Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3138362e3231392e3231362e302f32312d3234203d3e203631353838.roa
File: 3138362e3231392e3231362e302f32312d3234203d3e203631353838.roa (raw, json)
Hash identifier: uvDwXX7LhKoMlCmo3RuxL6qPcCt+hZKwNAMM3P15foU=
Subject key identifier: DF:84:EA:27:37:D0:B2:94:BB:5A:05:3F:FA:FD:24:00:BD:4E:D4:54
Certificate issuer: /CN=3BBEAF7C89270546CC0F41447D11417F1D00B099
Certificate serial: 2553CB629CE053BB3844D6C5C8FBFB9EA815357C
Authority key identifier: 3B:BE:AF:7C:89:27:05:46:CC:0F:41:44:7D:11:41:7F:1D:00:B0:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3138362e3231392e3231362e302f32312d3234203d3e203631353838.roa
Signing time: Tue 13 Sep 2022 20:14:35 +0000
ROA not before: Tue 13 Sep 2022 20:09:35 +0000
ROA not after: Tue 12 Sep 2023 20:14:35 +0000
asID: 61588
IP address blocks: 186.219.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:53:cb:62:9c:e0:53:bb:38:44:d6:c5:c8:fb:fb:9e:a8:15:35:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BBEAF7C89270546CC0F41447D11417F1D00B099
Validity
Not Before: Sep 13 20:09:35 2022 GMT
Not After : Sep 12 20:14:35 2023 GMT
Subject: CN=DF84EA2737D0B294BB5A053FFAFD2400BD4ED454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:94:1c:eb:aa:3b:2c:83:1f:43:af:ca:ec:
0c:b5:a0:0a:8d:e3:bf:4e:9b:7d:59:45:c5:71:36:
90:fe:5a:d5:c3:21:18:bc:04:42:cb:4d:6d:72:fb:
de:82:e1:22:75:3f:9c:23:25:ff:96:78:81:f1:51:
30:1e:b6:7f:b6:ec:1c:3f:05:5b:37:93:df:5a:e2:
dd:a8:34:fa:0b:df:2a:45:c0:71:11:5a:92:fa:62:
fb:40:9b:bf:2b:77:ff:f9:04:00:2b:77:e1:dc:cf:
3d:70:c5:cc:51:9d:cb:87:8e:36:f3:99:61:5a:de:
32:5b:bc:16:9d:f2:3c:f3:a1:03:fc:4e:ca:64:be:
f7:10:03:9f:1c:7c:20:c6:78:b7:3a:b1:ea:73:ee:
d9:93:19:e3:a2:4c:b9:de:00:bf:72:0a:9a:f8:aa:
68:7f:38:03:b5:a0:8c:54:b7:d1:96:c4:df:f0:de:
f4:b5:d7:d4:f1:6d:93:45:7d:6b:a5:ef:4b:88:d9:
9c:cf:0c:8a:67:dd:80:db:c9:56:14:49:d4:40:01:
8c:75:09:ed:bc:36:70:38:72:85:bb:c0:cc:11:8c:
99:b6:2d:37:ed:31:3d:5e:f3:5e:4e:29:ea:63:11:
61:d7:c9:76:6c:47:67:53:89:d2:65:2e:4f:b4:53:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:84:EA:27:37:D0:B2:94:BB:5A:05:3F:FA:FD:24:00:BD:4E:D4:54
X509v3 Authority Key Identifier:
keyid:3B:BE:AF:7C:89:27:05:46:CC:0F:41:44:7D:11:41:7F:1D:00:B0:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3138362e3231392e3231362e302f32312d3234203d3e203631353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.219.216.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:f6:5e:e4:e8:3c:08:d3:32:04:18:f1:f9:08:27:19:25:a0:
00:f6:43:d6:f2:52:0e:d2:34:bd:b8:f3:1c:f0:8a:3f:2f:09:
f1:5e:a9:78:12:85:14:9f:ab:ca:a2:64:01:00:e8:25:e2:47:
d9:b2:34:c5:d3:cb:08:74:60:c6:61:51:10:b4:74:ab:8b:a1:
8c:b7:8b:fb:fa:70:45:4e:28:94:2b:2a:af:c3:75:00:50:7b:
31:b7:95:27:44:03:c0:af:b9:2a:95:1d:28:4b:fb:48:c8:c7:
0d:60:1b:33:49:73:e5:41:c4:49:08:7a:65:8a:3a:1b:a7:85:
22:53:be:92:fc:3b:78:30:a8:71:01:a3:ea:2f:32:57:a3:b8:
c5:6d:28:a5:8f:c6:9f:e5:0c:df:f5:9c:22:f0:5e:04:76:b8:
17:3d:16:37:17:8d:66:31:04:85:ca:a9:dd:a7:85:7d:03:8d:
f8:07:1c:be:c8:61:1b:78:ae:00:17:19:fe:b1:cc:f7:31:77:
e8:49:93:f5:70:54:90:77:ae:a6:6c:d9:7f:f9:06:c7:22:4d:
68:23:ce:72:4a:20:70:8e:15:18:5c:66:ba:93:b3:f5:97:cb:
28:dc:7c:91:33:dd:4c:76:69:b0:0a:69:dd:c3:80:41:f3:f7:
9c:a9:91:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:14 2025 by rpki-client