Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa
File: 3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier: TkjOlQZ9BUFA6yoMUc3nf2fRESd8NfCwQ8OGzhNEBZQ=
Subject key identifier: C2:86:F8:51:C6:0D:FC:B3:2D:11:CF:21:29:F2:B6:ED:0E:B8:1C:AB
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 7BE43E402911713689D1A716A1000C25A48A0486
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa
Signing time: Mon 25 Nov 2024 17:04:01 +0000
ROA not before: Mon 25 Nov 2024 16:59:01 +0000
ROA not after: Mon 24 Nov 2025 17:04:01 +0000
asID: 28669
IP address blocks: 179.189.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e4:3e:40:29:11:71:36:89:d1:a7:16:a1:00:0c:25:a4:8a:04:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:59:01 2024 GMT
Not After : Nov 24 17:04:01 2025 GMT
Subject: CN=C286F851C60DFCB32D11CF2129F2B6ED0EB81CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:f8:70:fd:52:ff:b0:8f:dc:8f:55:b0:5e:
3d:df:46:9c:30:54:15:05:e8:56:be:87:80:a5:4c:
9e:95:1a:4d:42:06:f0:f6:e5:dd:5a:38:30:c6:4e:
63:3e:ab:eb:0f:64:79:d9:8a:3d:06:67:5b:d4:fa:
14:7d:7c:44:08:ef:e6:79:5e:e3:94:76:28:db:10:
d6:40:d0:a7:f3:e2:64:9f:af:ea:18:72:51:e1:b8:
be:fe:4d:fc:2f:8c:75:9a:39:a2:86:28:39:b5:d6:
49:36:ca:0b:d0:6e:5a:d5:de:12:d2:4b:4a:82:a3:
6f:4a:b0:7b:57:bc:be:32:d0:79:fd:ee:de:63:72:
34:e7:6c:50:77:20:c2:c5:ce:f2:76:eb:bf:1c:43:
f6:7d:aa:06:fb:3e:d2:ef:c0:f4:02:b2:a4:63:42:
6a:7a:b3:d5:6c:bc:5e:f3:b5:5c:7b:8e:7b:72:e0:
da:a4:a6:f5:0d:f1:84:90:36:b6:70:28:af:6e:f2:
dc:ca:cd:f1:4a:8e:07:b8:83:b7:9a:aa:24:c5:73:
c8:25:22:6c:f3:cb:a0:87:8b:04:d2:ef:d6:2b:24:
68:c6:7a:7b:fc:65:4e:9d:f0:e0:3e:f5:60:ca:aa:
be:13:5c:6b:87:73:db:45:33:aa:1e:72:d9:de:73:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:86:F8:51:C6:0D:FC:B3:2D:11:CF:21:29:F2:B6:ED:0E:B8:1C:AB
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.189.224.0/20
Signature Algorithm: sha256WithRSAEncryption
62:da:b8:81:d5:6a:d0:6a:51:c7:da:0e:48:d3:03:ee:14:b9:
36:24:9c:d9:2f:0d:55:a0:7b:6b:c8:05:c6:d1:f0:22:51:fd:
68:ce:90:eb:f2:73:e9:57:b2:d7:0a:9a:0c:5b:cd:77:c4:56:
3b:49:8d:59:0a:f1:10:57:dd:95:cd:55:6e:93:1d:c9:6c:f9:
a3:4e:20:a2:61:54:05:f1:19:75:af:22:81:c7:9c:92:64:ab:
10:f1:dc:8d:68:ef:ae:a5:3b:1d:aa:07:23:f9:23:16:6d:a8:
eb:9b:42:7d:2d:03:06:63:60:61:49:6a:b5:af:dd:90:4e:34:
fd:66:12:00:fc:65:1a:25:21:1b:4e:7a:f9:8c:23:ca:26:9a:
66:c9:87:f2:71:b1:b2:ba:ae:c9:c4:ba:e0:69:2d:08:95:7f:
86:b6:60:cf:ca:04:f6:74:e8:9b:ab:0b:9a:1e:2c:7f:72:a4:
c7:ce:d9:e3:54:08:84:10:af:c7:88:95:4d:ad:a7:74:3b:36:
bf:00:48:6a:61:6e:a8:80:54:98:0a:ec:68:f5:70:e8:78:f1:
54:f5:8c:61:a8:95:d9:8a:8b:de:1b:01:92:47:c7:45:c2:65:
e8:11:b1:a2:c3:42:1c:91:54:45:68:90:80:d5:c6:9b:40:28:
82:61:be:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:29:40 2025 by rpki-client