Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138362e3235302e3230382e302f32312d3234203d3e203238363637.roa
File: 3138362e3235302e3230382e302f32312d3234203d3e203238363637.roa (raw, json)
Hash identifier: d63ndWkRI5IqfJdj01q+j97nY1nUzYlA/vI6xt5v1+w=
Subject key identifier: C5:CB:08:6B:3F:47:A9:4C:B5:CE:E3:09:BA:08:C2:3C:40:E1:70:FA
Certificate issuer: /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial: 0E57A98ECC74E2E018A6DECDE0B53E3E3D1701CB
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138362e3235302e3230382e302f32312d3234203d3e203238363637.roa
Signing time: Tue 23 Jul 2024 11:51:11 +0000
ROA not before: Tue 23 Jul 2024 11:46:11 +0000
ROA not after: Tue 22 Jul 2025 11:51:11 +0000
asID: 28667
IP address blocks: 186.250.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:57:a9:8e:cc:74:e2:e0:18:a6:de:cd:e0:b5:3e:3e:3d:17:01:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Validity
Not Before: Jul 23 11:46:11 2024 GMT
Not After : Jul 22 11:51:11 2025 GMT
Subject: CN=C5CB086B3F47A94CB5CEE309BA08C23C40E170FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:c2:41:6b:0e:af:7e:6d:54:25:4e:b6:fd:
66:e2:7e:5e:13:4b:ea:84:2a:50:37:f4:0b:99:ac:
1b:54:99:b9:43:af:f3:11:f8:f0:a8:8c:8f:53:e1:
af:44:f2:83:be:da:fc:d2:77:96:38:46:31:4f:ed:
7f:d4:66:5b:9c:51:8a:02:00:2c:e0:be:7b:7b:8f:
cd:7b:22:40:e7:86:fb:f2:14:1a:d7:c1:dc:61:20:
ee:b2:43:d3:37:ed:3d:1c:48:35:33:8d:8a:eb:c8:
ea:ec:33:62:77:67:f2:e3:f3:93:3d:8d:85:6a:51:
a3:21:27:92:9a:d1:1a:ac:03:6d:2a:c0:10:d7:0d:
42:d6:18:c5:55:d9:6c:69:be:3d:5d:0b:67:ee:e7:
81:3c:be:06:1c:65:6a:7c:96:88:0c:36:95:0a:09:
22:1d:e5:82:ca:36:be:28:ed:b2:fa:43:a2:26:c0:
8d:dc:c2:ef:8e:c3:ab:21:35:85:50:a0:cd:2a:55:
06:7e:63:de:76:3a:4e:19:84:d8:3f:5a:04:9f:dd:
a4:ab:5a:9c:1d:1a:4b:f6:ab:5f:52:6e:f1:fd:86:
9f:35:0c:39:9c:b8:29:e6:ac:3a:f3:a3:25:68:f1:
6e:3b:2d:99:ae:3a:3d:0d:7c:dd:51:32:91:c3:4c:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CB:08:6B:3F:47:A9:4C:B5:CE:E3:09:BA:08:C2:3C:40:E1:70:FA
X509v3 Authority Key Identifier:
keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138362e3235302e3230382e302f32312d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.250.208.0/21
Signature Algorithm: sha256WithRSAEncryption
78:64:b8:9e:ae:12:41:e4:dd:7b:18:fa:96:09:a4:ea:61:0a:
af:0e:d5:99:e3:a2:29:d3:31:b3:0e:ea:2c:af:0f:a2:d9:1d:
4f:43:84:03:b6:84:73:2a:2d:6c:04:93:ce:82:22:a9:53:37:
83:38:cb:4e:7f:da:63:0a:45:85:0d:06:8c:10:6c:3b:de:27:
26:21:39:73:d2:aa:24:f9:61:4f:7f:59:34:5a:8b:a5:b6:55:
41:31:3a:1e:1b:04:88:9d:74:a3:5a:8d:8d:74:fa:11:53:9f:
3a:36:77:7c:56:9c:2a:28:dc:c7:4d:6a:64:29:49:f8:1c:45:
3d:55:e6:6e:17:c9:a0:b3:bc:fe:36:63:b6:ed:84:34:86:92:
37:38:ca:7d:62:23:dc:7b:18:a1:8b:dc:9f:7c:07:c2:a0:4d:
ef:fa:77:2f:c5:d7:4d:7e:46:1c:c7:77:14:2b:18:ce:f9:e0:
4c:4a:0a:90:ba:40:19:f9:9e:88:a4:e1:5e:39:8f:6a:89:f4:
08:c9:98:8a:a7:fc:64:1f:a5:88:db:ce:c9:cc:51:89:6e:47:
83:da:b4:b1:e5:a5:45:05:9c:fa:f2:ea:08:ec:0e:2c:b5:1d:
79:10:27:13:81:49:7b:0d:a4:ee:a0:c8:64:8f:95:e7:b8:d6:
3b:21:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org