69:c4:b4:c5:a4:3f:0a:
49:ca:b5:98:58:7b:f4:89:27:da:ea:0f:18:de:3f:
c4:11:e9:cb:c3:a1:1b:df:d5:db:db:c6:7a:72:25:
bd:0a:23:da:b8:ab:db:73:9d:74:9a:56:c2:ee:f4:
1b:9d:bf:3e:9c:e2:35:82:ba:2b:6c:97:8a:51:c2:
5a:4f:eb:aa:01:94:56:22:71:a6:fc:16:71:1a:6d:
95:7f:da:35:62:b0:6d:07:79:d0:ff:ad:7c:21:b9:
15:c4:7e:9c:c6:b1:4c:d4:d6:c0:48:b1:70:98:29:
45:12:09:11:2f:24:53:c4:9d:75:9c:2c:41:9e:20:
44:bb:57:39:0e:ce:95:d2:58:ae:33:8d:fb:a6:df:
cb:58:67:2c:d9:68:c9:10:97:7e:90:bf:16:b3:87:
03:26:53:2d:97:f2:f8:4f:d8:c7:6b:02:20:50:8e:
95:e8:60:16:5a:4c:25:38:85:e9:41:38:d1:3c:0f:
2a:11:ce:b0:aa:b2:66:e2:40:8c:31:c3:c6:00:58:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D9:64:47:5E:1B:B4:7D:6C:F7:25:59:4F:A8:52:E2:33:0A:C3:BC
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3138362e3231362e36342e302f31382d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.216.64.0/18
Signature Algorithm: sha256WithRSAEncryption
27:c2:8d:d2:c7:de:1b:4c:79:fb:60:06:40:fb:06:76:8d:dc:
30:9c:11:e0:bf:71:ed:b5:dd:a7:21:82:c7:de:63:b7:8f:38:
75:ad:e5:e0:7d:fa:43:27:e9:b1:19:5e:71:d1:70:c1:1f:1d:
2c:45:11:3e:73:cb:3f:cd:78:f8:04:b9:9c:46:2d:25:fe:c7:
d9:52:10:3a:43:8a:9f:04:d6:fa:ed:f0:8e:a6:e8:ae:e5:9b:
9e:f5:f6:7f:79:db:41:a8:4a:75:f4:42:71:0e:e1:25:cf:f6:
09:e4:71:88:0a:46:9b:43:9e:be:82:ff:54:95:f8:07:ab:6e:
86:18:90:44:86:2c:a1:67:11:10:a5:2d:cb:26:3d:9e:a1:bd:
3a:98:62:f1:d0:d2:62:de:5a:65:80:06:7e:84:36:48:bd:fd:
40:f1:a6:2a:59:0c:93:92:7e:29:85:d3:7b:4f:b1:74:db:90:
1e:93:36:26:48:f0:ee:8e:01:b8:ab:73:07:7a:2f:32:05:ed:
0f:0b:f5:ef:30:2c:0c:1e:7a:c4:72:eb:01:b7:b5:65:6d:2d:
32:d9:6e:9f:a1:d2:89:80:77:3c:4c:d9:3b:66:5a:4c:01:b9:
1f:2a:7b:8a:ea:63:dc:3f:9b:a4:37:ba:7e:23:1c:3f:ec:ec:
e5:ee:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:12 2025 by rpki-client