Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138362e3233362e3132382e302f31382d3234203d3e203232363839.roa
File: 3138362e3233362e3132382e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier: Mf/c9qgcJAhgX+4v9G5Y/LIfTTK7MZBGSsaYQUriPxo=
Subject key identifier: 1B:1A:25:95:CF:AE:6F:F3:5D:F6:D2:24:43:9D:4D:93:B8:A2:44:B0
Certificate issuer: /CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Certificate serial: 53C4067F2FFDB796F79B25A29C42D3BCFE257127
Authority key identifier: 60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138362e3233362e3132382e302f31382d3234203d3e203232363839.roa
Signing time: Tue 20 Feb 2024 16:57:04 +0000
ROA not before: Tue 20 Feb 2024 16:52:04 +0000
ROA not after: Tue 18 Feb 2025 16:57:04 +0000
asID: 22689
IP address blocks: 186.236.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c4:06:7f:2f:fd:b7:96:f7:9b:25:a2:9c:42:d3:bc:fe:25:71:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Validity
Not Before: Feb 20 16:52:04 2024 GMT
Not After : Feb 18 16:57:04 2025 GMT
Subject: CN=1B1A2595CFAE6FF35DF6D224439D4D93B8A244B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:27:5c:3b:22:e5:76:f1:24:63:72:ca:af:
b9:59:81:69:88:8c:f6:1f:d6:35:b7:31:c1:b5:ad:
db:34:89:26:c7:dd:46:4e:b0:fa:3e:f7:2e:34:26:
40:8c:6d:1b:87:c3:e9:68:e9:e8:f7:a4:a3:51:45:
c4:fa:49:98:51:47:98:48:99:fe:5e:bc:e7:22:f6:
6c:4a:d9:c7:21:c8:8d:3b:2b:f4:35:55:4b:2d:3c:
8a:92:78:85:59:be:23:8c:f7:70:d2:23:e0:1f:b8:
34:1b:b8:7b:d9:82:2f:67:51:2a:28:46:5d:e1:93:
94:e8:d8:94:03:fc:10:f2:4b:58:c7:1d:7e:04:8b:
fe:d5:fa:6e:26:7c:e1:1c:6a:e2:04:9f:4f:de:dd:
4f:a5:4b:c3:9f:bc:b0:f8:ea:44:a6:ab:11:77:6f:
10:99:3f:1e:bc:43:27:55:46:3d:fe:70:f9:bc:18:
52:96:7d:83:d4:29:6d:3a:56:2f:86:cc:b4:1f:e4:
db:cb:17:49:9e:a6:8e:d7:75:e8:12:53:dd:70:7b:
0e:f0:49:bf:51:39:61:fd:28:1b:82:4c:9e:dc:be:
f0:18:30:1f:9d:39:07:da:3f:b8:c6:e0:b3:c5:98:
87:f7:10:b2:ae:d9:47:f3:81:16:ba:7f:1a:05:c3:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1A:25:95:CF:AE:6F:F3:5D:F6:D2:24:43:9D:4D:93:B8:A2:44:B0
X509v3 Authority Key Identifier:
keyid:60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138362e3233362e3132382e302f31382d3234203d3e203232363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.236.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:32:64:9f:e2:dc:8b:e1:eb:53:60:59:6d:39:5f:74:36:9e:
32:5d:ef:fe:87:2b:90:41:0e:43:20:24:35:77:2d:13:67:4b:
47:cf:53:82:48:9b:92:78:ba:47:3d:68:a4:20:de:de:77:28:
7f:e1:a8:3c:a4:a0:e4:33:e3:2b:79:58:6a:45:83:6c:82:16:
3a:31:c2:3c:17:2f:57:18:1d:f6:dc:8a:36:3e:6c:6f:e3:bb:
2d:7a:3f:41:60:9c:1e:64:2e:fa:1c:de:2b:f8:b9:21:74:d9:
8a:51:63:bc:65:ef:09:7a:1e:5d:19:77:b0:8c:08:a6:1d:3d:
ab:5b:6a:f0:7c:da:ab:1a:e3:c8:ab:c7:1b:a6:71:27:db:3f:
61:44:c1:11:61:f0:3b:f6:eb:ff:0f:71:71:7f:15:b1:0b:55:
0e:0b:77:8d:16:10:e3:be:46:06:3a:ce:ca:75:7c:ee:44:6d:
87:27:2c:45:9a:d4:bc:5f:4f:29:34:e8:e6:77:09:4a:0f:e1:
14:5d:16:c9:27:ee:a0:b5:da:82:32:31:87:b6:7d:a8:4d:ef:
c2:f6:f4:d3:f3:b8:92:af:a7:a9:63:4b:e7:84:50:e5:23:c0:
3d:20:17:63:2a:c1:a2:6d:37:a8:19:f1:5a:26:f1:1a:7d:fe:
24:28:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:42:57 2025 by rpki-client