Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32332d3332203d3e203134383430.roa
File: 3139302e35322e37362e302f32332d3332203d3e203134383430.roa (raw, json)
Hash identifier: tmsWA9AJV43lCljbZo8qrVaUjdUVh8MhJhR066GeIm8=
Subject key identifier: 4B:E8:DA:53:B4:0F:9D:FA:40:23:9A:3B:F4:29:99:E3:39:39:9F:D2
Certificate issuer: /CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
Certificate serial: 4DF119CDD1C9178B7B0371C1A7FAEE6E68D9442F
Authority key identifier: DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32332d3332203d3e203134383430.roa
Signing time: Tue 28 Feb 2023 13:46:34 +0000
ROA not before: Tue 28 Feb 2023 13:41:34 +0000
ROA not after: Tue 27 Feb 2024 13:46:34 +0000
asID: 14840
IP address blocks: 190.52.76.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f1:19:cd:d1:c9:17:8b:7b:03:71:c1:a7:fa:ee:6e:68:d9:44:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
Validity
Not Before: Feb 28 13:41:34 2023 GMT
Not After : Feb 27 13:46:34 2024 GMT
Subject: CN=4BE8DA53B40F9DFA40239A3BF42999E339399FD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:ac:63:21:28:23:89:37:f3:2f:3c:8f:e1:
e9:fa:3e:17:0e:9f:99:f4:ac:d3:04:b5:e8:4b:cb:
dc:7b:27:4a:c6:ac:81:58:6a:ce:07:8b:55:26:4f:
3d:fc:6a:5c:cb:3d:78:e2:a6:73:ac:46:d9:a5:47:
40:6d:bd:38:4c:c2:20:54:5b:58:28:8f:2c:07:db:
65:77:ce:a4:d4:b5:68:33:2d:65:b0:96:81:fc:bf:
48:bc:39:d2:09:02:87:2b:85:4d:6d:50:07:5a:37:
5b:c7:ab:38:e2:4a:5f:11:76:3e:4e:bf:f3:ec:93:
3b:f8:0e:eb:56:f0:3d:b1:a3:da:45:7b:cc:d1:79:
44:02:1b:1a:11:f1:12:a9:91:ad:f8:a1:37:ec:bc:
64:ab:b1:71:b9:f1:78:99:eb:7f:f0:b2:ae:66:b3:
be:53:4d:e5:f3:fc:21:f3:c0:42:1c:7a:65:aa:21:
6d:08:ca:e9:1b:35:c6:aa:eb:36:5f:b0:de:7b:5d:
ee:bf:81:0b:88:96:35:f9:25:38:ed:12:7d:59:6e:
d9:df:b3:47:01:bd:b9:53:c0:b6:21:b5:ba:7f:d2:
91:82:4d:5f:a0:e8:84:e9:0f:3f:ea:79:cf:f8:e4:
3f:5e:89:a6:3e:2c:19:1e:55:c9:6b:d2:06:d8:85:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E8:DA:53:B4:0F:9D:FA:40:23:9A:3B:F4:29:99:E3:39:39:9F:D2
X509v3 Authority Key Identifier:
keyid:DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32332d3332203d3e203134383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.76.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:29:33:bc:0f:cc:61:8f:71:2c:5f:e3:e7:6b:7f:0b:d7:14:
f1:e6:1a:54:55:f8:90:b0:eb:e6:17:14:84:8c:af:07:c7:9b:
24:03:df:ee:3a:dc:46:46:b2:a4:66:82:78:4c:05:64:a0:2f:
fb:83:df:bc:38:90:6f:82:99:b3:e8:3f:ae:32:17:c5:05:b5:
4e:84:27:62:27:e5:06:ce:e2:20:86:b3:40:ae:08:24:16:f7:
08:29:88:f5:56:29:71:bd:91:1d:d5:ad:33:c0:88:5e:95:a3:
3c:ab:5b:16:d5:88:c7:77:b5:0f:b7:ad:bb:75:73:24:d5:e8:
9e:05:b1:96:6d:9c:58:28:60:f0:c8:d5:3c:3d:fe:c5:41:79:
ee:30:b9:6a:e5:9e:f4:65:d1:c5:a7:36:64:8f:7a:ad:b7:2a:
86:ad:04:3d:09:18:a6:6f:39:2d:50:29:e5:fc:a4:c3:8e:43:
b1:48:15:bb:3a:f1:91:aa:0d:e7:9d:61:a1:0e:8b:dc:12:3e:
98:ad:48:fe:05:02:ad:7f:ab:16:72:59:bd:de:b6:94:c8:4e:
2b:20:42:71:47:e5:de:12:33:df:22:de:6f:d7:08:5c:51:55:
da:7b:86:e0:d3:2e:97:d7:47:75:c3:ec:dd:57:9e:7e:d0:5f:
3c:5f:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:17:40 2025 by rpki-client