Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32322d3232203d3e20323632373431.roa
File: 3138362e3230382e3138302e302f32322d3232203d3e20323632373431.roa (raw, json)
Hash identifier: GUf5GCviCXLx/yp4iish9rK2gweez6rdtcASKSBWZJc=
Subject key identifier: B4:13:A8:24:CE:87:8F:19:20:57:4C:7B:47:35:A4:86:83:45:B2:8E
Certificate issuer: /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial: 4428D20FDA8FEA379DD8A981583B9438D693DA25
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32322d3232203d3e20323632373431.roa
Signing time: Tue 09 Jan 2024 21:00:01 +0000
ROA not before: Tue 09 Jan 2024 20:55:01 +0000
ROA not after: Tue 07 Jan 2025 21:00:01 +0000
asID: 262741
IP address blocks: 186.208.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:28:d2:0f:da:8f:ea:37:9d:d8:a9:81:58:3b:94:38:d6:93:da:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Validity
Not Before: Jan 9 20:55:01 2024 GMT
Not After : Jan 7 21:00:01 2025 GMT
Subject: CN=B413A824CE878F1920574C7B4735A4868345B28E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:43:b7:3b:fe:75:99:0e:28:5b:f1:fd:f9:
f5:33:6d:3e:ac:24:ad:97:f3:92:54:1b:51:cb:7f:
1a:78:74:b5:b3:ed:10:70:1c:5a:59:b3:21:33:59:
cc:5a:52:20:5a:90:c0:c1:8a:eb:88:bf:ce:d6:57:
d0:55:d5:29:d4:84:bb:3a:03:a8:3d:a0:63:99:3d:
02:2e:f3:60:b7:46:5f:56:6e:8f:81:bf:b9:54:40:
3f:fa:06:02:72:20:84:80:8c:45:c4:8d:a8:7f:59:
97:39:06:52:3c:20:22:62:9f:d3:26:80:cf:0f:9e:
af:8c:53:c8:ed:ec:1d:58:2f:77:c8:b0:fe:2d:36:
13:2c:a0:d7:4c:9a:00:4c:c9:49:42:f3:fd:29:d0:
6c:3d:d3:db:4c:e9:19:00:dd:9d:20:7b:98:9b:c6:
f0:66:58:6e:a7:e9:4e:34:bd:e3:d7:32:66:0f:52:
59:f2:1f:9d:33:3d:41:6b:ce:b2:b5:da:e9:e7:21:
23:a3:f6:9c:e9:6c:fe:4d:3e:6b:3b:1a:86:ea:6d:
1f:e6:87:79:b4:98:49:cb:79:ea:76:51:d4:1c:d9:
d1:3b:4f:38:da:e0:66:b5:12:99:b1:e1:00:17:c7:
6d:6c:07:73:c4:73:e1:a3:c9:80:76:ba:60:9c:a7:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:13:A8:24:CE:87:8F:19:20:57:4C:7B:47:35:A4:86:83:45:B2:8E
X509v3 Authority Key Identifier:
keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32322d3232203d3e20323632373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.208.180.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:82:fb:0e:01:46:2a:a6:f7:23:3d:f8:6b:4c:74:b5:0f:cd:
e0:65:09:89:67:09:f0:77:34:76:8c:01:ef:50:92:58:5d:b8:
dc:90:7f:f6:d1:f2:9d:6c:60:a5:40:d4:94:b3:95:8e:12:0b:
62:e4:75:82:ef:0d:5d:92:82:ef:3f:94:d9:cd:dd:85:fb:af:
03:3c:c4:be:92:bd:6b:3d:90:78:9c:03:24:4c:32:71:55:2f:
80:8d:86:78:3a:44:ec:e5:c8:05:e9:a0:4c:f1:a6:7d:4b:a8:
49:17:87:f3:11:48:5a:b8:c4:3a:fb:87:d5:f2:4a:7b:cd:71:
4b:46:be:16:a3:49:86:76:25:4c:6f:e6:68:c5:ff:6c:ae:74:
c7:d2:0d:0c:0c:12:35:41:b7:e0:e7:2c:f7:95:94:eb:e2:3a:
8d:32:d0:b8:30:a4:95:36:d3:a8:9d:bd:4c:06:3b:c5:09:ba:
ff:7a:d3:fc:27:29:bb:3d:0c:38:04:d6:02:f2:75:9e:d0:0a:
02:5c:39:f5:c7:c5:89:a1:49:3a:34:e6:97:1d:11:e0:ee:9c:
bc:3f:c9:93:9c:7f:81:80:27:2b:25:dc:ae:e5:8a:86:3a:fb:
6f:d6:30:a0:fd:c5:16:d0:91:a0:78:5b:70:80:b4:dc:6c:a1:
f6:7d:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:48 2025 by rpki-client