Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/3138372e38352e3234302e302f32302d3332203d3e203238323035.roa
File: 3138372e38352e3234302e302f32302d3332203d3e203238323035.roa (raw, json)
Hash identifier: PY+OGzqlvhqRW32h0yTWWFXfXIqUub30CptME5zvJhU=
Subject key identifier: 8E:EA:17:A7:10:C7:BB:EC:74:81:22:9B:37:AC:FD:F2:73:E4:97:CD
Certificate issuer: /CN=8932ACC1911E393FFC9CEB81881A0D18DE307D35
Certificate serial: 15042E4DB7DF585185ED9DDC0123E119C2C52CFE
Authority key identifier: 89:32:AC:C1:91:1E:39:3F:FC:9C:EB:81:88:1A:0D:18:DE:30:7D:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8932ACC1911E393FFC9CEB81881A0D18DE307D35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/3138372e38352e3234302e302f32302d3332203d3e203238323035.roa
Signing time: Wed 22 May 2024 11:28:02 +0000
ROA not before: Wed 22 May 2024 11:23:02 +0000
ROA not after: Wed 21 May 2025 11:28:02 +0000
asID: 28205
IP address blocks: 187.85.240.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:04:2e:4d:b7:df:58:51:85:ed:9d:dc:01:23:e1:19:c2:c5:2c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8932ACC1911E393FFC9CEB81881A0D18DE307D35
Validity
Not Before: May 22 11:23:02 2024 GMT
Not After : May 21 11:28:02 2025 GMT
Subject: CN=8EEA17A710C7BBEC7481229B37ACFDF273E497CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:60:7c:5f:bf:9e:ec:72:3d:06:9c:70:9d:
0e:d7:5f:18:c5:e1:e1:6d:4d:2a:dd:f9:1e:c9:09:
73:b3:cb:0b:42:e4:ca:f1:42:e3:64:4c:24:da:ff:
f1:ba:11:6a:60:9c:72:2c:b1:95:07:8f:72:1e:c0:
c5:8f:1b:17:d9:c4:71:1a:ef:6b:a1:4d:6f:f6:65:
61:e6:1d:cc:87:0a:31:68:fb:2f:28:ff:57:94:5c:
11:f4:83:77:71:c1:57:62:c0:bf:dc:c2:98:bd:71:
4e:db:1a:d9:11:6a:4e:93:1d:a4:c5:82:ea:85:40:
27:fa:57:2e:dc:ff:9d:30:62:db:57:37:a3:e1:a5:
f7:62:ca:76:c9:82:5d:b8:6e:e8:db:d2:6a:57:20:
55:a1:58:eb:b2:d4:04:b1:0c:76:48:70:f1:ad:4d:
ae:42:56:24:3b:6c:1e:dc:c4:96:86:ef:5f:ae:67:
37:3c:4c:d0:03:e2:2b:44:5f:bd:ac:39:6c:c2:d1:
b4:11:ad:a5:79:fc:99:03:62:b0:6b:8f:ea:4f:cb:
68:8b:b1:13:fe:70:05:74:0d:fa:0f:9a:46:c5:3d:
4b:4a:f9:57:c8:f3:66:ba:ac:d2:7b:31:c3:57:8a:
2b:29:6d:a9:60:83:b1:29:d4:6a:c7:1e:06:f8:df:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EA:17:A7:10:C7:BB:EC:74:81:22:9B:37:AC:FD:F2:73:E4:97:CD
X509v3 Authority Key Identifier:
keyid:89:32:AC:C1:91:1E:39:3F:FC:9C:EB:81:88:1A:0D:18:DE:30:7D:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/8932ACC1911E393FFC9CEB81881A0D18DE307D35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8932ACC1911E393FFC9CEB81881A0D18DE307D35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/3138372e38352e3234302e302f32302d3332203d3e203238323035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.85.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:21:e2:2a:fa:11:d4:0c:f0:17:6a:62:88:31:ec:52:3f:08:
79:35:f3:37:24:79:f2:50:cd:47:e0:6e:18:86:79:ef:9c:69:
8d:2d:90:fc:40:eb:d4:47:9d:1c:d4:c9:52:23:33:bb:09:16:
3c:bf:a8:87:2e:51:1c:cf:21:2d:9f:c1:1b:eb:b1:b7:78:59:
1f:30:3c:1f:18:83:7c:35:9b:7d:bb:1e:3c:64:64:08:ea:e4:
69:44:51:fb:fb:b2:72:14:37:36:4d:90:1c:14:bd:2b:be:07:
72:55:dd:1d:12:d7:2e:44:ad:5a:70:a9:5e:6f:56:eb:c0:66:
12:cc:c4:5b:64:43:bf:62:f8:dc:da:31:fc:f3:4a:21:24:db:
92:f5:e9:cb:7f:24:a1:86:09:57:e2:2f:09:21:7e:da:7b:48:
a5:17:2f:4d:aa:37:35:73:39:29:ad:a3:99:a1:45:57:e4:69:
26:45:7b:02:55:2f:4f:43:70:d4:47:ba:b4:04:80:99:34:3f:
5a:53:bb:9c:cb:1e:16:c2:56:3f:6a:bf:46:a8:9f:0a:e4:75:
96:4e:8b:b0:38:57:b8:4b:e3:7f:3f:0e:e7:16:64:26:8a:d5:
66:ce:b8:3b:76:27:1a:c4:7c:22:ec:9a:46:b6:43:d1:fe:2c:
a8:90:34:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:41:45 2025 by rpki-client