Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/3138392e3132372e3135362e302f32342d3234203d3e20323730373037.roa
File: 3138392e3132372e3135362e302f32342d3234203d3e20323730373037.roa (raw, json)
Hash identifier: LVUGEIu+dEfroh8RIJfcgZMYVIR1sUZEigB+kCZgSYo=
Subject key identifier: BF:FF:02:04:94:B3:47:E9:27:C3:9C:E2:7E:CA:83:25:A1:37:27:36
Certificate issuer: /CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
Certificate serial: 195ED6C7A48014EBED80C60714320CBAD759EC0D
Authority key identifier: 70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/3138392e3132372e3135362e302f32342d3234203d3e20323730373037.roa
Signing time: Thu 01 Jun 2023 18:36:04 +0000
ROA not before: Thu 01 Jun 2023 18:31:04 +0000
ROA not after: Thu 30 May 2024 18:36:04 +0000
asID: 270707
IP address blocks: 189.127.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:5e:d6:c7:a4:80:14:eb:ed:80:c6:07:14:32:0c:ba:d7:59:ec:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
Validity
Not Before: Jun 1 18:31:04 2023 GMT
Not After : May 30 18:36:04 2024 GMT
Subject: CN=BFFF020494B347E927C39CE27ECA8325A1372736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:f4:51:c8:56:a0:f9:bb:fc:36:b6:7e:45:
78:c2:93:b9:dc:70:2e:0d:64:ea:8a:04:83:dd:ae:
7c:d4:56:7c:66:a2:95:8b:01:e2:94:4d:81:6b:f0:
68:ff:5c:dd:2d:e3:11:0b:2c:26:86:e4:27:d0:47:
51:c9:7c:36:d2:e1:ed:89:79:27:3a:37:b3:bb:f4:
77:cd:f3:21:9a:89:48:dc:ae:87:ea:9c:6c:74:96:
40:d4:62:26:84:2a:0a:1b:bd:fc:78:5c:8b:c7:11:
77:5b:fd:2b:a5:8f:3d:69:96:b0:cb:9a:37:a9:99:
48:a4:19:b4:1b:70:49:f9:02:79:3b:d5:63:09:38:
af:c4:a6:cc:49:72:18:17:3c:8b:f6:66:7d:1c:1b:
b3:54:d6:bb:30:55:e7:3c:f4:ab:14:f0:a9:86:15:
ff:35:d1:60:b2:80:ca:bc:7c:0d:a3:e7:4a:64:67:
72:b5:04:9a:5f:09:9c:2c:1b:25:0e:13:e2:3e:0a:
33:67:52:94:14:44:65:a1:99:df:e9:53:28:a0:3c:
2d:3e:00:96:71:ec:e2:02:08:43:d6:b2:68:5c:6f:
f6:44:64:74:62:a6:09:34:ed:17:24:68:7e:27:24:
f4:6c:dd:5a:b0:7d:6b:ee:fb:bf:d1:31:2c:ae:1f:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FF:02:04:94:B3:47:E9:27:C3:9C:E2:7E:CA:83:25:A1:37:27:36
X509v3 Authority Key Identifier:
keyid:70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/3138392e3132372e3135362e302f32342d3234203d3e20323730373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.156.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:9b:4f:49:a1:eb:c7:45:53:e5:b2:44:26:83:e4:9f:a5:47:
a9:b3:87:ff:bc:5d:fd:7e:76:26:81:b6:43:cb:59:b5:5e:e3:
8f:54:96:3a:63:9e:29:eb:7f:f8:00:1e:e3:3a:28:fc:4b:dc:
f2:a6:37:ae:63:e5:1e:27:59:77:e5:62:f9:75:92:9e:ba:70:
b5:43:1e:29:61:c8:65:82:ba:91:22:67:9c:23:fd:21:be:bf:
51:4c:3a:96:28:0b:68:bd:2b:7a:19:04:bc:cc:b3:c0:c5:2b:
3d:13:77:4f:65:82:f2:c9:bd:79:25:55:da:2c:c9:02:5d:3b:
9f:7e:79:ac:e3:89:41:74:99:67:b6:0c:cc:99:cc:07:5f:43:
94:11:2a:37:ff:6a:2d:4d:34:a9:47:64:30:49:89:10:7c:1b:
e1:b4:90:0f:a9:85:1e:82:d1:00:45:c0:b5:39:29:5c:1f:79:
6c:fc:f9:b5:d9:16:08:23:19:d6:b6:5f:1c:07:06:1b:79:a3:
12:a6:14:7a:a3:c5:e7:7e:8e:54:db:7f:2f:f7:b1:30:68:26:
66:e2:ee:f1:ca:e4:08:d7:29:3c:49:f7:15:e5:a7:d7:60:86:
a2:c2:c5:8b:7b:be:f9:b1:a7:40:9c:3e:2e:23:54:3f:aa:4d:
28:d4:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:02:09 2025 by rpki-client