Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33372e302f32342d3234203d3e203238323436.roa
File: 3138372e312e33372e302f32342d3234203d3e203238323436.roa (raw, json)
Hash identifier: 2G65+qfI3giGvcXdwri5YrhDUEcZBwXkExLLNTvwu00=
Subject key identifier: 43:B0:82:63:43:31:F4:E2:01:0D:5B:8A:93:31:98:C4:50:C7:0C:36
Certificate issuer: /CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Certificate serial: 3FBAB1DE1C50FAC854E4AD08A48CAB88A4479BA2
Authority key identifier: 42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33372e302f32342d3234203d3e203238323436.roa
Signing time: Thu 14 Dec 2023 14:57:24 +0000
ROA not before: Thu 14 Dec 2023 14:52:24 +0000
ROA not after: Thu 12 Dec 2024 14:57:24 +0000
asID: 28246
IP address blocks: 187.1.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ba:b1:de:1c:50:fa:c8:54:e4:ad:08:a4:8c:ab:88:a4:47:9b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Validity
Not Before: Dec 14 14:52:24 2023 GMT
Not After : Dec 12 14:57:24 2024 GMT
Subject: CN=43B082634331F4E2010D5B8A933198C450C70C36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:1e:5f:00:2d:1d:5d:79:9b:51:27:08:f9:
93:2f:e5:61:fd:63:34:ef:22:8d:02:d5:56:db:7c:
64:db:5e:9e:30:93:1b:5f:30:0a:e5:33:65:4d:fe:
c3:69:1d:8c:f4:25:7f:e3:b7:bf:e1:0a:cc:b7:40:
b5:9d:99:8d:c6:ab:43:fb:42:60:b1:db:7c:56:27:
c3:0d:24:7e:3b:84:18:a6:c3:0c:3b:e9:4e:4b:c0:
67:1b:f6:a6:8c:1b:4c:a4:da:71:2d:a6:4c:76:8b:
5e:cd:08:a2:3d:81:12:9a:9e:32:76:ac:a2:7a:85:
f9:c5:d0:6d:ec:5a:14:2a:c9:ce:3e:79:44:95:d3:
30:76:41:ca:53:b1:c5:a9:90:b5:a0:da:09:75:23:
3c:a5:6f:90:9f:d2:ad:f6:70:0e:97:e9:ac:62:fc:
8d:8b:66:e3:aa:6f:62:e0:e2:3c:cb:eb:26:f6:e2:
65:2f:c1:69:70:96:67:89:d3:48:9e:9c:e3:ce:39:
43:e1:cc:dd:b3:95:bc:f9:a7:83:14:4f:28:03:fa:
01:84:97:b1:e5:27:33:d0:4a:c8:b8:45:37:c6:be:
b1:20:73:a8:b5:6d:fb:30:80:f2:f7:d9:df:9f:97:
04:81:28:e3:31:09:15:6a:7f:20:9b:bf:b2:6b:56:
2b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:82:63:43:31:F4:E2:01:0D:5B:8A:93:31:98:C4:50:C7:0C:36
X509v3 Authority Key Identifier:
keyid:42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33372e302f32342d3234203d3e203238323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.1.37.0/24
Signature Algorithm: sha256WithRSAEncryption
53:58:2d:85:f3:82:64:c1:cb:5e:b4:9e:b4:ba:7f:7b:3a:6c:
de:06:df:1a:a6:42:a6:6a:1a:05:27:0b:04:9b:02:c1:62:96:
3a:b7:83:e6:de:5e:c5:c4:03:aa:3b:2c:98:b3:6c:e9:a4:65:
68:49:23:b8:89:55:38:8b:ca:f1:be:4b:95:96:a3:67:ea:8d:
94:86:44:2c:b5:49:b5:bb:c7:f3:31:12:e7:49:ff:74:83:96:
de:54:3d:c7:f0:f7:44:7d:38:ba:b3:e5:0b:b8:57:9b:bf:49:
bb:a9:c4:f5:54:ac:c0:44:d5:dc:85:7e:39:40:bf:f2:84:e0:
72:93:76:18:89:23:1e:13:8f:9c:5b:1a:de:78:11:18:8a:92:
be:0a:e3:a2:44:f3:2f:e5:a5:b1:0b:40:de:53:e5:63:66:0f:
65:4b:f1:35:7f:eb:a4:e8:0f:6e:89:41:46:c1:6d:aa:a7:2a:
dc:88:64:ac:fa:08:1b:af:cd:db:6b:fd:d0:9a:c1:0c:a5:ed:
97:a0:96:75:b4:3b:24:6f:86:c4:3e:33:36:05:cf:d6:53:8c:
89:08:66:f8:2d:4e:b0:d1:de:d6:02:27:f2:b7:7d:2e:01:e0:
1f:89:9b:d9:c5:55:87:16:49:7f:68:4f:2c:8b:0b:6a:ac:7d:
e3:66:4b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:06:00 2025 by rpki-client