Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38382e302f32332d3233203d3e203533313835.roa
File: 3138362e3232372e38382e302f32332d3233203d3e203533313835.roa (raw, json)
Hash identifier: jSgejpgvRQ/FlVVm3TweGvVq0kvrl3CFM5Ui+SjnfRo=
Subject key identifier: D6:D9:D5:84:68:ED:A4:A4:52:1F:90:68:36:29:40:D6:05:0B:42:2D
Certificate issuer: /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial: 2AC8D22A947DCB7FB10FD5DC8C23D86B1611F836
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38382e302f32332d3233203d3e203533313835.roa
Signing time: Sat 15 Jul 2023 03:18:54 +0000
ROA not before: Sat 15 Jul 2023 03:13:54 +0000
ROA not after: Sat 13 Jul 2024 03:18:54 +0000
asID: 53185
IP address blocks: 186.227.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c8:d2:2a:94:7d:cb:7f:b1:0f:d5:dc:8c:23:d8:6b:16:11:f8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Validity
Not Before: Jul 15 03:13:54 2023 GMT
Not After : Jul 13 03:18:54 2024 GMT
Subject: CN=D6D9D58468EDA4A4521F9068362940D6050B422D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:b2:eb:0d:18:58:fa:fa:5c:ec:7e:ac:9f:
01:c8:6e:88:d4:c1:46:f8:98:aa:05:3b:82:4f:52:
f2:23:0c:d5:d3:29:dd:17:3e:a6:db:bb:b5:cf:a9:
23:7e:98:93:62:bd:8f:4f:9a:ae:e8:c0:36:a7:4f:
c4:6f:3e:5d:59:cd:f5:dd:e9:ce:2d:ca:7d:3e:b3:
7f:43:8f:62:a9:59:d3:c0:21:15:d4:07:cf:41:af:
da:76:fb:eb:80:d6:50:75:f5:05:04:12:7c:4e:e9:
21:da:46:10:cc:b7:b9:17:e7:6a:fa:59:72:11:99:
7a:2c:04:10:1e:91:f8:d0:29:0a:5b:2f:b8:4a:a6:
03:50:f6:28:16:06:d4:dc:12:dd:ea:69:4a:a4:fe:
94:ca:7a:bc:58:fe:87:a9:0c:06:d7:6e:65:a1:a7:
f5:d5:99:55:c0:c0:d1:bd:ce:e5:25:bc:d6:b5:f1:
81:64:8b:08:5f:91:b5:81:18:cb:1d:b5:72:ab:96:
cb:5f:72:83:8a:2e:39:9e:4e:11:10:43:bd:9e:2c:
af:8c:f0:97:44:12:69:71:6e:52:1d:bd:15:e9:d1:
17:a0:13:8b:14:af:5e:2f:1e:4e:c0:76:83:9a:7c:
49:1b:0a:88:c8:50:56:ae:67:12:94:f6:32:a9:dc:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D9:D5:84:68:ED:A4:A4:52:1F:90:68:36:29:40:D6:05:0B:42:2D
X509v3 Authority Key Identifier:
keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38382e302f32332d3233203d3e203533313835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.227.88.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:d1:84:c7:57:e1:51:94:f7:64:50:dc:1f:42:52:1a:60:c1:
88:9e:b1:2c:32:16:fc:97:66:d5:08:1e:e2:da:da:b0:b8:5f:
cc:d1:77:17:ce:2f:b9:31:2f:8c:62:4c:3e:de:42:1a:92:2e:
e4:b4:ec:1b:41:6a:6d:81:d5:f3:5c:66:c1:1c:e3:d1:7c:c9:
63:f0:56:83:57:e2:a0:79:1a:07:87:67:a4:a8:74:03:13:de:
b3:93:13:3e:02:c8:21:3c:2f:49:c1:e4:2d:0d:f3:b1:0d:2d:
80:cf:e7:50:e1:fa:c2:43:44:2b:2a:30:fc:38:57:02:35:2e:
d4:0e:27:0c:25:bb:47:8a:aa:7a:7a:fb:6f:a1:3e:ab:a5:e4:
3a:57:c4:80:2e:95:c9:b5:4a:51:de:06:1e:b0:a3:47:84:0f:
af:31:05:5f:7f:b7:8a:ca:ef:25:59:f5:e6:cb:dd:f8:23:14:
e7:62:26:86:8b:7e:4e:c5:9b:d4:96:dc:e3:bf:a3:10:22:f4:
68:fb:06:a2:1d:27:27:d9:d8:1d:98:73:1d:0b:13:62:73:4a:
c0:51:25:1c:cf:e6:26:de:cd:30:0f:ce:1d:d6:87:19:bd:61:
af:98:fe:43:87:7e:a9:53:cb:59:12:cf:72:ba:bd:eb:49:66:
e6:f2:59:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:09:20 2025 by rpki-client