Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/1/3138372e39352e33322e302f32302d3234203d3e203238323630.roa
File: 3138372e39352e33322e302f32302d3234203d3e203238323630.roa (raw, json)
Hash identifier: +6NLtDQPBEusNJ7OcRzgnjuyn8Ozijp3KRpGUIsZwMQ=
Subject key identifier: B4:B7:A6:9F:74:05:B8:E9:BD:9E:53:EE:C6:A0:F2:95:88:3A:17:F3
Certificate issuer: /CN=7187431AA80F5681C6D1467914031DF3EC61E97B
Certificate serial: 73F37D15CEAD20B9F8380DFC74FF51998FA0FA7E
Authority key identifier: 71:87:43:1A:A8:0F:56:81:C6:D1:46:79:14:03:1D:F3:EC:61:E9:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7187431AA80F5681C6D1467914031DF3EC61E97B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/1/3138372e39352e33322e302f32302d3234203d3e203238323630.roa
Signing time: Wed 03 Apr 2024 23:55:21 +0000
ROA not before: Wed 03 Apr 2024 23:50:21 +0000
ROA not after: Wed 02 Apr 2025 23:55:21 +0000
asID: 28260
IP address blocks: 187.95.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:f3:7d:15:ce:ad:20:b9:f8:38:0d:fc:74:ff:51:99:8f:a0:fa:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7187431AA80F5681C6D1467914031DF3EC61E97B
Validity
Not Before: Apr 3 23:50:21 2024 GMT
Not After : Apr 2 23:55:21 2025 GMT
Subject: CN=B4B7A69F7405B8E9BD9E53EEC6A0F295883A17F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:db:b4:64:3f:1e:a8:86:ee:a5:d3:87:15:ee:
f0:e2:86:e7:80:a1:8c:05:d6:0b:51:65:93:c2:95:
ad:ac:a1:d3:26:34:60:f5:ec:b1:91:71:75:a7:c5:
10:0d:6b:77:97:ac:fa:d3:79:24:54:3c:71:7a:5b:
37:de:e5:32:fe:dd:68:ac:77:28:19:b0:75:00:34:
86:a2:74:f6:a4:f5:92:77:b4:3a:ba:83:5e:fd:f7:
5b:17:ba:b6:e9:bb:ae:b8:72:25:69:69:63:29:c3:
9b:03:fb:6c:06:7f:11:c8:21:73:91:18:f3:45:2d:
1f:1b:8b:a6:8c:46:ce:84:24:60:40:b6:e3:03:86:
79:15:85:ca:38:97:ea:b0:3c:1d:98:80:f7:16:5c:
5c:fd:76:72:33:4f:9b:60:51:3b:2c:e6:5a:2f:f9:
28:cf:20:dc:7b:d8:a8:ee:0f:c7:63:9f:17:2e:1d:
35:cd:71:65:04:15:f3:5f:3a:11:da:de:57:cb:c0:
c3:51:25:72:4e:35:fd:ae:1e:23:d9:74:a3:4b:f7:
e8:a4:32:02:98:87:70:61:59:24:d9:98:3e:61:9a:
0d:64:42:a0:45:9f:13:4d:94:6d:d1:9c:dd:9e:ea:
45:b1:ff:37:5b:67:64:89:14:4b:a9:0e:a2:4c:0d:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B7:A6:9F:74:05:B8:E9:BD:9E:53:EE:C6:A0:F2:95:88:3A:17:F3
X509v3 Authority Key Identifier:
keyid:71:87:43:1A:A8:0F:56:81:C6:D1:46:79:14:03:1D:F3:EC:61:E9:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/1/7187431AA80F5681C6D1467914031DF3EC61E97B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7187431AA80F5681C6D1467914031DF3EC61E97B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/1/3138372e39352e33322e302f32302d3234203d3e203238323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.95.32.0/20
Signature Algorithm: sha256WithRSAEncryption
33:d7:10:0a:38:00:12:da:b8:3c:b5:57:8c:88:bd:ed:2f:03:
fd:7d:60:f8:ca:19:76:95:3f:b3:f8:0e:d4:f4:be:73:ef:4d:
c8:6f:c1:6e:fd:d5:54:8f:2e:9b:72:9c:0c:b0:bf:76:65:10:
f2:4f:13:03:fe:09:98:9e:ef:4e:73:5b:62:22:97:17:b2:11:
05:0e:8c:2b:33:42:86:99:80:af:f4:56:fd:c1:66:aa:1c:2b:
81:f6:bb:05:49:fe:0b:48:1a:68:f8:b8:20:d7:fb:ce:49:01:
b9:a0:b1:44:45:b8:e9:72:24:41:fc:46:28:33:6c:c1:47:38:
5c:1c:25:74:78:f0:73:af:de:69:bd:4c:2c:2d:c5:a0:00:f2:
c1:e7:c5:bb:55:f2:13:db:86:21:85:74:e5:4a:7a:e1:88:67:
cf:12:07:82:cb:30:19:0a:40:eb:4d:77:74:fe:8e:c7:4f:56:
ca:0b:20:4e:16:7a:19:58:a7:f9:8f:b5:08:1d:ed:03:bb:dc:
da:f8:82:c5:e8:24:5b:05:f1:47:94:b3:ee:61:c4:44:60:9a:
64:b7:b9:df:38:48:6a:ee:07:f2:4d:d5:25:03:af:42:28:fc:
50:cf:9b:22:d7:6e:9b:49:3f:bf:49:cb:48:d9:40:fa:7e:97:
be:11:1c:be
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUc/N9Fc6tILn4OA38dP9RmY+g+n4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE4NzQzMUFBODBGNTY4MUM2RDE0Njc5MTQwMzFERjNF
QzYxRTk3QjAeFw0yNDA0MDMyMzUwMjFaFw0yNTA0MDIyMzU1MjFaMDMxMTAvBgNV
BAMTKEI0QjdBNjlGNzQwNUI4RTlCRDlFNTNFRUM2QTBGMjk1ODgzQTE3RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn27RkPx6ohu6l04cV7vDihueA
oYwF1gtRZZPCla2sodMmNGD17LGRcXWnxRANa3eXrPrTeSRUPHF6Wzfe5TL+3Wis
dygZsHUANIaidPak9ZJ3tDq6g17991sXurbpu664ciVpaWMpw5sD+2wGfxHIIXOR
GPNFLR8bi6aMRs6EJGBAtuMDhnkVhco4l+qwPB2YgPcWXFz9dnIzT5tgUTss5lov
+SjPINx72KjuD8djnxcuHTXNcWUEFfNfOhHa3lfLwMNRJXJONf2uHiPZdKNL9+ik
MgKYh3BhWSTZmD5hmg1kQqBFnxNNlG3RnN2e6kWx/zdbZ2SJFEupDqJMDfeZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUtLemn3QFuOm9nlPuxqDylYg6F/MwHwYDVR0j
BBgwFoAUcYdDGqgPVoHG0UZ5FAMd8+xh6XswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMS83MTg3NDMxQUE4MEY1NjgxQzZEMTQ2NzkxNDAzMURGM0VDNjFFOTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxODc0MzFBQTgwRjU2ODFD
NkQxNDY3OTE0MDMxREYzRUM2MUU5N0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzEv
MzEzODM3MmUzOTM1MmUzMzMyMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMy
MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLtfIDANBgkqhkiG9w0BAQsFAAOCAQEAM9cQCjgAEtq4
PLVXjIi97S8D/X1g+MoZdpU/s/gO1PS+c+9NyG/Bbv3VVI8um3KcDLC/dmUQ8k8T
A/4JmJ7vTnNbYiKXF7IRBQ6MKzNChpmAr/RW/cFmqhwrgfa7BUn+C0gaaPi4INf7
zkkBuaCxREW46XIkQfxGKDNswUc4XBwldHjwc6/eab1MLC3FoADywefFu1XyE9uG
IYV05Up64YhnzxIHgsswGQpA6013dP6Ox09WygsgThZ6GVin+Y+1CB3tA7vc2viC
xegkWwXxR5Sz7mHERGCaZLe53zhIau4H8k3VJQOvQij8UM+bItdum0k/v0nLSNlA
+n6XvhEcvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org