Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3138372e3132302e3134342e302f32302d3234203d3e20323632323732.roa
File: 3138372e3132302e3134342e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier: axI+ATCmqrMjvz+9KQIWFUdJUFhgH0pcvzNJxuqFUps=
Subject key identifier: 18:C9:C7:58:CC:75:CF:55:E0:61:E6:82:D8:44:7B:44:2B:A4:8C:EA
Certificate issuer: /CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
Certificate serial: 1A9DED54CD43BF9849223FB44A8C7FAB2F12BB5B
Authority key identifier: 1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3138372e3132302e3134342e302f32302d3234203d3e20323632323732.roa
Signing time: Mon 20 May 2024 13:11:13 +0000
ROA not before: Mon 20 May 2024 13:06:13 +0000
ROA not after: Mon 19 May 2025 13:11:13 +0000
asID: 262272
IP address blocks: 187.120.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:9d:ed:54:cd:43:bf:98:49:22:3f:b4:4a:8c:7f:ab:2f:12:bb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
Validity
Not Before: May 20 13:06:13 2024 GMT
Not After : May 19 13:11:13 2025 GMT
Subject: CN=18C9C758CC75CF55E061E682D8447B442BA48CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:b7:bc:d8:30:7b:aa:0f:56:6b:d8:ea:8f:
dc:cf:57:20:56:df:2a:e4:86:83:de:4e:3b:fc:ff:
5f:44:da:a6:fa:d9:55:ee:ea:0a:fc:c0:91:56:d3:
0f:e4:60:2a:fb:0a:26:69:30:94:70:a3:bb:92:fe:
9d:01:9e:f4:fe:05:6b:f0:08:52:c4:f4:01:c2:de:
12:2d:0b:90:0c:bf:30:15:84:a5:a7:e7:26:9f:8b:
09:1e:9f:30:a0:3e:6a:2b:cd:46:2d:73:ed:0c:56:
43:29:b0:cb:b1:76:f9:36:ed:7f:f7:de:b7:e2:dc:
8d:78:dd:40:88:c1:1b:ac:43:ca:4c:f9:cb:d4:55:
1c:2e:e7:ed:da:6b:26:50:f1:aa:1f:0a:b9:e9:00:
44:d2:e0:f9:9b:f5:f4:f1:51:fc:47:0f:23:bf:d1:
db:ce:fb:0a:72:d0:09:6d:18:2c:c1:54:5e:96:5d:
97:9c:e6:28:96:92:d6:fb:a4:0a:02:a7:83:18:ed:
61:97:95:dc:b7:19:92:25:f1:46:1d:59:b8:d1:b9:
46:42:d5:42:4c:ae:6a:4a:81:66:56:c4:3a:ec:50:
7d:7e:a5:ae:dc:9b:db:45:e9:9c:41:ac:40:31:d2:
bc:db:18:55:b3:02:31:95:ad:71:b6:62:e8:a7:88:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C9:C7:58:CC:75:CF:55:E0:61:E6:82:D8:44:7B:44:2B:A4:8C:EA
X509v3 Authority Key Identifier:
keyid:1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3138372e3132302e3134342e302f32302d3234203d3e20323632323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.120.144.0/20
Signature Algorithm: sha256WithRSAEncryption
16:14:77:17:87:20:7e:26:49:77:be:4d:1f:53:2c:ed:a8:25:
77:9c:b8:94:fa:3e:20:fa:25:26:a6:ad:42:d7:f7:fe:92:41:
5d:98:e2:42:75:0c:12:5e:16:3a:6e:d0:55:6a:9c:b1:6f:94:
f8:35:8f:1c:6f:73:c3:61:5a:0b:94:fe:55:12:a7:d0:fc:72:
d4:89:af:d8:19:c6:7c:72:cc:c3:6b:1b:40:a7:8e:cc:67:59:
42:24:f9:ef:b3:7e:f0:c8:02:c3:1c:45:a5:91:50:bf:8c:f4:
a1:7b:9b:7e:8c:d2:8f:9c:7f:cf:65:96:a5:b4:cb:cb:4f:03:
20:74:6c:b2:b3:d9:da:97:8b:76:00:f3:9c:bb:c0:e8:f7:18:
ba:cf:3a:b5:21:11:e8:d7:76:2e:44:50:65:c6:5d:3b:97:f9:
9f:9f:e1:64:3d:ce:98:70:ee:f9:3b:96:b3:41:8a:e8:ee:bb:
b8:e6:c5:04:b1:03:4b:a0:1b:05:19:9c:50:88:b0:37:3e:dc:
df:93:68:75:c1:b5:64:2e:fe:74:85:41:00:ca:80:84:4e:4d:
72:95:d8:10:b3:20:63:7b:08:3d:48:bd:44:77:52:5a:93:54:
49:b0:f4:77:47:30:43:d4:37:89:bb:11:02:44:8d:35:28:f4:
b3:90:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org