Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e38352e302e302f31392d3234203d3e20323632363539.roa
File: 3138372e38352e302e302f31392d3234203d3e20323632363539.roa (raw, json)
Hash identifier: 4kLp7XK4RL7AAArNtM+AM5q5GExFroMwUYCyOYtBsdU=
Subject key identifier: 86:AE:0E:F6:5A:9F:4A:2B:7D:03:97:E2:48:96:B1:F1:2F:EB:E9:19
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 095A74807B2A8E0C866A12C452B247CB26F048EE
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e38352e302e302f31392d3234203d3e20323632363539.roa
Signing time: Mon 25 Nov 2024 17:04:27 +0000
ROA not before: Mon 25 Nov 2024 16:59:27 +0000
ROA not after: Mon 24 Nov 2025 17:04:27 +0000
asID: 262659
IP address blocks: 187.85.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5a:74:80:7b:2a:8e:0c:86:6a:12:c4:52:b2:47:cb:26:f0:48:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:59:27 2024 GMT
Not After : Nov 24 17:04:27 2025 GMT
Subject: CN=86AE0EF65A9F4A2B7D0397E24896B1F12FEBE919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:c3:73:92:55:7d:39:b8:53:fa:f1:9d:e5:
c3:6d:f1:ae:7f:e0:2c:97:6e:e6:d3:3a:50:2e:1d:
71:16:e6:21:3b:da:d1:a7:66:5e:93:41:c3:0e:82:
12:4b:b6:bd:c8:a7:83:8c:b4:98:58:ed:a5:b4:87:
66:bf:61:f6:b6:7b:3d:1a:ce:5f:0b:07:73:ed:3c:
26:e4:79:09:59:88:2e:3c:0e:ac:53:ae:b1:f5:5d:
1a:50:d9:d6:7a:90:0b:2a:ca:49:17:79:e5:a0:bb:
64:72:ce:08:01:a4:e4:83:5c:54:db:77:40:01:16:
f5:c3:ca:69:34:a9:b9:ba:96:66:6b:d7:63:dc:18:
89:5e:25:15:85:c8:9d:6d:36:71:bb:15:49:06:4c:
64:d5:41:c4:5e:de:63:71:ce:92:01:6d:08:e0:11:
c2:4d:55:9a:af:30:3e:fa:98:be:0f:c3:55:2c:77:
97:1c:9c:01:e8:8b:88:56:2c:36:3e:79:3d:1f:1b:
d3:de:ff:b2:35:80:f6:bc:c8:86:52:99:4d:3d:98:
21:36:da:a5:a1:52:1b:ec:3d:4d:56:32:13:29:e4:
4b:17:2d:4c:c6:7a:17:be:1f:d0:4f:46:f6:e6:33:
c8:b9:81:a6:49:02:99:4a:d1:de:bd:a1:e3:83:ed:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AE:0E:F6:5A:9F:4A:2B:7D:03:97:E2:48:96:B1:F1:2F:EB:E9:19
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e38352e302e302f31392d3234203d3e20323632363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.85.0.0/19
Signature Algorithm: sha256WithRSAEncryption
40:56:e1:5b:cf:c4:54:0a:a7:a4:f4:26:2d:33:88:f7:67:cf:
6f:ee:2d:df:3b:db:57:88:58:76:9b:68:63:ae:54:a9:b9:b7:
95:e2:da:ac:c3:98:d0:b1:33:4f:61:48:83:64:31:44:42:17:
7d:87:c5:6e:02:18:a7:3f:ff:c0:4a:42:d3:0c:2e:92:b9:f3:
65:c1:b6:af:10:5f:1a:dc:c6:1c:c2:01:a9:c9:44:4b:81:86:
27:28:2d:ae:f9:c2:d8:da:7c:bf:81:4e:9e:5c:fa:cd:cb:46:
ac:f5:1d:6f:d8:f0:59:ba:c1:ab:25:bd:cc:9d:8f:bc:d3:94:
07:52:a1:1b:d3:e1:ab:31:98:5e:a8:57:0e:d7:13:1a:34:c1:
98:04:4b:63:b2:9f:d5:47:d9:1e:5d:1f:6d:d9:c8:7f:a0:19:
ed:21:38:10:95:5f:02:60:a0:e3:21:48:45:82:a6:7d:70:7c:
58:2f:12:4a:6e:a1:ef:79:89:bf:af:fd:be:07:a7:e7:1d:70:
46:a8:f7:52:1d:f5:cb:e1:97:c6:ce:9d:a1:78:99:a8:3d:90:
72:31:7f:2e:49:a6:3b:b2:00:8a:c8:cd:6e:00:03:30:b9:1e:
7d:05:22:17:7c:da:c6:9e:06:9d:86:b6:3b:f4:45:f6:b4:cf:
99:80:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:58:10 2025 by rpki-client