Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32382e302f32322d3234203d3e203238313235.roa
File: 3138372e31392e32382e302f32322d3234203d3e203238313235.roa (raw, json)
Hash identifier: pafTOnovS4EqpIw182ld6X8O4yCR1mBSMab47oJsmug=
Subject key identifier: F4:EE:D6:86:26:70:C5:79:DC:3F:C5:D0:95:50:0D:6B:D0:88:E7:4F
Certificate issuer: /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial: 70FCC08CBD2F93B9812A4D035D456A07E4B4B112
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32382e302f32322d3234203d3e203238313235.roa
Signing time: Tue 26 Mar 2024 13:15:35 +0000
ROA not before: Tue 26 Mar 2024 13:10:35 +0000
ROA not after: Tue 25 Mar 2025 13:15:35 +0000
asID: 28125
IP address blocks: 187.19.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fc:c0:8c:bd:2f:93:b9:81:2a:4d:03:5d:45:6a:07:e4:b4:b1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Validity
Not Before: Mar 26 13:10:35 2024 GMT
Not After : Mar 25 13:15:35 2025 GMT
Subject: CN=F4EED6862670C579DC3FC5D095500D6BD088E74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:b6:35:cf:42:ec:46:dc:1f:bf:6b:33:40:
51:73:a8:ce:ad:f3:14:cd:f0:22:dc:42:59:29:5f:
be:cd:90:4a:eb:f6:f9:aa:09:20:ee:ca:70:3b:58:
1b:dd:2b:ee:c9:ff:e3:af:99:06:59:f0:d5:0e:32:
13:b6:da:e9:73:48:78:e6:08:e2:e0:9a:b7:11:62:
5d:28:3b:d7:81:4a:be:c9:20:80:8c:97:b2:6c:21:
0b:23:1d:29:3f:2c:1d:14:7a:4a:18:a2:0c:b8:e1:
de:5e:27:b2:4d:29:e3:85:91:34:03:9d:cc:c0:cb:
57:8b:cf:05:1b:ed:f7:21:c1:0b:e8:6e:a3:66:ea:
99:d3:e0:ea:12:47:5c:62:8f:9b:30:77:89:6f:d1:
9b:b8:84:20:c0:93:c2:c3:65:78:dd:d5:ca:57:11:
72:fa:a5:17:e8:e5:a3:5f:93:9f:d8:59:b2:6f:ef:
75:e6:da:9b:13:07:3c:a9:c0:d4:30:fd:fd:ac:8f:
a6:cc:0f:13:b9:c5:11:a7:e1:a7:fb:14:73:fd:11:
28:d6:f9:0d:03:53:82:f9:4e:a9:2e:7f:17:8c:a3:
d9:d0:76:c3:10:06:a6:0f:72:e8:1c:3c:37:60:2b:
ea:f2:76:48:7e:08:9d:98:a7:9d:6d:92:cf:ea:93:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EE:D6:86:26:70:C5:79:DC:3F:C5:D0:95:50:0D:6B:D0:88:E7:4F
X509v3 Authority Key Identifier:
keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3138372e31392e32382e302f32322d3234203d3e203238313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.19.28.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:d3:50:f4:76:f0:50:1b:8f:57:c8:52:16:db:37:db:0e:3b:
44:df:f3:98:e5:88:06:74:93:66:41:0b:68:e9:18:ab:2c:68:
5b:7f:db:2f:20:e7:ad:b4:cc:39:0d:37:9f:6b:5f:19:09:a2:
ab:ad:92:e4:f1:e5:0e:93:26:0f:87:f5:c9:ab:bd:90:6d:80:
0a:5f:0d:15:18:ff:2f:f7:1e:af:15:60:77:45:02:f2:54:cc:
2d:a0:bb:b4:39:e4:d7:f1:f4:d1:f3:9e:bb:d6:fd:6c:25:ff:
1d:cb:88:85:68:3c:74:80:c9:a3:a0:af:c4:47:f6:81:9d:41:
49:f2:de:32:43:1d:8f:bf:c7:e6:d9:6b:c0:99:38:68:44:f4:
5f:b1:59:20:8d:28:23:94:b0:ec:0f:7a:8a:a2:c4:52:2f:a3:
bd:38:c9:2a:66:04:17:4e:36:7e:11:29:53:4b:aa:0e:44:78:
25:5f:5c:bb:4c:b5:e8:ea:f1:fe:d1:ac:98:aa:82:02:cd:d4:
74:03:e0:96:6b:58:4a:39:dc:6e:ac:59:a3:6b:17:f1:8a:22:
d4:96:3a:23:94:38:fe:2e:4d:51:ac:c4:54:f5:85:ac:20:59:
48:74:f0:83:2c:71:ca:4a:c2:6e:8a:7f:f2:47:85:5d:a1:0d:
cf:0e:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org