Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33342e302f32342d3234203d3e203238323630.roa
File: 3138372e39352e33342e302f32342d3234203d3e203238323630.roa (raw, json)
Hash identifier: iqCKilZp+ZWFCpF7vbswa59Vt2ALbZFwvKhgi95Yigk=
Subject key identifier: 6B:1D:33:11:66:4A:A9:32:97:88:CE:79:B1:BC:1F:B4:47:98:C0:4F
Certificate issuer: /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial: 33629C44DFD9BD2AE46F29B0E7BB8C33ED1ECC6A
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33342e302f32342d3234203d3e203238323630.roa
Signing time: Thu 09 Mar 2023 20:17:56 +0000
ROA not before: Thu 09 Mar 2023 20:12:56 +0000
ROA not after: Thu 07 Mar 2024 20:17:56 +0000
asID: 28260
IP address blocks: 187.95.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:62:9c:44:df:d9:bd:2a:e4:6f:29:b0:e7:bb:8c:33:ed:1e:cc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Validity
Not Before: Mar 9 20:12:56 2023 GMT
Not After : Mar 7 20:17:56 2024 GMT
Subject: CN=6B1D3311664AA9329788CE79B1BC1FB44798C04F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8f:fe:35:c1:14:ae:a6:19:47:16:1b:21:9e:
b9:6b:9e:62:b4:01:b8:4f:1a:ae:54:49:09:96:dc:
7b:89:7b:c9:3e:b0:12:f3:ee:94:8a:61:a7:7b:ac:
49:14:d5:43:c1:aa:2b:38:86:e5:d3:6f:8f:e4:ca:
b7:6b:c4:66:6b:45:fc:e7:ec:54:35:5c:e4:02:46:
e5:3b:0f:69:65:00:51:bb:fb:ce:14:47:a4:76:b8:
12:d5:e9:9e:e6:70:b8:bd:5f:a7:ef:ca:b6:7d:9d:
71:9b:0b:de:04:0d:34:88:d0:af:ca:4d:21:d2:4b:
2a:5c:a0:c7:14:12:e7:54:78:8a:bb:8b:41:ff:3d:
b4:2a:d9:5a:f9:2d:7c:b9:85:6b:5d:10:e5:ee:a3:
d2:35:a5:63:8b:40:73:bb:bd:3f:9d:0e:2c:12:ce:
47:3a:2d:b9:49:2a:ab:4d:6a:57:4c:c1:bc:ab:d3:
13:14:01:ce:63:b5:a5:31:82:dc:1b:24:20:9c:fd:
45:8e:d6:e2:a0:dc:21:8a:16:2f:e1:dd:09:03:ad:
5f:c2:4c:fd:af:3d:98:7f:5f:ed:0e:dc:80:59:85:
36:70:81:1d:5d:c7:f1:13:6d:96:71:49:b0:80:04:
b9:04:ad:fb:aa:20:6a:83:40:5f:87:f4:35:b6:17:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:33:11:66:4A:A9:32:97:88:CE:79:B1:BC:1F:B4:47:98:C0:4F
X509v3 Authority Key Identifier:
keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33342e302f32342d3234203d3e203238323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.95.34.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3c:df:85:e4:c7:95:b1:8f:13:d5:7e:b5:42:27:df:a6:fc:
b2:e2:5d:ef:3f:f4:e2:57:3e:eb:02:ea:a3:ac:b9:6c:66:4a:
fc:f2:f6:3a:8e:a8:cb:d3:77:e0:1a:85:aa:1a:52:f7:12:17:
9d:88:0a:0f:59:36:e2:bb:9c:3c:86:3e:50:00:3b:fb:31:36:
32:ae:6d:d6:a1:68:b2:64:a2:59:01:54:80:84:91:50:9c:76:
a5:75:36:ab:04:f1:df:37:bf:a0:26:35:1d:c5:4b:89:c5:ac:
d7:d2:3d:a8:a8:3f:2d:17:f5:22:fb:2a:db:b8:d7:2c:1d:2f:
b2:73:de:7a:5b:6f:36:28:88:c1:db:71:5e:e5:b9:ae:fc:a9:
29:f4:9d:f9:c8:8a:ed:a4:31:b7:a8:6c:b1:61:ee:93:13:62:
75:99:3d:2e:19:d2:95:79:b1:db:17:e2:3c:0f:73:fa:66:9a:
8a:af:09:fd:c4:73:e5:ad:c6:84:52:3d:e4:d3:22:a4:79:92:
f3:19:7b:4f:3c:6b:e6:e6:26:c2:80:5b:28:c8:1b:94:c4:2e:
ba:fc:cd:6a:ac:42:ef:62:29:b8:3c:39:6a:d3:50:c1:ad:96:
a1:ce:70:6a:35:ba:c7:30:69:48:38:24:4a:38:86:87:fb:4f:
5d:fb:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:12 2025 by rpki-client