Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CFqiX3aKdb2jrCK4tWk4sEJtDuPgKycFr5THPac1quBu/0/3138392e38392e34382e302f32302d3234203d3e20323632373531.roa
File: 3138392e38392e34382e302f32302d3234203d3e20323632373531.roa (raw, json)
Hash identifier: aWzudDy5e7v/jke3TUsH3x5DksYQWtPG18XawCNLg9k=
Subject key identifier: 84:A3:98:55:C1:29:13:44:49:8C:D4:5F:E6:2D:46:F0:1C:5B:55:69
Certificate issuer: /CN=9699C0DC7CBF5E4753DC807EB09E66771759F81A
Certificate serial: 481214772B589AB316D2D2BCCCE18CC9EA458F2F
Authority key identifier: 96:99:C0:DC:7C:BF:5E:47:53:DC:80:7E:B0:9E:66:77:17:59:F8:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9699C0DC7CBF5E4753DC807EB09E66771759F81A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CFqiX3aKdb2jrCK4tWk4sEJtDuPgKycFr5THPac1quBu/0/3138392e38392e34382e302f32302d3234203d3e20323632373531.roa
Signing time: Mon 11 Apr 2022 00:28:10 +0000
ROA not before: Mon 11 Apr 2022 00:23:10 +0000
ROA not after: Mon 10 Apr 2023 00:28:10 +0000
asID: 262751
IP address blocks: 189.89.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:12:14:77:2b:58:9a:b3:16:d2:d2:bc:cc:e1:8c:c9:ea:45:8f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9699C0DC7CBF5E4753DC807EB09E66771759F81A
Validity
Not Before: Apr 11 00:23:10 2022 GMT
Not After : Apr 10 00:28:10 2023 GMT
Subject: CN=84A39855C1291344498CD45FE62D46F01C5B5569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:a9:be:66:a9:a1:68:c1:34:99:94:f3:8a:
2d:67:f0:44:ee:a5:45:af:70:8e:c6:e5:9b:4c:15:
2a:72:fc:88:e8:68:08:8c:50:ca:b3:4a:c0:15:91:
74:9a:db:32:08:6b:ae:a3:a5:ce:0a:f0:ac:8d:fe:
35:b6:80:63:85:a9:2c:a4:73:b0:af:c3:81:46:d9:
8d:40:c4:6f:80:ed:c8:6b:59:d6:62:52:92:eb:a4:
6f:93:88:ed:ac:45:e6:ae:4c:32:66:a6:e0:f8:e4:
c4:c0:b5:89:f1:4b:16:1d:89:4c:4e:39:af:bb:82:
91:16:76:e5:08:e7:36:ed:ef:a3:7d:4d:7e:c9:e4:
da:6f:a8:4a:a5:50:5c:4b:39:28:af:e3:6c:b2:4a:
9c:7d:53:86:9f:4c:4d:f6:4b:ff:53:63:35:52:ea:
2d:ba:01:8e:a8:a1:55:fb:c1:26:8a:54:ce:57:d1:
f5:19:c8:a2:ad:17:d1:0e:0a:fa:7d:77:58:74:69:
1a:13:5c:51:05:04:b2:cd:f4:e6:87:b7:de:a6:66:
df:99:ab:0b:76:31:df:c9:8c:ce:62:fe:db:bf:02:
89:b6:81:bf:94:16:b1:05:53:60:0d:d8:3b:e1:be:
97:82:88:fc:90:9e:35:1a:c1:53:30:ba:48:33:90:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A3:98:55:C1:29:13:44:49:8C:D4:5F:E6:2D:46:F0:1C:5B:55:69
X509v3 Authority Key Identifier:
keyid:96:99:C0:DC:7C:BF:5E:47:53:DC:80:7E:B0:9E:66:77:17:59:F8:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CFqiX3aKdb2jrCK4tWk4sEJtDuPgKycFr5THPac1quBu/0/9699C0DC7CBF5E4753DC807EB09E66771759F81A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9699C0DC7CBF5E4753DC807EB09E66771759F81A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFqiX3aKdb2jrCK4tWk4sEJtDuPgKycFr5THPac1quBu/0/3138392e38392e34382e302f32302d3234203d3e20323632373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.48.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:98:75:96:45:fa:b3:9d:a7:3d:15:5d:69:3e:10:3c:8e:f5:
69:76:e9:72:b9:22:82:35:f8:bf:ee:30:c4:9f:9d:57:bf:69:
31:7e:35:16:f6:72:ee:bb:e9:67:e1:9b:5c:7a:c3:3d:46:79:
a1:b6:37:c6:e0:33:a1:23:28:20:eb:9d:b6:58:0c:a8:74:32:
6d:c8:5d:e0:21:ee:a2:d2:cc:42:13:e0:34:74:d5:b1:a7:34:
c1:da:39:f7:56:1b:ef:a5:a2:ad:d5:58:e7:31:d0:38:9c:0b:
0d:ec:7a:3c:28:42:6a:83:ef:06:31:bf:0e:3d:ba:bc:98:c0:
13:ff:23:3a:15:a9:b5:c5:09:69:8c:54:34:85:6c:75:46:5f:
84:57:3e:95:e7:dc:7c:66:9b:bb:07:e1:e3:67:19:87:66:75:
ae:e5:19:43:39:b5:10:c4:ed:c7:4e:2f:eb:37:2d:f1:f6:14:
68:37:82:b6:41:20:a3:c3:f3:71:6e:0a:ba:35:85:ea:ce:24:
9c:f6:67:55:0f:29:0c:49:d8:5f:a4:fc:67:be:ed:eb:35:e6:
71:20:5e:b3:4f:7a:18:72:fb:7d:d2:8e:49:8b:f1:47:51:27:
9b:fb:c6:28:9b:74:75:23:e3:db:30:83:0b:c0:fb:50:16:6e:
44:b4:dd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:24 2025 by rpki-client