Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231302e302f32342d3234203d3e203238323936.roa
File: 3138392e33362e3231302e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier: racJUuk4NcKxfvxOpLLntBTOJNfp/ltdL2bAiMEs4jk=
Subject key identifier: 4C:09:9A:12:7C:9C:EF:54:84:CD:A0:0E:AC:9B:FA:B1:80:CE:D1:C0
Certificate issuer: /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial: 75DF63304033192098E22B73B585AB4AADD41CA1
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231302e302f32342d3234203d3e203238323936.roa
Signing time: Sun 01 Dec 2024 22:43:08 +0000
ROA not before: Sun 01 Dec 2024 22:38:08 +0000
ROA not after: Sun 30 Nov 2025 22:43:08 +0000
asID: 28296
IP address blocks: 189.36.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:df:63:30:40:33:19:20:98:e2:2b:73:b5:85:ab:4a:ad:d4:1c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Validity
Not Before: Dec 1 22:38:08 2024 GMT
Not After : Nov 30 22:43:08 2025 GMT
Subject: CN=4C099A127C9CEF5484CDA00EAC9BFAB180CED1C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:78:09:fd:1d:15:e9:a9:79:f5:6d:72:63:
fd:70:52:2b:ef:9e:61:cc:dd:f4:f6:f2:57:0f:fd:
9b:64:cf:d3:0e:3e:d9:0c:15:9b:4a:75:59:fd:31:
3f:e1:95:29:f1:9b:7f:ad:36:0b:53:3b:26:11:d8:
81:8c:f5:b0:ee:91:95:cb:4f:d5:ca:41:f8:12:55:
46:b0:25:ae:6d:59:c3:49:a9:15:96:e7:23:72:5b:
55:0d:32:6b:67:86:30:82:d0:bc:0d:75:be:7a:0a:
da:ea:dd:ce:64:db:9c:f2:11:d4:7a:bb:41:0c:6e:
c7:94:e7:02:37:b7:22:ed:28:f3:9a:49:c3:be:34:
65:7a:0c:87:f0:de:ef:13:c3:ca:d6:5e:e9:3b:72:
09:df:9b:08:da:27:56:d2:e5:a2:34:36:e5:c7:78:
02:d0:02:3d:05:2c:e2:20:0f:17:6d:ed:a4:ae:9b:
c0:4b:66:10:70:61:30:d4:a3:90:99:26:22:ad:18:
c5:cc:47:4c:68:35:a5:da:2b:a0:4a:89:5f:09:37:
e2:8d:13:c3:29:0a:1c:66:4a:cc:24:ac:a1:f4:44:
bf:5b:13:e6:d2:77:ce:31:e9:9c:9c:ca:fb:33:5a:
4f:19:2d:5a:17:5b:2b:44:f2:5d:75:16:57:f6:4e:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:09:9A:12:7C:9C:EF:54:84:CD:A0:0E:AC:9B:FA:B1:80:CE:D1:C0
X509v3 Authority Key Identifier:
keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231302e302f32342d3234203d3e203238323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.36.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:78:d3:50:58:8f:9a:8e:41:f0:da:69:60:b9:17:6c:28:04:
fe:ae:bf:42:b5:dc:c4:ef:6a:af:c0:c4:e9:33:b8:b4:d2:ac:
cc:69:89:4d:dc:50:31:ce:c0:3e:46:c6:fd:7c:27:cf:e6:2b:
ad:62:2f:70:94:54:25:d9:77:32:ec:27:1b:fa:cb:47:df:9f:
bb:63:d0:9a:25:f6:4b:b7:75:b7:ed:fa:ab:df:ec:2a:d9:ba:
ce:75:23:da:53:7a:cc:ef:43:a0:69:ec:ee:da:18:b3:d5:1c:
a0:b0:26:d3:d9:5c:03:bc:82:73:e4:48:69:8a:be:db:2a:65:
c9:e4:98:eb:6c:e8:a2:7a:eb:00:39:f2:67:04:77:a7:84:21:
82:50:06:34:14:39:d5:c0:89:1b:26:1a:6a:b6:65:8f:fe:b8:
bf:a6:38:42:e4:6a:bc:74:bd:2b:36:b7:85:22:5d:fa:5d:bb:
c5:f4:39:53:d8:fb:52:d9:0e:a0:1b:cb:44:c8:63:6b:e9:b5:
53:63:35:34:a3:2c:7e:a9:31:55:10:9a:cc:f3:ab:43:16:09:
14:09:5b:23:6e:bd:07:c2:25:c7:6e:cd:e4:a0:7d:51:03:cf:
66:18:45:37:93:08:b3:74:b7:f4:51:03:e8:6b:9c:55:a9:de:
2d:a6:8b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:37:20 2025 by rpki-client