Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3234302e302f32312d3234203d3e203631373435.roa
File: 3138362e3231392e3234302e302f32312d3234203d3e203631373435.roa (raw, json)
Hash identifier: ldDjdOV5UXv0p1/KS1QQx5DdxD6vkCC6hH+RJOwF6/Y=
Subject key identifier: E1:AF:DD:23:CF:CC:B7:FD:57:56:0B:56:79:C4:F4:E9:A8:49:35:23
Certificate issuer: /CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
Certificate serial: 7501B57117765A8A5F51A75EFFFEC04508F415EE
Authority key identifier: CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3234302e302f32312d3234203d3e203631373435.roa
Signing time: Mon 25 Nov 2024 13:58:01 +0000
ROA not before: Mon 25 Nov 2024 13:53:01 +0000
ROA not after: Mon 24 Nov 2025 13:58:01 +0000
asID: 61745
IP address blocks: 186.219.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:01:b5:71:17:76:5a:8a:5f:51:a7:5e:ff:fe:c0:45:08:f4:15:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
Validity
Not Before: Nov 25 13:53:01 2024 GMT
Not After : Nov 24 13:58:01 2025 GMT
Subject: CN=E1AFDD23CFCCB7FD57560B5679C4F4E9A8493523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:82:9e:37:24:cd:33:88:92:8f:a1:b8:03:
9a:08:13:90:2d:75:83:81:7d:d0:de:5a:5a:27:d6:
70:a5:2a:c0:0c:c1:03:d0:a0:14:34:bd:80:3e:10:
3d:15:4c:6b:72:28:31:bc:68:25:5a:0e:53:b9:68:
45:5d:05:b9:dd:86:4f:55:ae:9b:bf:c4:af:7b:76:
8c:40:54:94:a8:06:d2:b2:eb:c8:24:46:ac:7a:51:
38:f3:20:a3:e8:a2:2d:46:b5:91:6c:cb:05:33:ac:
0f:2e:e2:0e:25:c3:aa:19:ec:af:6d:cc:30:f4:d5:
81:61:e5:ea:1b:cd:34:ea:cc:60:2e:cb:65:ab:ee:
36:df:36:a6:44:d7:3f:18:04:13:f1:8f:31:97:f8:
f6:51:20:d4:c2:21:73:84:22:c2:6b:82:e3:29:93:
2e:e6:f2:97:1d:0a:bc:c1:7c:31:ea:15:95:72:99:
d1:be:5b:fc:0b:62:1b:63:70:5c:2c:48:9a:63:fe:
2b:c8:f1:27:1f:7b:d0:79:55:d3:cc:5c:c7:11:89:
6f:d2:86:bb:a6:4d:51:55:68:ce:ef:a6:fd:48:ba:
d7:02:95:86:0c:3b:a8:9e:86:18:6e:59:63:ec:93:
e4:fd:5a:b6:1a:cc:75:79:41:58:85:cc:b3:f2:3d:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AF:DD:23:CF:CC:B7:FD:57:56:0B:56:79:C4:F4:E9:A8:49:35:23
X509v3 Authority Key Identifier:
keyid:CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3234302e302f32312d3234203d3e203631373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.219.240.0/21
Signature Algorithm: sha256WithRSAEncryption
75:79:eb:f3:8c:9e:49:c4:81:6c:5f:e1:d6:b2:56:fc:f0:ab:
da:be:f5:da:56:38:83:fe:b0:00:53:62:26:5d:4e:07:76:02:
e2:9e:82:4c:18:93:d8:93:5a:e6:3a:57:65:69:78:22:69:2f:
eb:30:9b:43:bf:6b:a3:05:b2:af:94:28:d1:12:03:6f:bf:c9:
24:e0:7c:b6:38:22:04:4d:b0:aa:74:d5:a4:a7:fa:4b:63:04:
ef:05:9b:f9:0c:7a:6d:c9:66:26:b5:8c:5b:e9:71:69:e9:6f:
2f:7b:45:f8:ac:43:6e:de:ed:27:8b:57:7a:25:e4:e7:a5:c1:
8b:85:d3:ec:98:5d:49:a7:48:22:34:85:f6:13:45:59:b5:21:
61:ea:ea:ee:8d:36:14:3f:a7:a1:ee:28:da:52:a8:79:41:05:
46:6a:03:56:90:36:53:14:78:87:2d:2d:73:72:41:cf:e2:60:
e5:c4:f2:12:65:19:6f:53:9c:57:e5:cc:b3:67:3f:f5:25:d6:
bd:2d:a3:07:1d:52:24:d8:ed:1d:ec:ff:78:fa:42:46:2f:0c:
fb:d5:f2:9f:b0:5d:0b:68:93:87:82:f6:d0:e5:e7:76:61:13:
be:88:a3:48:e2:95:60:ad:42:cb:68:a0:73:56:a6:30:91:be:
08:9d:32:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:05 2024 by rpki-client on console-ams.rpki-client.org