Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
File: 3136382e3139342e36302e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier: /2Yz3CBHNqlq7ukEM8ZOKAf4YaUzcbdJd417LDNk4eM=
Subject key identifier: A9:76:FF:95:10:86:93:38:39:D4:CF:54:14:55:90:B6:EE:B4:A3:C6
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 19F589186C4E72BED633F7B1D58E4AC437A30526
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
Signing time: Mon 25 Nov 2024 17:04:00 +0000
ROA not before: Mon 25 Nov 2024 16:59:00 +0000
ROA not after: Mon 24 Nov 2025 17:04:00 +0000
asID: 28287
IP address blocks: 168.194.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f5:89:18:6c:4e:72:be:d6:33:f7:b1:d5:8e:4a:c4:37:a3:05:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:59:00 2024 GMT
Not After : Nov 24 17:04:00 2025 GMT
Subject: CN=A976FF951086933839D4CF54145590B6EEB4A3C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:e6:7b:6f:72:85:27:f5:1b:8b:63:de:51:
51:0d:2c:27:a0:99:8e:40:6e:9e:5d:b9:04:94:a9:
9b:6b:f6:82:aa:a1:77:58:d1:3b:07:6f:20:ac:af:
2a:b5:a2:25:60:9b:1c:92:ed:95:bf:41:95:f2:de:
49:30:b3:c4:fd:a5:c8:c2:53:c7:ae:00:a4:ff:cc:
57:11:85:e7:07:d4:0d:c6:c4:ff:8e:8d:98:c5:92:
c1:8a:81:98:6d:bb:0a:3a:ca:41:5e:f2:05:79:77:
c5:30:6d:bd:31:0d:8c:39:12:7f:bd:6a:3e:74:8d:
8d:c8:71:bb:7f:08:95:7e:ec:b1:03:2d:47:3a:9c:
5c:72:cf:7b:b3:ae:d5:8f:2c:51:db:9e:d4:da:81:
f8:49:b1:dc:55:ab:e1:a4:e0:1a:0b:2c:00:bc:f7:
fb:42:6a:91:49:fa:c3:97:ad:98:10:ca:bb:86:8d:
c3:2c:0c:5d:2e:87:cd:34:bb:38:d5:b1:ff:a2:0d:
fe:85:21:51:71:f6:65:c0:cf:8a:4b:5b:c9:d8:25:
00:44:f2:be:3e:1c:f1:ba:17:5a:92:3b:1f:27:ec:
fe:73:82:5b:93:91:fb:f7:2f:12:d2:1d:d3:18:35:
ab:24:67:55:38:1c:17:16:8f:18:20:b8:5a:37:36:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:76:FF:95:10:86:93:38:39:D4:CF:54:14:55:90:B6:EE:B4:A3:C6
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.60.0/22
Signature Algorithm: sha256WithRSAEncryption
96:d7:29:bd:c9:af:37:b9:bb:99:7e:d4:7b:7c:be:75:48:8a:
4a:ec:17:4d:f1:dd:87:21:d0:c4:a1:74:70:85:56:1d:b7:2f:
45:0c:f3:47:0b:d2:91:cb:47:64:1b:5c:7e:e4:17:72:f0:08:
73:a9:b9:30:19:86:dd:75:55:27:93:27:5b:ea:1c:73:3d:d7:
79:bb:3e:a2:ed:62:46:be:5a:89:60:27:31:fd:bb:c5:6b:7e:
65:5e:c4:1a:d4:39:c3:45:ec:79:17:ea:e6:00:e3:cb:05:d6:
0d:16:8a:0f:23:cb:0f:b0:7c:09:3f:a1:a6:79:09:3b:61:48:
87:e2:27:c6:c6:a5:ff:44:71:7d:d3:36:33:10:a3:55:56:ea:
e8:a7:50:85:1a:31:0d:81:de:2d:c4:cb:52:82:27:e4:72:43:
a4:6c:0c:bd:db:a7:53:72:ea:26:6c:b6:16:9a:5c:43:8b:f6:
12:88:8f:04:e1:e3:71:4e:7a:b6:cd:1a:68:bb:57:4f:52:68:
78:0a:ab:90:91:f4:c7:9c:1f:29:18:1a:29:29:35:6a:ae:e2:
89:65:6c:c4:b3:24:98:b9:d9:c1:48:45:8f:e7:b5:53:7a:1b:
b8:60:b9:e7:a2:d9:d2:46:f4:25:33:0b:e5:37:87:9c:fe:33:
f4:d6:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:22:59 2025 by rpki-client