Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138372e31392e38302e302f32302d3234203d3e203238363637.roa
File: 3138372e31392e38302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: Zkn6W1EtV1ST9Kq6rTMbn4s42Iur5YrQQMl17fWJtn8=
Subject key identifier: 07:7D:F2:9B:71:93:51:85:98:A6:88:00:2E:6F:B6:41:7D:61:47:29
Certificate issuer: /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial: 54A0D7DB4798FE584FF196CBCBFF1662A956C1C2
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138372e31392e38302e302f32302d3234203d3e203238363637.roa
Signing time: Fri 03 May 2024 20:10:18 +0000
ROA not before: Fri 03 May 2024 20:05:18 +0000
ROA not after: Fri 02 May 2025 20:10:18 +0000
asID: 28667
IP address blocks: 187.19.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a0:d7:db:47:98:fe:58:4f:f1:96:cb:cb:ff:16:62:a9:56:c1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Validity
Not Before: May 3 20:05:18 2024 GMT
Not After : May 2 20:10:18 2025 GMT
Subject: CN=077DF29B7193518598A688002E6FB6417D614729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:ff:6e:47:1c:f5:8c:de:17:ab:eb:2b:e8:
4e:f0:59:8e:02:15:dd:e8:a8:0d:e4:8c:0f:11:58:
a2:2c:21:b3:c2:5a:3b:47:4a:8c:40:36:52:50:4d:
61:66:e6:71:4f:43:99:58:33:ef:be:23:13:ff:03:
a6:79:c9:31:9e:3e:87:65:55:9f:f2:9d:e0:54:63:
59:fe:8a:ee:39:07:e2:87:86:e0:8a:9e:14:5d:fa:
7b:55:48:22:e2:fa:ab:dc:6d:18:1f:2e:72:6f:20:
21:79:62:62:8e:87:31:80:55:66:c9:27:eb:86:c1:
08:f9:d1:af:c9:fc:30:7f:94:1a:c8:74:0f:fd:67:
7f:af:91:c5:b8:fe:21:c1:35:73:0c:7c:69:f8:df:
5c:e8:28:d5:3e:db:2d:37:43:a6:50:b3:41:b5:a4:
16:50:2c:55:a1:bf:57:c3:73:f0:e4:33:fd:fb:38:
27:f7:15:5c:f9:20:2c:82:1d:59:ea:4a:9b:06:e6:
64:53:61:3a:1d:b2:b1:5e:cb:98:b2:de:f7:45:e6:
be:bd:ab:e0:8c:a0:36:b1:8b:70:7a:86:e1:ac:a7:
63:1f:b2:d8:6b:15:d5:ef:60:d2:0f:50:00:84:9b:
9d:b5:98:fd:69:aa:37:e5:e7:8d:ab:ea:92:8b:d5:
b3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7D:F2:9B:71:93:51:85:98:A6:88:00:2E:6F:B6:41:7D:61:47:29
X509v3 Authority Key Identifier:
keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138372e31392e38302e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.19.80.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:86:9c:9c:dc:a9:2d:86:a5:63:3d:45:45:7f:16:70:f7:ef:
10:e2:2d:56:ca:d7:ad:31:9f:17:53:8a:5d:b8:2f:d5:62:68:
27:9d:1a:70:0b:16:22:66:33:50:e2:4e:0d:50:ee:d1:3b:19:
e6:8b:d9:66:93:84:c6:91:a8:e7:20:e1:fa:12:66:53:68:cc:
02:fc:6b:56:36:28:55:c8:a2:46:55:e2:6b:91:be:5f:17:03:
68:9a:3b:60:51:e2:18:e8:a7:41:f3:a2:83:1a:b5:0a:72:df:
1c:f1:db:c9:af:dd:f7:c5:b7:b3:80:eb:e7:25:bf:0e:50:34:
96:71:3b:81:85:2a:93:6d:d2:e1:48:00:df:40:31:85:12:fb:
22:6e:fa:ea:2f:a5:f1:d0:58:b7:e1:6d:da:52:aa:3d:7e:c4:
f2:0a:ce:b2:fa:10:f1:57:48:b4:c2:ba:43:64:9b:ec:14:a6:
09:2e:91:d7:3b:40:2e:91:cc:5b:76:98:26:98:1c:dd:a8:25:
51:7b:73:16:fa:8d:d4:ff:fe:be:87:ba:b5:55:d5:86:46:93:
d4:ee:9f:32:22:46:d9:0a:3c:cf:66:70:e7:d1:63:02:79:fa:
11:87:b3:85:13:2c:75:b8:20:f3:5e:ae:36:b0:3c:a1:8c:52:
30:64:0c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:10 2025 by rpki-client