Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3232312e302f32342d3234203d3e203238323936.roa
File: 3138392e33362e3232312e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier: W2ZgcxZXb3wqorNpuD3qgAUJCraqWYw7OMJvGHBiOF0=
Subject key identifier: 75:9A:30:27:DB:68:56:D7:AF:96:D9:F0:FF:7D:8B:3B:69:F1:18:C1
Certificate issuer: /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial: 362297FD95C54D57EC925505C04E4549D339B112
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3232312e302f32342d3234203d3e203238323936.roa
Signing time: Sun 01 Dec 2024 22:45:47 +0000
ROA not before: Sun 01 Dec 2024 22:40:47 +0000
ROA not after: Sun 30 Nov 2025 22:45:47 +0000
asID: 28296
IP address blocks: 189.36.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:22:97:fd:95:c5:4d:57:ec:92:55:05:c0:4e:45:49:d3:39:b1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Validity
Not Before: Dec 1 22:40:47 2024 GMT
Not After : Nov 30 22:45:47 2025 GMT
Subject: CN=759A3027DB6856D7AF96D9F0FF7D8B3B69F118C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:26:5f:78:11:da:89:47:4a:08:a3:97:35:
d4:82:76:34:1a:02:4a:3e:90:03:23:26:bd:83:db:
68:61:56:af:73:50:20:63:0f:43:08:59:d5:92:50:
55:f4:c0:d3:43:5e:ba:17:75:3d:ec:bd:b7:3d:95:
9e:52:81:8f:d0:84:3e:28:0f:90:ad:ea:63:6b:94:
63:c0:7b:d6:d4:89:5d:60:fa:14:64:15:a1:aa:2f:
19:fb:8d:37:29:d0:07:75:25:f1:96:bd:14:78:92:
21:a6:3b:02:59:64:78:01:e1:fc:55:49:3f:35:a5:
19:06:06:39:f2:b8:a6:c9:28:4c:48:dc:7d:71:6a:
da:0b:4b:0c:9a:08:14:28:6c:57:1b:61:62:78:42:
8b:8b:0d:3e:96:b2:3a:61:a2:10:7e:c2:8c:7b:c6:
41:dd:0a:0d:a0:cb:2d:4d:68:90:2c:27:39:88:fa:
71:1f:ca:af:63:be:d2:60:77:76:5c:8c:87:f6:28:
6d:5a:b5:70:bd:c9:d9:39:3f:03:31:88:c0:42:c3:
d4:8c:ad:99:d6:40:39:48:b0:31:5e:32:df:eb:40:
6e:96:75:ca:99:b2:6a:96:fe:a1:38:ee:3f:bd:6f:
2c:be:16:d9:fa:44:14:18:7b:08:e2:2c:43:88:ab:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9A:30:27:DB:68:56:D7:AF:96:D9:F0:FF:7D:8B:3B:69:F1:18:C1
X509v3 Authority Key Identifier:
keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3232312e302f32342d3234203d3e203238323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.36.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:51:f2:19:d4:86:2f:64:4d:dd:8d:04:93:58:e7:e6:8c:df:
9d:51:95:ab:17:ec:8b:f2:f3:83:7b:ba:52:8e:f8:ea:4c:16:
39:ce:b0:7a:dc:e6:6d:30:ed:c4:f3:d7:6c:bc:3a:bb:13:d5:
ec:87:82:78:2b:f9:62:5b:2d:87:bb:04:42:91:b8:5d:08:ab:
1d:c4:c8:ed:a8:d4:62:8f:88:52:cf:bb:42:91:06:05:a2:c7:
63:ee:92:5b:93:28:40:60:47:dc:a6:58:49:ee:d8:2a:2f:af:
a8:80:1f:99:f8:24:1d:bc:00:fd:c6:36:35:6e:55:fe:b4:6e:
ed:ba:6d:06:fa:a1:b7:47:3e:1e:9b:25:d9:f5:e1:12:31:43:
63:a5:d4:2f:4c:89:27:bd:74:60:19:1f:a6:fb:05:62:b0:a2:
96:07:3d:22:03:43:da:2f:8c:20:b7:13:3e:1a:c0:52:ca:85:
5a:f8:89:3b:d4:e3:d5:55:d4:31:c9:31:ff:88:c0:10:c3:81:
1b:73:97:0a:d1:6f:16:1a:6f:96:3a:1c:ce:8a:73:c1:9e:5c:
b6:2a:93:ad:66:8e:53:67:b2:2f:b1:f9:40:28:08:ac:6d:82:
5a:a4:8f:9f:80:a2:8b:c4:5a:05:6a:01:4a:e0:8e:9c:a6:15:
77:a5:f6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:37:21 2025 by rpki-client