Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138372e38362e39362e302f32302d3230203d3e203533303539.roa
File: 3138372e38362e39362e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier: 514JgKCs0JHAdcARbAOU8lAmzanhAXUKygYi4W3uJwM=
Subject key identifier: 17:2D:21:8F:16:B0:79:43:D9:EF:A2:FA:63:04:C8:D8:95:A9:B8:99
Certificate issuer: /CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
Certificate serial: 0D6D728F90292AEE301B995336E58A4C816385C0
Authority key identifier: 8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138372e38362e39362e302f32302d3230203d3e203533303539.roa
Signing time: Mon 23 Jan 2023 21:54:56 +0000
ROA not before: Mon 23 Jan 2023 21:49:56 +0000
ROA not after: Mon 22 Jan 2024 21:54:56 +0000
asID: 53059
IP address blocks: 187.86.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6d:72:8f:90:29:2a:ee:30:1b:99:53:36:e5:8a:4c:81:63:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
Validity
Not Before: Jan 23 21:49:56 2023 GMT
Not After : Jan 22 21:54:56 2024 GMT
Subject: CN=172D218F16B07943D9EFA2FA6304C8D895A9B899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:56:57:4e:fc:44:71:2f:ff:70:b9:17:e4:f1:
88:b2:54:f9:df:3e:9f:1e:b5:a7:01:1f:05:c0:29:
c6:1e:0e:c0:70:94:bd:c0:4a:69:c6:5d:91:82:a0:
9f:7f:54:c4:0b:0d:ed:ea:f5:76:42:22:46:64:b9:
68:b9:fa:94:aa:d9:46:69:2a:2b:94:07:03:db:91:
fe:d6:cb:70:73:3f:6b:e2:d5:99:4c:eb:b3:9c:91:
0a:ba:de:3e:f2:a2:0c:0c:9d:18:77:60:f1:25:99:
0d:e2:49:55:56:7d:85:1c:31:72:8b:54:97:78:99:
27:3a:f6:52:85:5e:ed:77:5d:81:81:fc:bf:3f:45:
ff:e9:a4:ea:11:28:79:38:3d:1e:63:f4:f5:39:81:
bf:0c:35:4c:8a:2d:d1:f0:04:45:a8:ba:5c:90:4c:
29:ad:97:37:2b:0b:60:1b:31:37:29:82:1d:4d:a1:
82:7a:17:4b:8c:fd:65:66:ba:7c:80:d3:fb:c9:91:
ce:45:ce:e8:c8:85:06:79:85:bf:46:20:72:af:cb:
3d:92:ed:a4:e9:79:16:2e:ca:77:9d:c4:90:46:7a:
7f:fb:7f:2e:81:d9:ed:b3:c0:8b:41:51:27:de:3b:
0b:d8:6b:36:d1:e3:eb:15:20:88:ee:d6:ea:dc:19:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:21:8F:16:B0:79:43:D9:EF:A2:FA:63:04:C8:D8:95:A9:B8:99
X509v3 Authority Key Identifier:
keyid:8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/8C51D86B9680AA2A78981AECD45959BAEE0144E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138372e38362e39362e302f32302d3230203d3e203533303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.86.96.0/20
Signature Algorithm: sha256WithRSAEncryption
53:24:7e:4f:60:a8:f7:21:90:8c:9f:d1:af:66:ef:95:92:f1:
14:9c:34:9c:a4:18:d2:56:5b:9a:0e:5a:fb:06:56:ef:fd:20:
e6:7a:4c:b5:c3:7e:7a:54:52:95:94:d8:10:d3:ae:0e:62:45:
61:7b:41:89:64:48:45:25:79:4d:11:df:24:25:2f:ad:74:1b:
74:19:07:ec:8d:b4:e3:e7:a4:bc:6f:9b:b1:ca:ce:5b:e0:58:
c0:41:3b:0b:0b:e6:8b:ae:2e:c8:e6:bc:f7:97:ce:c5:c2:9c:
b6:f2:2a:9b:80:07:ec:92:90:0f:81:a7:50:ad:b4:d6:70:ce:
a6:31:22:a9:f0:10:7b:c6:d7:ce:2d:05:72:ff:c3:62:ce:d0:
6e:0e:63:57:70:a1:d9:43:89:1b:f3:d2:1c:05:75:1e:fd:81:
91:38:b2:c1:bf:85:65:e4:7c:5f:16:1a:de:cc:7f:88:1e:0d:
02:a7:d0:b8:93:fd:a5:c1:e0:38:9b:70:83:66:e6:88:ef:36:
ed:f0:2e:81:89:f4:12:3a:78:60:3c:08:cc:17:2d:02:bb:f8:
63:d3:fb:cb:99:e6:80:22:10:07:d0:f6:45:25:5a:29:9e:74:
e1:41:58:b9:a7:86:b8:f3:ab:5c:8b:03:c8:77:71:82:7d:c5:
c1:e2:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:29:02 2025 by rpki-client