Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230392e302f32342d3234203d3e203238323230.roa
File: 3138372e3131302e3230392e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: 6s00CwITReJJ3Dr6TiQSpAH+t2zA1GEsaaDWLvxpoO4=
Subject key identifier: BB:31:45:36:AC:9D:C3:27:37:F9:38:EB:31:39:74:A8:A6:E6:E3:D5
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 448D7ED31D9EC45776C0088A87E1FA9DD3C8DCB9
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230392e302f32342d3234203d3e203238323230.roa
Signing time: Thu 07 Nov 2024 20:40:12 +0000
ROA not before: Thu 07 Nov 2024 20:35:12 +0000
ROA not after: Thu 06 Nov 2025 20:40:12 +0000
asID: 28220
IP address blocks: 187.110.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8d:7e:d3:1d:9e:c4:57:76:c0:08:8a:87:e1:fa:9d:d3:c8:dc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:12 2024 GMT
Not After : Nov 6 20:40:12 2025 GMT
Subject: CN=BB314536AC9DC32737F938EB313974A8A6E6E3D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:4e:f5:b0:7b:44:73:e2:db:a3:76:60:bd:
c8:c7:11:2b:86:0a:18:67:d1:7d:49:36:59:a3:31:
4e:23:39:21:c4:2a:7e:0d:f7:da:83:02:f2:78:cb:
e9:33:d8:a1:c9:e1:64:ea:59:17:e0:c4:3a:3e:6d:
fc:b2:81:80:3a:3c:90:4c:67:97:6b:fb:5f:fe:05:
6d:6d:49:27:fd:db:d3:1e:13:59:ed:f8:1a:67:d4:
12:81:37:22:de:da:1b:e9:04:20:eb:5d:99:cc:51:
94:1a:58:1b:66:53:8f:8e:c4:89:f7:d8:9d:c2:56:
66:1d:dc:ec:76:e1:52:29:70:2e:d0:a0:30:e6:af:
08:bb:6d:91:1d:79:9c:8b:2a:63:bb:c3:3b:2d:e7:
f5:73:0d:94:b1:06:bf:44:3d:34:8c:0d:0a:ae:d9:
10:6c:77:09:ed:82:3a:ee:5f:41:6a:e2:05:4d:8f:
2e:23:fa:6e:65:f0:ce:85:9b:f7:2a:b8:45:34:9b:
37:f2:ba:0f:a2:93:62:ad:99:9b:6c:a5:72:ab:34:
81:55:80:eb:0b:61:a5:a4:1a:e6:3d:e4:fc:58:38:
4b:65:71:40:43:74:1d:3f:8f:e9:39:3e:f4:6d:98:
e7:27:38:d7:95:91:01:ac:ad:63:4d:37:b8:1a:57:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:31:45:36:AC:9D:C3:27:37:F9:38:EB:31:39:74:A8:A6:E6:E3:D5
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230392e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.110.209.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7f:9b:02:c1:6f:30:12:67:f6:37:8d:26:fc:2d:2a:c3:1c:
73:c7:b6:b5:ac:d5:c5:91:e9:56:76:cd:3c:68:ee:03:31:6b:
7a:9e:2b:6f:2c:f8:da:c9:14:81:f8:8b:4b:7c:ea:cc:5c:03:
a6:c4:e7:20:5a:af:7d:53:a3:06:a0:b9:33:6e:8a:58:65:7e:
be:39:3d:71:26:1b:64:e5:36:02:fd:54:fa:39:f2:88:69:8c:
96:36:b0:a8:6b:5c:66:f3:96:bb:73:e1:ba:4b:15:88:f2:36:
1e:3d:51:6e:1a:e2:27:fb:50:02:45:a2:3c:5c:4e:52:e8:10:
fa:24:83:12:2b:9b:87:90:aa:fc:f0:c5:e9:1b:f2:c9:be:1e:
52:3b:a0:77:3e:94:b2:c1:f2:94:92:08:c5:47:10:b6:14:57:
e3:77:27:32:c7:c8:d9:d7:87:98:81:04:c2:59:70:b5:86:45:
e0:c2:a1:df:8d:9d:bf:41:92:01:68:e0:44:4a:44:c1:4f:b3:
30:fa:20:40:eb:e0:2b:4a:d9:9b:d2:09:44:47:e9:bc:dd:6b:
9c:bc:c5:af:26:89:f9:ad:19:3d:cb:f6:8f:f4:ae:ac:75:40:
46:69:c1:cb:52:10:61:bb:e5:de:d5:3f:6c:f0:81:6c:e2:e1:
26:4c:5a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:34:06 2025 by rpki-client