Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3230392e302f32342d3234203d3e203238323936.roa
File: 3138392e33362e3230392e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier: 5dC5oyMFy99kqEA5/QFaW3Om8WgJJuFGNJh+Ne1logw=
Subject key identifier: 03:08:36:6A:66:32:29:4F:D8:6C:D6:C8:26:43:77:F8:65:59:1C:AB
Certificate issuer: /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial: 54677A478F220E985114039002FB4637FBCEA683
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3230392e302f32342d3234203d3e203238323936.roa
Signing time: Sun 01 Dec 2024 22:43:35 +0000
ROA not before: Sun 01 Dec 2024 22:38:35 +0000
ROA not after: Sun 30 Nov 2025 22:43:35 +0000
asID: 28296
IP address blocks: 189.36.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:67:7a:47:8f:22:0e:98:51:14:03:90:02:fb:46:37:fb:ce:a6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Validity
Not Before: Dec 1 22:38:35 2024 GMT
Not After : Nov 30 22:43:35 2025 GMT
Subject: CN=0308366A6632294FD86CD6C8264377F865591CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:40:42:10:b2:04:33:47:12:e9:e1:82:c3:42:
2d:5c:b1:85:1b:17:ba:f4:0d:6b:e4:83:f9:45:07:
62:1b:46:c1:c2:9d:c3:a0:0f:77:ca:bc:e5:32:9c:
23:8c:a1:29:1a:10:51:6c:57:38:ab:6f:34:9a:b2:
50:ea:6a:b7:a9:bf:07:1c:bd:eb:2e:72:9b:d6:fb:
cc:91:e2:a0:71:d7:d1:01:44:ef:7c:d6:c8:e3:b9:
89:33:13:c7:4a:76:6c:9a:28:b9:ba:ad:6b:6d:09:
30:50:1f:78:0c:a7:f4:11:e9:c4:9b:fe:60:f9:31:
26:8b:d5:d3:9b:26:ec:ac:aa:cb:00:d7:b1:04:d8:
46:86:fc:0f:f4:c1:49:79:08:d5:b5:af:64:3a:f0:
39:2b:69:74:3c:f8:84:3e:79:14:d0:ca:f8:76:c4:
62:b6:dc:83:70:83:b9:de:67:fa:6f:da:bd:15:f5:
ab:d0:c0:e6:9d:d5:78:15:d1:28:0d:54:c1:d0:45:
10:01:c1:7e:a4:8b:33:46:0f:9f:0a:a0:d3:31:85:
ee:8f:63:ba:f0:fe:18:a4:82:e2:48:c3:fd:b0:c7:
c1:b7:6f:f0:d4:fd:14:ab:a3:92:79:2a:c9:c3:5a:
9f:f5:62:f0:35:f6:bd:ed:26:ec:7e:63:1d:9f:a4:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:36:6A:66:32:29:4F:D8:6C:D6:C8:26:43:77:F8:65:59:1C:AB
X509v3 Authority Key Identifier:
keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3230392e302f32342d3234203d3e203238323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.36.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a6:dd:cb:52:25:ee:8f:20:52:27:b7:7a:6f:f6:6c:a6:c4:
be:df:12:51:9b:5d:e4:51:93:c1:4b:55:9e:26:62:c3:36:02:
aa:7b:87:bc:06:bf:ec:2e:b8:d5:53:b5:84:a7:23:c4:ec:15:
f5:d3:82:42:7c:d9:93:c5:fd:bc:70:f2:f4:9c:35:aa:4f:b2:
86:85:d4:06:2f:fe:84:d1:43:46:95:fd:31:6b:89:0c:74:aa:
a1:26:72:f0:3f:71:5d:ec:c9:8e:a4:b0:74:3f:41:78:c9:17:
e1:4e:15:db:78:e6:0a:55:25:0c:c8:f9:2a:e0:57:55:a7:6b:
99:4f:e5:03:44:57:14:67:cb:62:1e:cb:e6:c7:c1:50:58:1f:
69:39:12:b0:04:2f:ce:4f:0a:84:2f:11:42:c7:0b:da:b0:81:
5d:4f:ac:99:dc:c8:bc:ec:21:0b:25:77:8b:9a:ff:90:fd:cf:
9a:23:3c:c1:ca:26:9b:88:d6:93:ab:27:90:51:c9:2b:4f:50:
5d:00:c4:69:e0:1d:3b:cc:dc:fb:ad:0b:e7:25:8a:1e:a8:70:
57:3e:76:3f:f6:99:ad:22:22:25:9b:4f:6e:c3:43:9e:6e:14:
e8:7a:b1:23:25:21:20:fe:80:b7:58:ad:27:9d:3b:15:16:90:
18:67:41:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:37:14 2025 by rpki-client