Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138362e3231362e3132382e302f32302d3234203d3e203238323031.roa
File: 3138362e3231362e3132382e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier: QSqwzYyuwJxa8/ZyO31XSqQE4dJsJHezIv7LVbMs0YU=
Subject key identifier: BE:D5:E8:DD:96:80:09:4C:54:C4:D4:62:35:C0:FA:15:B6:48:90:AC
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 6D992D960AC08A0F1A3D65AB04AB27CFBAEE0D99
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138362e3231362e3132382e302f32302d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:31:24 +0000
ROA not before: Wed 10 Apr 2024 12:26:24 +0000
ROA not after: Wed 09 Apr 2025 12:31:24 +0000
asID: 28201
IP address blocks: 186.216.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:99:2d:96:0a:c0:8a:0f:1a:3d:65:ab:04:ab:27:cf:ba:ee:0d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:26:24 2024 GMT
Not After : Apr 9 12:31:24 2025 GMT
Subject: CN=BED5E8DD9680094C54C4D46235C0FA15B64890AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:97:c1:0a:f5:ff:0c:64:50:b3:70:c1:ab:
95:50:4e:4f:89:8f:a5:71:e3:64:ed:35:6c:83:92:
39:1b:b2:8f:a5:88:f0:11:ad:98:43:6a:04:03:6c:
32:14:3f:3d:78:9b:0a:9b:4c:5c:44:1f:a6:df:0a:
cb:c8:ea:56:60:ef:55:60:74:70:fa:6f:9a:e2:20:
f0:87:2d:0d:6b:dc:58:be:73:70:72:3a:01:52:54:
00:3e:ec:cf:c2:0a:f5:a0:8b:2b:8b:46:52:7f:a0:
00:32:f2:38:ae:aa:5d:87:0b:a9:13:41:4c:f7:66:
7e:15:24:b6:e3:31:72:de:86:10:5c:90:d2:a1:9c:
7e:39:90:72:33:c1:0a:56:b0:30:da:c2:a7:c1:4b:
2b:e4:c7:5b:ac:d6:65:84:d4:28:c0:f6:13:97:b7:
19:37:e0:69:d3:3e:12:9d:d1:27:61:28:e8:c2:cf:
16:d3:e3:b9:c1:5c:f5:8e:e0:13:cd:22:8a:1f:20:
69:d8:2b:d0:db:a8:7b:4f:2a:14:79:72:e1:f0:b6:
a6:fe:9c:60:76:86:ff:8c:62:0c:12:f0:f0:c7:59:
45:4a:14:35:fa:78:cc:ce:8d:55:b9:22:fc:9c:ee:
1d:1e:a4:88:ba:f2:c0:53:bb:15:dd:86:90:69:d6:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D5:E8:DD:96:80:09:4C:54:C4:D4:62:35:C0:FA:15:B6:48:90:AC
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138362e3231362e3132382e302f32302d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.216.128.0/20
Signature Algorithm: sha256WithRSAEncryption
39:cb:cc:ac:9a:ea:30:dd:bb:3b:12:6e:b3:c2:4f:4e:57:0e:
69:b4:fc:21:c4:88:eb:fb:1a:6c:5a:c3:e1:52:b8:1a:4a:c8:
71:19:c8:97:78:dd:be:6f:08:86:5d:61:b3:32:69:67:10:12:
44:96:f0:25:da:a1:34:ec:9d:55:03:01:bb:e8:8e:87:ad:91:
6a:eb:37:47:dc:79:af:a8:a6:c9:91:61:f7:af:68:d0:73:23:
e9:c2:d0:31:2b:b9:67:59:5b:6e:cb:36:7e:dc:4f:a4:6b:cb:
1f:e3:e8:70:5d:02:58:f7:86:54:2f:54:5b:1b:eb:4d:5e:b3:
cf:ad:36:5c:5d:72:87:ba:b1:f7:f0:e5:8f:7d:63:6e:63:d5:
7d:63:86:b1:d3:c8:b6:43:ae:59:fa:d2:a0:bd:f4:ee:f2:24:
fc:1c:d4:37:de:0b:69:45:ee:c1:62:54:2d:10:46:21:01:d0:
d6:c0:c2:7a:6c:05:47:f2:c5:b5:5f:41:c8:63:37:f2:d4:59:
70:67:89:0b:f2:37:43:fd:a5:d5:b9:b3:9e:0e:66:b4:5c:4d:
9b:4e:bd:94:00:e7:40:e2:2b:74:a2:e6:01:61:63:0f:25:18:
a5:6d:28:70:16:ba:61:9b:89:35:38:0a:24:c7:da:f9:9e:c8:
61:9e:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:45:22 2025 by rpki-client