Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3234203d3e203631363231.roa
File: 3138362e3230392e3232322e302f32332d3234203d3e203631363231.roa (raw, json)
Hash identifier: anyYuR+eC6FiD0eUpL9Sfp4ZobqyodWT8H6Avj3XeHU=
Subject key identifier: DE:32:7B:38:21:76:1A:42:79:5B:BC:BD:AC:3E:76:B7:C1:82:2E:E3
Certificate issuer: /CN=F350A9A60C94593716E8BF7D10666C1777A7789E
Certificate serial: 40FB7A25A678110FFD7C805C55C0D6E4F9907CC6
Authority key identifier: F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3234203d3e203631363231.roa
Signing time: Wed 22 Jan 2025 01:24:02 +0000
ROA not before: Wed 22 Jan 2025 01:19:02 +0000
ROA not after: Wed 21 Jan 2026 01:24:02 +0000
asID: 61621
IP address blocks: 186.209.222.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:fb:7a:25:a6:78:11:0f:fd:7c:80:5c:55:c0:d6:e4:f9:90:7c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F350A9A60C94593716E8BF7D10666C1777A7789E
Validity
Not Before: Jan 22 01:19:02 2025 GMT
Not After : Jan 21 01:24:02 2026 GMT
Subject: CN=DE327B3821761A42795BBCBDAC3E76B7C1822EE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:37:e9:23:fa:ca:2d:fd:43:42:43:be:59:
0d:a0:83:80:bb:d2:29:b9:17:1e:ab:0d:99:35:ab:
ef:41:9a:1f:f0:13:83:c8:20:50:48:9e:31:75:18:
14:1c:21:7e:f7:d5:4b:4e:8e:f1:4c:67:33:9b:a8:
3b:83:4a:f1:a2:27:6f:bf:c8:40:1d:db:e7:c8:b6:
9e:9e:9f:60:ae:1f:2f:c3:fd:51:93:14:9a:1e:33:
98:c2:35:c9:df:64:ce:c3:d0:e3:a1:5b:7f:b3:39:
fd:d4:d5:35:d7:53:a6:3c:62:f4:82:23:fe:af:b8:
b5:cf:23:88:32:76:f7:9f:48:2f:58:07:fc:05:bc:
c4:ba:1f:5c:d1:fa:0a:f5:50:7f:29:68:5e:a3:0b:
62:3c:7f:25:10:fa:c5:1c:55:97:b2:74:47:db:5b:
73:f1:91:46:d3:73:d9:4c:ae:63:a7:a7:83:76:2c:
3f:00:12:fe:76:19:a7:83:c0:e3:99:69:30:b6:d8:
8b:01:4f:90:79:26:a0:04:4f:ee:11:7f:27:29:38:
88:9d:90:46:8f:5f:34:81:2a:3a:53:fa:24:79:74:
a9:69:5f:6f:18:20:9a:ee:40:23:d1:c7:ed:af:f6:
b0:22:b1:d4:35:84:4b:61:86:07:f5:56:5d:a4:cb:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:32:7B:38:21:76:1A:42:79:5B:BC:BD:AC:3E:76:B7:C1:82:2E:E3
X509v3 Authority Key Identifier:
keyid:F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3234203d3e203631363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.222.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:3e:47:e5:11:ff:7e:ca:05:f2:a0:fa:10:fb:40:26:ba:97:
fd:94:5d:fe:0b:05:f7:8d:d0:df:27:88:d5:f0:77:02:7f:17:
20:2e:bb:71:c5:67:d9:f6:f2:42:83:e9:d8:21:de:f8:8c:de:
2c:a5:5a:26:73:ae:55:45:fa:23:7e:89:9f:7f:ba:47:7f:85:
74:6e:05:20:dc:63:54:ab:0c:aa:34:c1:13:90:be:79:e3:92:
f0:f1:91:d2:ef:fd:f9:21:60:ec:50:52:4a:cb:99:93:01:c7:
58:97:6e:e0:50:02:ce:c2:cb:62:a7:63:4d:e6:be:a8:62:c9:
64:e3:62:66:c6:32:27:88:bf:fa:71:44:60:f3:12:7c:7a:15:
f4:5c:83:1d:34:cf:1e:9e:1e:0c:bf:d4:32:4b:c5:ef:64:4c:
99:93:d7:e5:96:09:96:25:78:43:11:e9:66:37:c7:87:31:da:
c2:2e:07:52:67:79:4d:3d:72:59:85:f3:04:b3:2b:3f:f3:a7:
c6:e5:be:9f:d0:b5:1c:c4:2c:ba:d4:c5:6f:80:0c:f7:a3:55:
e6:f3:b0:bd:d8:7c:f4:3f:48:72:37:91:b3:9a:8a:75:8f:0b:
a9:60:c9:ac:bf:c3:33:0e:f0:ba:10:8e:96:fe:18:d9:dc:35:
e3:0d:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:43:16 2025 by rpki-client