Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31362e302f32312d3231203d3e203238313235.roa
File: 3138372e31392e31362e302f32312d3231203d3e203238313235.roa (raw, json)
Hash identifier: RZREo2ja7hHhnhwHNxNdnYKgCja5scOP45STgPNVruQ=
Subject key identifier: 46:3F:E3:69:9C:0B:1D:BF:0A:75:53:01:99:BC:DB:C5:0B:90:FC:FE
Certificate issuer: /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial: 36A29E30C6F297A7E49CE35776827D473BE77631
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31362e302f32312d3231203d3e203238313235.roa
Signing time: Thu 21 Mar 2024 17:57:08 +0000
ROA not before: Thu 21 Mar 2024 17:52:08 +0000
ROA not after: Thu 20 Mar 2025 17:57:08 +0000
asID: 28125
IP address blocks: 187.19.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a2:9e:30:c6:f2:97:a7:e4:9c:e3:57:76:82:7d:47:3b:e7:76:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Validity
Not Before: Mar 21 17:52:08 2024 GMT
Not After : Mar 20 17:57:08 2025 GMT
Subject: CN=463FE3699C0B1DBF0A75530199BCDBC50B90FCFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:ae:09:63:64:d1:99:40:d4:1f:31:91:f0:
23:b9:30:d7:cf:49:79:0b:1c:53:63:66:09:d7:54:
fa:04:5b:2c:8d:eb:4d:72:3e:bc:96:ee:7d:08:e2:
ce:c4:32:64:be:b2:ee:25:8d:57:21:f0:3c:df:a3:
e3:54:72:ab:9d:af:3b:4c:f6:6d:6b:13:56:0c:ff:
9e:fd:16:c4:c8:14:9b:55:56:df:9b:a7:60:94:af:
ee:f1:ea:b9:32:b5:38:97:7e:0f:4b:a6:69:8e:64:
b0:f1:d2:06:19:f3:a3:97:e5:41:53:11:e6:e6:82:
c0:41:a8:85:64:20:3d:11:ea:5a:aa:ce:2c:bd:be:
a0:59:a9:89:0c:3c:68:82:9e:29:91:d7:27:a4:10:
f8:bc:9d:e2:22:0d:89:40:58:df:67:86:d4:6d:79:
0f:6a:6b:2a:81:75:66:28:32:e6:57:23:13:43:a0:
ba:42:8f:d9:6c:54:0f:16:08:97:d3:bb:27:7b:d7:
3b:ca:0d:76:a1:3d:9c:72:4c:ec:94:f8:ce:85:85:
d1:63:e3:28:14:a2:27:15:0b:c3:3c:5f:d1:9e:e9:
08:2c:ee:a0:ca:ca:95:a6:a4:72:1a:d6:f7:e6:c7:
83:04:af:ae:66:66:5a:cd:76:b3:f7:78:95:fc:b3:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3F:E3:69:9C:0B:1D:BF:0A:75:53:01:99:BC:DB:C5:0B:90:FC:FE
X509v3 Authority Key Identifier:
keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e31362e302f32312d3231203d3e203238313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.19.16.0/21
Signature Algorithm: sha256WithRSAEncryption
10:d8:81:b5:c1:23:5e:17:ab:fe:25:3d:bb:6c:00:5f:af:9e:
a6:69:37:3b:8d:c9:e0:70:ed:ec:ce:83:f2:bc:5a:9e:fe:c2:
ef:d4:ee:08:da:be:8d:5b:20:1f:5a:30:08:02:fe:c3:bf:05:
cb:26:77:80:32:ec:9f:ef:df:e0:b5:7b:85:29:c2:71:4b:0d:
17:51:9b:0f:09:2e:47:3d:33:e5:28:f6:cc:f2:87:b6:84:3b:
f5:0f:c4:ad:f0:64:a9:8d:fd:56:d2:78:26:f8:f0:0c:2d:29:
27:8b:ed:fd:84:7b:6a:0f:74:ba:c5:5c:71:3f:ba:e9:af:8b:
4e:f7:2f:be:a2:e9:9f:12:11:1e:30:d0:36:e0:5a:b0:32:a5:
4f:7d:6c:3d:0f:82:93:51:a8:06:b5:6a:14:9b:7d:2c:a7:d5:
90:24:19:48:52:00:01:23:da:04:75:50:ec:d3:4e:8b:36:94:
ef:b3:c8:2d:9b:e2:84:f4:61:2b:47:44:e0:8e:f8:6a:e8:45:
8a:a6:e1:33:3c:c2:b2:1d:64:fa:3b:d5:a3:f4:55:f3:29:b0:
d0:87:0f:b7:40:c1:56:68:69:ef:e1:d5:ab:49:4d:41:1f:6f:
13:c6:69:6d:ee:80:f1:d5:17:00:97:f7:cc:39:00:04:c5:20:
30:f6:58:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org