Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138372e38362e36342e302f32302d3234203d3e203238323031.roa
File: 3138372e38362e36342e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier: ZrBGdgbp17O24HfWNwSfY2MxPKUHD7kmU8EvXGGDZIo=
Subject key identifier: BF:7F:73:5F:4D:26:EC:63:2F:86:C2:1D:F0:6C:89:86:51:81:1F:B3
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 1DFE33B650C1CB5F8903AAB4503240088E53201A
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138372e38362e36342e302f32302d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:30:11 +0000
ROA not before: Wed 10 Apr 2024 12:25:11 +0000
ROA not after: Wed 09 Apr 2025 12:30:11 +0000
asID: 28201
IP address blocks: 187.86.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:fe:33:b6:50:c1:cb:5f:89:03:aa:b4:50:32:40:08:8e:53:20:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:25:11 2024 GMT
Not After : Apr 9 12:30:11 2025 GMT
Subject: CN=BF7F735F4D26EC632F86C21DF06C898651811FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:72:43:f8:80:63:76:7f:e6:45:c4:32:78:35:
18:6a:e3:6c:ec:af:5e:35:b1:8b:56:3a:91:37:d8:
f1:07:d8:5f:30:a5:4e:5f:aa:86:52:4a:a1:5a:6a:
c2:35:6a:e0:cc:38:26:52:bf:b8:dd:b2:45:ca:c2:
77:50:d8:61:2a:71:f4:39:ca:ed:8c:d2:c1:cd:70:
5c:a9:7a:24:7f:2a:87:fe:e2:a8:20:ea:90:08:76:
1f:d2:44:79:f2:cb:70:28:0c:de:92:97:f2:a0:80:
62:c0:38:bc:5c:00:6b:5a:d5:3b:b2:7d:3b:b2:33:
da:a4:b0:73:e0:ab:e8:a5:48:bf:dc:c6:7e:99:be:
c2:96:9a:29:fd:3f:e5:4c:d1:e6:40:c6:02:9c:02:
21:8e:b2:1d:8e:d5:2c:ea:46:72:8d:ed:b5:f6:0f:
52:a3:91:29:ae:a3:0b:56:56:4c:75:1c:d5:d0:0c:
ff:e0:86:f5:9c:6c:fa:b8:2d:c5:92:fe:b9:da:ed:
32:11:07:f8:8d:50:0c:28:31:12:a2:fe:81:5c:01:
86:5e:b9:e8:61:cd:35:76:e4:2e:03:8d:4b:aa:e9:
fe:e1:3c:49:ac:3f:4e:c1:90:d6:c9:ec:71:25:2a:
05:63:f2:7f:4e:e1:78:02:a1:f5:ce:95:bd:10:ec:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7F:73:5F:4D:26:EC:63:2F:86:C2:1D:F0:6C:89:86:51:81:1F:B3
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138372e38362e36342e302f32302d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.86.64.0/20
Signature Algorithm: sha256WithRSAEncryption
90:dd:5f:a5:ea:a2:05:2e:34:2b:35:4c:84:d6:df:cc:2b:97:
b4:aa:c2:18:6f:39:64:82:d5:6a:c4:11:3c:b9:bd:ae:67:97:
aa:77:0a:05:b5:94:4f:1d:0b:fe:63:46:a2:97:ab:0c:8d:b6:
67:aa:73:1b:74:fb:89:d3:5f:bf:bc:46:6d:61:27:c3:45:d7:
c4:a6:40:1e:b0:db:f1:6d:ee:1e:ba:90:63:5c:09:fd:a6:58:
d6:90:aa:c7:ab:88:7b:19:ec:8d:6f:2b:d2:33:0b:23:7a:a1:
6e:8e:4d:1d:74:2d:b4:97:fa:5f:fe:35:7d:6a:3b:ad:db:a4:
ab:c8:ec:18:95:83:74:3d:c0:aa:1d:5b:6e:69:44:65:52:d9:
ca:3a:46:f4:93:ed:5c:c2:51:1a:4c:3a:6b:cd:93:c0:f3:a5:
28:80:e8:fa:0c:14:4e:02:55:ff:d3:18:f8:d3:91:17:c1:f2:
ea:c2:c7:80:5c:b4:40:10:08:18:4f:b0:35:2b:03:98:28:a6:
1e:59:86:95:56:e7:5c:f8:3b:72:96:d0:b5:ed:2a:c1:af:80:
c9:28:44:87:a2:25:8d:f0:85:55:f0:24:0c:e8:87:9c:5a:19:
54:e0:7a:03:3f:5e:1f:5a:f5:35:8e:85:a3:09:08:7c:0e:eb:
35:81:15:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org