Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138372e302f32342d3234203d3e20323632373431.roa
File: 3138362e3230382e3138372e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier: m3S01aSB6Di9p9ySatrW4iRweBLMNL+nG6Yo217hv9M=
Subject key identifier: 5D:5D:B4:3D:F4:7D:F5:F4:CB:85:91:30:A2:98:D1:D8:E3:26:78:64
Certificate issuer: /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial: 44F8942283D3FD0221C7DD5835986FA70342473B
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138372e302f32342d3234203d3e20323632373431.roa
Signing time: Tue 09 Jan 2024 21:00:03 +0000
ROA not before: Tue 09 Jan 2024 20:55:03 +0000
ROA not after: Tue 07 Jan 2025 21:00:03 +0000
asID: 262741
IP address blocks: 186.208.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f8:94:22:83:d3:fd:02:21:c7:dd:58:35:98:6f:a7:03:42:47:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Validity
Not Before: Jan 9 20:55:03 2024 GMT
Not After : Jan 7 21:00:03 2025 GMT
Subject: CN=5D5DB43DF47DF5F4CB859130A298D1D8E3267864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:f1:85:9a:6e:2d:af:36:5c:c6:b6:55:46:
9b:e4:ed:c5:71:41:83:3f:ee:ad:1a:bc:30:db:1f:
c1:f6:ab:29:79:12:85:c8:ef:1d:e1:ba:8e:66:a1:
54:d9:28:d0:dd:ee:11:a8:82:f0:e9:80:36:39:62:
b9:3f:e4:8a:50:27:33:c2:25:61:a5:8f:77:7c:99:
24:08:1c:17:ef:87:e1:7c:72:af:3d:dd:64:19:55:
e9:fd:b4:a4:5e:67:63:24:72:7f:aa:9f:0d:b9:7f:
bb:a8:21:dd:4e:8e:95:b9:81:53:85:10:2b:23:31:
b5:b7:d8:67:10:6d:9d:16:70:f2:79:30:c1:8c:c0:
de:39:37:aa:de:32:63:ee:e2:4b:d8:f1:cc:9f:73:
52:35:8b:72:72:86:30:ce:53:c2:4b:39:94:43:f1:
98:83:c6:59:37:7e:00:b1:9a:97:8d:17:8d:de:35:
aa:80:c9:36:6b:23:70:62:a4:7b:11:c7:85:41:fd:
69:d6:e0:37:98:5e:36:a2:48:10:1e:39:6d:c4:ba:
c6:d0:ae:dc:f7:f0:c8:c8:84:ee:f6:cb:6a:da:43:
23:52:b5:7e:05:19:7f:2a:d2:c4:66:b0:82:ad:0d:
fa:72:ae:1f:ca:08:54:2e:7d:10:1c:53:1e:a6:af:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5D:B4:3D:F4:7D:F5:F4:CB:85:91:30:A2:98:D1:D8:E3:26:78:64
X509v3 Authority Key Identifier:
keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138372e302f32342d3234203d3e20323632373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.208.187.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a5:98:b3:69:65:f9:56:c2:71:01:f6:9b:80:f4:04:98:dc:
c3:37:07:0c:09:00:16:f7:d8:51:da:1d:60:d6:bd:56:26:80:
f2:9e:69:a2:7d:bb:43:85:fb:d1:e6:7c:a4:01:ff:76:eb:a4:
30:ad:76:78:89:4c:60:db:ca:36:e3:ed:30:a4:0d:7f:20:18:
fa:3c:af:ce:1f:40:bf:eb:21:01:54:b5:03:d4:98:02:ae:65:
f1:dd:49:b2:9c:e2:aa:d7:34:48:81:90:c7:ec:04:55:7d:50:
ff:f3:2f:97:20:d0:85:39:85:ef:00:04:ca:56:ab:91:94:52:
bd:31:eb:d9:95:11:67:d5:53:70:5c:05:50:4c:25:2b:cf:b1:
91:1b:ea:e8:ee:21:73:6d:32:b7:04:bc:5c:43:4a:04:4c:a2:
c7:6e:2f:5b:f5:1b:36:e6:d7:55:6f:f4:b6:97:bc:18:4b:6b:
dd:7d:30:c3:33:0b:e5:9e:5b:ba:ae:8c:bf:2e:1e:4f:ab:a4:
f0:2a:2a:d3:fb:d8:8c:6d:cb:4a:23:c3:7f:2c:32:7a:5d:17:
52:31:8e:de:3f:60:50:2a:3e:a3:d9:2d:f0:8f:00:e8:cd:c0:
44:85:68:dd:27:8e:56:5e:06:b6:19:a4:f1:01:d6:94:61:8d:
d9:ae:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:44:35 2025 by rpki-client