Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3230302e302f32312d3231203d3e203238333532.roa
File: 3138392e35312e3230302e302f32312d3231203d3e203238333532.roa (raw, json)
Hash identifier: Wh5vV84051xrRhfkIpjDT6gf283Df7zl2fQtazSlbYE=
Subject key identifier: 80:BD:BA:CF:EA:31:8C:81:4B:35:90:22:20:C5:52:68:42:0B:9A:FC
Certificate issuer: /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial: 0DEB4E00D26D5352B2992BD42B26364F2C54B1B7
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3230302e302f32312d3231203d3e203238333532.roa
Signing time: Thu 04 Apr 2024 10:16:48 +0000
ROA not before: Thu 04 Apr 2024 10:11:48 +0000
ROA not after: Thu 03 Apr 2025 10:16:48 +0000
asID: 28352
IP address blocks: 189.51.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:eb:4e:00:d2:6d:53:52:b2:99:2b:d4:2b:26:36:4f:2c:54:b1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Validity
Not Before: Apr 4 10:11:48 2024 GMT
Not After : Apr 3 10:16:48 2025 GMT
Subject: CN=80BDBACFEA318C814B35902220C55268420B9AFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:b1:61:37:62:dd:df:c9:d0:1f:a7:a3:84:
9a:0d:8d:22:2d:1f:14:49:d9:2a:20:ca:6a:92:7c:
ad:95:87:bd:ee:a9:9b:9b:71:28:3c:38:9b:ca:0b:
7e:24:c7:e2:81:55:2e:01:e3:24:ef:40:75:68:c0:
2a:cf:5a:d1:93:ec:25:40:f7:1a:e5:05:70:1c:8d:
f7:05:b4:bf:20:d0:09:b0:00:8d:3c:15:70:c9:59:
d4:a2:b3:04:2f:73:ea:df:21:72:a5:19:92:ab:39:
3a:4a:95:f2:f1:93:24:d0:31:52:f0:b0:3a:db:e0:
5f:1c:54:b6:c3:4b:0e:a5:14:2e:f4:ac:77:23:6f:
65:83:17:53:8a:9b:8c:4b:41:bf:e0:eb:35:31:09:
da:05:94:52:7f:98:0d:b2:2d:36:f8:c5:1a:be:71:
9e:ba:55:07:19:4a:ea:e2:76:a9:3a:c8:db:28:a0:
ed:fd:fc:51:35:d2:d4:40:16:45:7e:4f:ee:a9:8d:
6d:a6:cb:b2:87:82:d6:2d:d0:6b:b4:b6:f5:df:5d:
a3:9e:c1:5e:d3:29:7c:e6:05:b1:1d:df:60:f2:68:
6b:f8:6c:7b:e9:ed:a7:6a:dd:a6:7b:10:5a:c7:41:
f3:43:ab:4a:99:2e:58:ef:59:10:6b:99:a4:d9:ee:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BD:BA:CF:EA:31:8C:81:4B:35:90:22:20:C5:52:68:42:0B:9A:FC
X509v3 Authority Key Identifier:
keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3230302e302f32312d3231203d3e203238333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.51.200.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:5c:70:e6:20:a9:61:13:f3:e6:49:c9:f8:54:b1:f9:3f:e7:
6a:7a:28:c1:34:5a:67:1f:98:fc:4e:e7:0f:a9:d2:d4:d4:5f:
66:be:fe:71:e7:c3:f1:e4:da:72:11:19:ac:de:50:b3:f6:a0:
41:3b:2b:6a:12:00:3e:ea:f7:0e:51:69:13:9e:64:56:69:f2:
99:53:e1:59:85:79:72:45:20:dc:c1:ad:39:24:2d:e7:02:ee:
75:19:01:b7:55:de:62:32:b4:30:5f:8f:2d:fd:2c:77:41:96:
ed:f7:dc:18:6f:25:63:71:86:97:67:07:59:c4:00:58:3c:8e:
5d:45:45:3f:75:e5:c6:9f:1a:05:ae:af:36:62:23:50:6d:57:
4d:87:01:7e:cd:a1:24:32:c6:6a:18:2b:54:68:9c:1b:5a:7b:
7f:78:cc:5a:12:59:18:1d:32:88:b3:67:f8:9c:19:d3:25:fc:
5c:35:be:7b:77:f7:5f:7d:f1:18:fe:52:d1:b1:e7:26:95:3c:
5c:8c:41:6e:9a:3b:62:f6:fd:93:d3:12:cf:0f:b6:dd:df:b7:
dd:2d:2f:69:fe:cf:81:f5:b7:69:ff:77:0b:09:0e:11:83:20:
ec:35:41:bf:19:70:16:d6:f5:48:a5:0a:fa:02:6d:ea:97:94:
76:69:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:19:28 2025 by rpki-client