Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32312d3231203d3e203237363933.roa
File: 3138392e3132372e302e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier: r7dXJhwWYlAZlTMFIvUmgQUqGVEu2w86+7ggwcxDuJk=
Subject key identifier: AE:10:0D:DE:57:63:DA:C7:F2:0F:EF:7F:0B:62:2C:C3:A2:F6:86:98
Certificate issuer: /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial: 5F47D0A84E831AB4A7243AA61C495EA7524C749E
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32312d3231203d3e203237363933.roa
Signing time: Tue 22 Oct 2024 14:30:15 +0000
ROA not before: Tue 22 Oct 2024 14:25:15 +0000
ROA not after: Tue 21 Oct 2025 14:30:15 +0000
asID: 27693
IP address blocks: 189.127.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:47:d0:a8:4e:83:1a:b4:a7:24:3a:a6:1c:49:5e:a7:52:4c:74:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Validity
Not Before: Oct 22 14:25:15 2024 GMT
Not After : Oct 21 14:30:15 2025 GMT
Subject: CN=AE100DDE5763DAC7F20FEF7F0B622CC3A2F68698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:e9:f0:e9:72:75:3a:7c:fa:04:05:52:57:
7d:c4:bc:98:8b:a9:f2:f1:98:b6:d8:b5:1e:b2:97:
16:0c:e5:0c:3e:f5:87:d7:2f:4e:8a:e3:27:51:36:
a7:8a:14:45:53:35:43:98:39:09:f4:03:80:69:70:
91:6b:12:99:f3:45:65:0b:04:9d:90:ad:a4:45:47:
f7:64:76:84:66:d1:91:0f:35:d0:4f:bc:b6:eb:ff:
44:3a:29:0d:b6:e3:1f:17:cc:e6:ea:07:4e:ca:a8:
ef:3f:96:64:5a:46:18:d2:a0:75:e4:3b:93:ae:71:
5f:0c:fb:40:1e:dc:fb:f5:65:8d:a9:15:32:99:7b:
19:56:d3:f9:b4:c1:fb:55:89:26:50:e3:4b:22:34:
d5:12:36:d1:b3:88:f4:65:f9:aa:20:f0:aa:88:70:
c2:56:de:e5:00:25:46:e9:7a:45:bb:d3:5f:7f:80:
e0:98:98:45:51:c8:e3:01:4f:97:0f:e4:04:7b:24:
34:ef:c4:58:b6:a9:be:86:97:0d:d5:16:6e:cb:91:
b8:ea:b9:f0:95:cf:64:e1:02:ca:fe:a0:c9:1d:9d:
04:15:13:55:eb:a0:20:ef:73:df:b1:ed:59:f9:3d:
ec:b6:23:be:4d:a8:02:e3:b5:23:8f:b9:a1:ea:a5:
5d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:10:0D:DE:57:63:DA:C7:F2:0F:EF:7F:0B:62:2C:C3:A2:F6:86:98
X509v3 Authority Key Identifier:
keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32312d3231203d3e203237363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.0.0/21
Signature Algorithm: sha256WithRSAEncryption
52:03:a2:b2:be:1c:53:31:43:a9:33:df:86:3e:c3:62:c5:8d:
f8:a3:f5:02:c9:f3:65:76:cb:34:0d:ee:a5:43:17:2e:7a:d9:
cc:dd:b9:56:7c:89:ca:f6:f5:0e:73:1e:fe:16:24:13:c8:4f:
d5:70:65:71:6d:9b:ed:d3:62:08:18:b3:ee:6f:0f:d5:ce:e7:
75:25:a3:0a:1a:81:ff:49:1c:21:b3:3d:34:91:8e:72:08:8f:
5e:5d:45:5b:ed:02:aa:55:93:14:23:c5:94:96:6b:cc:f7:e7:
2b:c4:3c:7b:48:89:9b:88:4b:2e:9c:47:97:7f:ae:78:95:6c:
85:dc:61:c5:20:c6:8c:c2:58:bd:c5:d8:ab:50:ec:ef:2e:34:
7f:cf:79:39:ae:63:f3:db:6a:bf:b8:80:8e:d6:18:60:57:6d:
ec:df:0d:d2:f8:22:0c:3e:bb:85:40:93:88:46:97:ce:d3:62:
69:a1:5e:2c:5b:8c:9f:f5:ee:94:17:ff:74:00:8f:0f:43:0a:
40:e0:0f:17:ee:c7:61:48:19:b9:33:a6:bf:99:80:d3:98:dd:
77:ef:67:b1:db:21:a5:5f:ca:46:35:20:de:1f:fc:3e:b4:1c:
57:bb:bd:5f:02:a2:18:6b:a0:85:6d:3d:d4:47:12:ae:ce:11:
bb:d4:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:57:35 2025 by rpki-client