Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32342d3234203d3e203238323338.roa
File: 3138362e3231362e3232342e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: 0nDkgnZtvk1nx2BZAje/cg32sAC1oNko6YGTgIVWvf8=
Subject key identifier: 76:8B:E4:B5:44:31:39:91:28:93:21:A8:E3:B0:72:1B:71:78:B4:C5
Certificate issuer: /CN=CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E
Certificate serial: 596A3E72D7388F6E7E1C1B9E484CEF82932FFDA1
Authority key identifier: CD:30:B1:01:39:C2:FD:27:FD:78:AA:A0:33:9B:7B:F9:7C:F0:7B:2E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32342d3234203d3e203238323338.roa
Signing time: Wed 02 Apr 2025 18:51:18 +0000
ROA not before: Wed 02 Apr 2025 18:46:18 +0000
ROA not after: Wed 01 Apr 2026 18:51:18 +0000
asID: 28238
IP address blocks: 186.216.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6a:3e:72:d7:38:8f:6e:7e:1c:1b:9e:48:4c:ef:82:93:2f:fd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E
Validity
Not Before: Apr 2 18:46:18 2025 GMT
Not After : Apr 1 18:51:18 2026 GMT
Subject: CN=768BE4B544313991289321A8E3B0721B7178B4C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:9c:1f:f6:3e:7c:6b:00:6d:62:c6:db:2d:
40:4a:3e:99:ea:18:ca:f9:94:c4:ce:1c:e5:45:99:
33:d7:7e:7d:a4:13:f2:ac:2c:2e:dd:9a:59:eb:02:
17:43:a1:56:b7:80:8e:6f:56:3f:76:0d:3c:fa:a0:
f6:ea:63:c1:ef:63:72:aa:11:66:1a:8d:89:42:b0:
6c:e4:9e:87:3c:7a:3b:5f:58:48:b3:ee:ad:90:6c:
a3:ef:c3:58:06:40:d9:10:d8:6e:85:bf:80:ac:55:
e3:e0:05:81:33:a5:c1:0c:60:d8:be:38:f5:df:8c:
31:e4:87:fa:ef:82:8c:3a:5f:49:4f:f1:f4:11:2e:
17:fb:fa:99:66:43:b9:63:f9:cc:be:f5:fc:e5:f6:
aa:cc:71:cd:90:b2:7d:4a:c6:6d:9b:f7:fc:3f:97:
2e:7a:9f:ba:30:45:8b:be:3e:4c:97:f3:ff:d3:e2:
a9:8c:8f:a1:76:c0:3f:57:87:a5:4c:84:9f:8a:6f:
e2:d7:02:8a:f1:e7:b0:3f:4c:fd:5d:8c:b3:ec:93:
37:36:dc:87:95:eb:50:19:e1:c0:be:48:c4:da:ad:
72:f2:4a:0d:15:72:74:16:08:1c:49:67:a4:7a:4a:
11:de:9c:ed:62:ab:a5:de:28:a1:f0:9e:7c:fc:64:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8B:E4:B5:44:31:39:91:28:93:21:A8:E3:B0:72:1B:71:78:B4:C5
X509v3 Authority Key Identifier:
keyid:CD:30:B1:01:39:C2:FD:27:FD:78:AA:A0:33:9B:7B:F9:7C:F0:7B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.216.224.0/24
Signature Algorithm: sha256WithRSAEncryption
78:fa:20:05:e7:fb:0b:bf:49:7a:37:ed:e6:bf:86:d4:ce:56:
3d:b2:34:15:3d:a6:94:8d:8c:63:aa:eb:42:e9:e6:4e:ba:bd:
0b:77:2b:ee:1a:87:88:cf:fc:77:8e:a2:db:55:30:4f:01:71:
fa:70:15:77:b5:9e:f2:43:83:b7:76:23:79:ee:28:32:82:0a:
f8:f3:f1:38:49:ce:6d:80:c0:65:0d:19:1a:e5:70:ce:45:ea:
0d:2f:83:80:ec:62:82:d2:f5:11:bd:1b:71:93:90:77:02:27:
ed:b3:22:89:c3:d4:46:fe:a4:8c:de:b8:ec:f9:d6:ca:8c:1c:
c2:6e:3d:6b:38:44:b3:c9:ae:26:e2:26:b0:47:c0:63:9c:40:
bb:b7:82:89:7b:40:7a:6d:c3:41:9d:12:30:fd:68:5b:94:2e:
37:e4:10:ec:c7:5e:73:08:44:f1:ac:85:05:16:4e:84:44:0d:
3f:a3:bf:2c:c4:6e:8c:13:4d:42:bb:36:e7:4a:1b:e1:12:ef:
f5:25:9d:3b:4e:c3:9c:d5:86:da:0c:ca:53:b4:7c:b7:3a:82:
e4:86:c2:f6:21:41:b2:23:11:08:fc:17:a5:62:8c:18:40:bc:
28:d4:22:0c:0b:6e:ed:92:79:b0:e4:3b:70:e3:bd:23:8a:7d:
5a:b9:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:04:21 2025 by rpki-client