Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3138362e3231362e36342e302f31382d3235203d3e203238323032.roa
File: 3138362e3231362e36342e302f31382d3235203d3e203238323032.roa (raw, json)
Hash identifier: 9y+tuH2+5ZjgY5bjSWXiJw/jqM4InGlN7+7k5TKv160=
Subject key identifier: 78:99:D7:D5:C2:97:BE:63:B3:5E:E3:1E:44:4B:50:DB:27:83:EB:A7
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 235CFDEF59BF8B17C32588E9B19801BA619F2D5C
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3138362e3231362e36342e302f31382d3235203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:50 +0000
ROA not before: Fri 10 Jan 2025 14:14:50 +0000
ROA not after: Fri 09 Jan 2026 14:19:50 +0000
asID: 28202
IP address blocks: 186.216.64.0/18 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5c:fd:ef:59:bf:8b:17:c3:25:88:e9:b1:98:01:ba:61:9f:2d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:50 2025 GMT
Not After : Jan 9 14:19:50 2026 GMT
Subject: CN=7899D7D5C297BE63B35EE31E444B50DB2783EBA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:f9:c9:15:e6:03:10:c6:29:74:e1:83:d4:
54:74:f8:4c:a4:ea:71:d8:8f:68:60:7f:a6:32:88:
f1:87:f4:5a:b6:2d:e6:12:2a:ed:d1:6a:e9:15:77:
6a:fa:ee:18:ff:63:9c:87:d5:47:84:91:70:c3:6a:
33:39:2d:9e:5c:61:26:06:3c:70:60:8b:42:be:c7:
fa:16:99:8a:1b:c0:43:3e:c7:49:ca:05:28:4e:48:
69:85:23:42:2f:06:09:c4:aa:de:b6:09:ff:cd:a6:
04:b0:37:88:d8:05:3b:69:8a:a1:48:dd:68:5b:05:
45:6b:45:2f:01:b4:28:71:49:63:5c:3f:35:c1:8c:
42:bf:86:12:81:8a:43:f5:93:fe:14:fc:ba:82:5b:
78:34:4a:a2:9b:42:9b:76:76:af:18:91:fa:f7:96:
a7:84:68:1b:ec:1e:f3:4a:bf:79:16:61:cc:fb:98:
e2:9d:21:d2:12:59:3b:38:62:46:8d:45:27:d5:e9:
eb:15:ac:78:79:8d:95:24:e9:5b:45:87:b2:ed:b3:
ae:23:0a:ec:e2:2a:63:65:39:07:9f:fa:80:5f:09:
f4:dd:fa:05:d9:a5:cf:8d:7b:c4:bc:a4:0e:4c:63:
81:19:41:9f:bf:d5:42:ce:37:d2:9f:a5:cb:ee:db:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:99:D7:D5:C2:97:BE:63:B3:5E:E3:1E:44:4B:50:DB:27:83:EB:A7
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3138362e3231362e36342e302f31382d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.216.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7e:41:16:67:09:75:ac:44:dd:64:0d:ae:a5:ad:c2:f1:91:67:
60:35:26:c9:32:b9:d0:2f:51:b9:1a:ee:fa:b5:4d:58:4a:4f:
dd:95:d0:62:19:a5:53:fe:7a:20:b1:89:18:35:a7:6f:51:5f:
29:0c:7a:c7:a5:dc:38:9a:f9:2d:50:46:c4:a5:2f:32:da:a6:
71:1e:82:78:6e:2b:6c:e4:61:f6:1f:20:1b:af:3e:92:d9:3b:
4c:53:e5:8f:51:79:da:a2:0f:d9:85:26:61:98:e3:d9:fc:57:
73:3e:02:f3:a9:63:2d:00:7f:17:c9:f7:de:10:78:37:75:c2:
18:a7:c5:14:78:db:fe:dc:60:a9:28:8f:0b:60:40:80:14:52:
9e:90:a0:a1:cd:70:fa:27:7e:8d:3c:70:e5:6a:85:3d:7d:58:
f3:6e:3f:83:f6:04:c5:ab:46:6a:64:75:f2:d2:64:dc:6f:be:
5a:fe:66:ac:50:98:a0:7a:c2:09:f1:bf:d5:99:02:ac:9b:c2:
8e:a0:e9:f4:8d:d1:d5:9c:24:7c:f5:d0:76:01:d3:06:44:f5:
45:bc:72:55:3a:2c:bc:4f:67:b9:dc:58:a8:be:63:e5:1c:aa:
f3:b3:5e:80:82:f6:a2:34:62:e7:1e:66:fc:88:bf:ca:7f:54:
f2:8f:2b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:28 2025 by rpki-client