Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235312e302f32342d3234203d3e20323636313633.roa
File: 3138362e322e3235312e302f32342d3234203d3e20323636313633.roa (raw, json)
Hash identifier: +B6xTtJoyYgU6fxmMl2J8vbVf6+p2ej684EJdzOvRNs=
Subject key identifier: E5:FD:A8:62:1F:B3:40:8F:F7:2D:0C:05:8B:9F:68:7D:FB:72:B5:FD
Certificate issuer: /CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Certificate serial: 49D0AA349435B3B0A73CE84CB36CF2D6CA81765A
Authority key identifier: 2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235312e302f32342d3234203d3e20323636313633.roa
Signing time: Fri 20 Dec 2024 21:17:05 +0000
ROA not before: Fri 20 Dec 2024 21:12:05 +0000
ROA not after: Fri 19 Dec 2025 21:17:05 +0000
asID: 266163
IP address blocks: 186.2.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d0:aa:34:94:35:b3:b0:a7:3c:e8:4c:b3:6c:f2:d6:ca:81:76:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Validity
Not Before: Dec 20 21:12:05 2024 GMT
Not After : Dec 19 21:17:05 2025 GMT
Subject: CN=E5FDA8621FB3408FF72D0C058B9F687DFB72B5FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:1f:bf:8f:dd:a1:fb:b3:26:d5:8f:9b:ce:
aa:65:68:63:8f:92:5e:f0:e8:8c:74:9a:43:84:b5:
01:d1:fa:9b:c9:a4:66:e0:3c:06:c8:70:60:76:10:
97:f6:18:50:71:8e:68:af:3c:5a:c2:36:a3:6c:0f:
6b:f3:9c:f0:9c:db:f5:2e:0e:31:25:1d:fc:48:b8:
5a:48:1f:37:57:88:7b:8c:1d:ee:aa:6a:a1:bc:b2:
bf:27:45:2f:a1:58:29:10:f0:b6:6b:a2:6f:66:5d:
f2:72:2b:fb:0c:c8:df:2b:0e:db:39:ee:f3:d8:df:
57:ed:bf:a4:99:46:f4:a5:a9:c2:ef:9d:b7:c3:1e:
a2:88:b8:27:4f:2a:87:d0:21:a6:09:9d:dc:a9:7b:
be:d6:b0:6d:12:72:eb:0f:2a:d9:7d:1b:e5:ae:33:
45:b6:e9:df:b8:ca:83:3b:13:28:7c:d1:a9:d9:35:
72:88:2b:8b:58:7f:62:c4:a6:04:8f:40:dc:ea:bd:
21:1d:6e:e6:5d:33:97:ed:0f:e4:f7:4a:2d:90:c6:
4a:8e:03:ce:2a:aa:31:bd:c2:ad:bd:7d:42:6b:33:
fb:c3:24:54:7d:7f:43:48:f7:52:6d:5a:bc:78:5e:
dc:4f:47:cf:bb:14:34:ff:c1:71:30:52:ad:6d:11:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FD:A8:62:1F:B3:40:8F:F7:2D:0C:05:8B:9F:68:7D:FB:72:B5:FD
X509v3 Authority Key Identifier:
keyid:2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235312e302f32342d3234203d3e20323636313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.2.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3c:b2:7e:f6:23:e2:be:38:77:11:4a:a9:9e:26:ea:71:64:
9a:87:4f:20:02:18:e2:58:84:01:1f:0c:c6:ad:00:4d:9b:cf:
fd:34:47:94:7f:ac:48:1a:d7:07:01:e6:84:18:88:33:25:f7:
ef:b3:f5:6c:4a:88:0d:43:42:c8:24:d5:d4:a5:da:57:7f:12:
b9:fd:a5:db:0b:ca:44:b8:68:4f:9e:03:bc:46:13:09:62:06:
c5:a3:5b:6f:62:5d:9b:d7:ae:82:af:0f:06:01:c9:a5:98:b3:
66:29:21:aa:bb:b6:43:f2:17:03:fc:bf:99:6e:9f:a5:ab:6c:
8b:3e:28:b3:6d:d9:11:6f:20:ad:7d:32:81:24:23:35:26:67:
97:20:2c:32:d2:a8:ef:5f:a3:33:18:b9:67:7d:b0:6a:b0:ef:
c3:d6:64:8d:f5:9e:9d:f0:f9:c7:fa:37:59:70:9d:00:2a:8e:
1d:1f:b4:4c:e3:05:86:cf:55:2d:55:95:df:ea:57:41:1a:da:
5d:95:2b:93:b8:f6:cf:26:86:29:e7:4a:c0:16:d7:89:c9:66:
b8:14:d3:2b:1c:67:88:09:2a:bd:8d:5d:5e:be:5a:92:72:50:
be:d3:a8:fd:9d:ef:b0:f8:06:1b:ff:ec:52:5f:ed:9a:4e:93:
de:c6:45:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:37:25 2025 by rpki-client