Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138362e3139342e39362e302f32302d3230203d3e203238323130.roa
File: 3138362e3139342e39362e302f32302d3230203d3e203238323130.roa (raw, json)
Hash identifier: 9u2acxJUe4MLpllF3SP7B+gWEXdB7mvoXQYN8ETZS6k=
Subject key identifier: 23:FA:4E:1E:6F:F8:05:BB:AB:5D:15:B5:0A:8B:20:BA:B2:7D:48:B0
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 3F611CE0548F39B46D22A44F1E6B7E55B4D27497
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138362e3139342e39362e302f32302d3230203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:23 +0000
ROA not before: Wed 28 Feb 2024 13:58:23 +0000
ROA not after: Wed 26 Feb 2025 14:03:23 +0000
asID: 28210
IP address blocks: 186.194.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:61:1c:e0:54:8f:39:b4:6d:22:a4:4f:1e:6b:7e:55:b4:d2:74:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:23 2024 GMT
Not After : Feb 26 14:03:23 2025 GMT
Subject: CN=23FA4E1E6FF805BBAB5D15B50A8B20BAB27D48B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:5f:16:e3:fc:3e:cb:03:9a:85:35:0a:bb:
63:42:02:bf:0f:67:2f:72:33:a7:5f:3a:d5:a4:11:
c9:cf:bf:92:3b:0b:4a:a1:61:a8:de:09:49:16:8a:
3f:f2:bf:32:3e:8a:ec:52:48:f7:2e:36:10:d3:d6:
a6:ef:79:64:6d:b8:03:c9:a2:74:55:57:5e:e3:fe:
eb:32:aa:ec:92:e1:78:73:72:a2:aa:d0:4d:cf:57:
ec:38:4b:23:b2:bd:d9:69:7f:b9:2e:96:2f:6e:0e:
14:dd:d8:3f:20:07:b2:e1:06:74:49:8a:a4:b2:70:
d5:ed:de:a5:0d:d8:21:e4:53:34:f8:bb:2c:ce:81:
56:40:56:46:c0:f0:01:e0:cd:2d:8b:38:a3:b4:ba:
5d:10:48:ae:2c:55:48:78:4d:59:c2:19:89:0f:53:
ef:a8:64:fb:aa:8a:ca:d1:e9:4f:eb:3c:c4:fe:ca:
c7:20:e8:ed:98:0a:45:02:4e:cf:91:01:b5:4a:de:
59:f8:99:59:da:ec:92:81:cf:9f:17:9f:2e:80:f9:
fa:ae:5e:fd:e0:b8:d6:9c:66:59:63:05:60:cc:76:
0c:fa:6d:27:d4:a3:76:a3:06:8d:90:73:ec:03:b0:
48:e4:20:eb:5c:fc:01:4c:82:a4:38:93:88:98:68:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FA:4E:1E:6F:F8:05:BB:AB:5D:15:B5:0A:8B:20:BA:B2:7D:48:B0
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138362e3139342e39362e302f32302d3230203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.194.96.0/20
Signature Algorithm: sha256WithRSAEncryption
cb:a0:7c:c1:57:c9:37:cf:c6:07:cd:e2:86:df:06:5b:e7:57:
61:cb:8a:8d:d7:da:04:4e:50:f4:8b:e7:08:96:13:f5:7e:8b:
33:34:0b:d0:da:5d:3d:af:44:c8:66:fc:2d:5c:c2:f8:10:88:
18:a7:83:76:ef:64:d3:a2:09:4f:2a:e3:fd:d8:47:d7:36:b6:
04:71:c7:44:4c:d9:c5:39:ef:70:29:36:9d:e8:3d:6f:12:49:
bd:dc:c2:84:2e:26:fd:97:4b:11:0b:a0:3f:a9:5e:bf:57:1e:
5a:ca:3b:ea:88:b4:b6:0b:c3:40:24:f5:46:3d:4d:0c:1a:95:
05:c9:95:81:cf:75:04:17:4f:c4:06:0a:97:0e:39:21:1d:b8:
d0:7b:da:fa:51:d7:fe:bb:57:aa:9f:29:ae:0a:db:d9:34:28:
45:04:06:db:d1:e5:a0:bd:21:36:de:1f:54:78:d5:a8:bc:10:
80:5c:30:1b:a3:97:82:73:5c:f2:47:ea:62:07:25:d1:4b:73:
4c:6c:0b:be:61:9b:5f:ac:4c:01:0f:5a:6d:13:f5:86:8e:a0:
28:a8:27:53:3f:e3:d3:92:43:94:9d:d5:72:75:c9:5a:10:63:
df:1b:ac:74:38:9e:3d:60:86:d0:2d:8a:da:ed:54:2f:b0:29:
c3:d7:33:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org