Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32342d3234203d3e203533303532.roa
File: 3138372e38342e33322e302f32342d3234203d3e203533303532.roa (raw, json)
Hash identifier: JReu8cGFxxLvA4Jdlc1SX2dVoJNJ3KsK3BHRHFp4m5I=
Subject key identifier: A6:6D:4C:9B:96:21:32:96:31:4B:D9:8D:F3:FA:55:B2:C5:5D:E9:C3
Certificate issuer: /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial: 41F6057065034EF7FF33582D24A7F2B537577B8B
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32342d3234203d3e203533303532.roa
Signing time: Mon 30 Sep 2024 18:02:02 +0000
ROA not before: Mon 30 Sep 2024 17:57:02 +0000
ROA not after: Mon 29 Sep 2025 18:02:02 +0000
asID: 53052
IP address blocks: 187.84.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f6:05:70:65:03:4e:f7:ff:33:58:2d:24:a7:f2:b5:37:57:7b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Validity
Not Before: Sep 30 17:57:02 2024 GMT
Not After : Sep 29 18:02:02 2025 GMT
Subject: CN=A66D4C9B96213296314BD98DF3FA55B2C55DE9C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:0c:fc:c2:20:a4:86:be:48:b8:1e:69:59:
4d:2d:28:30:ea:a9:c6:05:f1:18:ef:98:d1:47:98:
12:24:90:6b:6f:62:04:87:3c:50:72:38:94:7c:a8:
e8:37:5f:df:4e:8d:14:8f:b5:c9:3d:24:e0:19:c0:
37:29:25:6e:af:bb:b6:3c:db:04:af:29:ce:aa:f0:
19:55:69:c1:b4:f4:65:f6:89:1d:0b:54:ac:13:c9:
fd:a5:44:9f:5b:c5:d5:49:fa:f9:d1:e8:59:bf:8d:
bd:74:89:a8:34:ca:15:fa:1b:92:20:9c:05:34:7d:
3e:38:08:18:e6:d4:80:d6:71:a7:ae:59:36:e4:e0:
4a:34:ac:44:48:2c:a6:c1:08:fb:e6:be:af:52:d2:
2b:cc:f2:76:4b:23:72:75:b0:26:cb:1c:31:0d:c6:
ad:81:42:b4:fc:1e:8b:70:51:2b:4b:38:51:b6:65:
35:b1:f2:3f:ea:4a:aa:c8:eb:f1:53:56:91:d3:97:
8d:b7:c4:f1:db:15:31:69:66:a4:8c:01:69:12:0c:
74:d5:0b:78:42:30:32:98:38:df:27:9e:a5:26:2e:
7a:5a:dd:28:bf:13:8d:3f:66:74:a7:e8:e6:90:70:
06:c5:81:30:cc:fc:7c:2a:d3:7e:75:f5:ff:c5:e1:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6D:4C:9B:96:21:32:96:31:4B:D9:8D:F3:FA:55:B2:C5:5D:E9:C3
X509v3 Authority Key Identifier:
keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32342d3234203d3e203533303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.84.32.0/24
Signature Algorithm: sha256WithRSAEncryption
72:bd:ef:52:2d:bc:b8:2c:00:3a:11:fe:72:f2:33:f8:a6:17:
70:53:eb:54:fc:fe:ce:e8:d4:fe:f9:dd:41:da:a1:fa:90:68:
38:34:42:05:e1:c5:58:c9:06:9b:7a:0f:36:97:21:49:e9:87:
22:62:bb:78:11:74:ca:e3:a3:a3:fd:11:f8:72:b4:e1:c2:1c:
d3:09:68:0a:34:7e:f2:da:ca:43:ae:2b:6c:8a:f9:0f:9e:dc:
39:a4:06:79:1f:38:67:42:52:a9:08:f2:4c:8b:ba:56:68:79:
9e:8f:61:2d:89:cb:45:46:32:0f:56:30:0c:11:b3:13:9a:11:
86:8f:08:68:61:b6:60:93:6b:b6:2c:5a:6c:b2:40:c9:7a:a0:
4b:5a:7e:64:06:c5:3b:62:1c:9c:00:00:18:a9:6e:91:e6:33:
5f:7b:5c:37:cf:f7:6c:ab:77:0e:26:ae:19:cc:34:8c:7b:41:
17:0c:9d:6b:cf:a6:14:48:d7:6f:f0:4d:b8:45:f0:54:28:5e:
39:5e:e0:fb:25:d3:ae:c0:dd:18:27:3e:48:98:ba:ad:2e:97:
87:4b:4f:fb:e2:15:67:92:0a:8a:36:ec:85:30:eb:fd:17:d2:
5e:be:a4:0a:81:82:f8:54:78:51:88:1d:59:0a:e7:92:c6:7d:
ce:4b:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:57:46 2025 by rpki-client