Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa
File: 3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier: 6Qr3vsKpXES/pU+ttUoEWG0IgeChCXxJCXeGQcNSPN8=
Subject key identifier: 8C:21:DB:E6:54:FC:39:4D:FB:BA:AA:B0:6C:B6:3B:50:39:9F:C2:DF
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 03F65642003E0DAA230C87724348B6A51E800827
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa
Signing time: Thu 07 Nov 2024 20:40:12 +0000
ROA not before: Thu 07 Nov 2024 20:35:12 +0000
ROA not after: Thu 06 Nov 2025 20:40:12 +0000
asID: 271724
IP address blocks: 189.50.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f6:56:42:00:3e:0d:aa:23:0c:87:72:43:48:b6:a5:1e:80:08:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:12 2024 GMT
Not After : Nov 6 20:40:12 2025 GMT
Subject: CN=8C21DBE654FC394DFBBAAAB06CB63B50399FC2DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4d:d4:2b:d6:e0:f9:15:1c:48:b0:40:c5:9a:
21:28:48:54:39:4a:2c:70:85:b3:e0:01:8d:d6:6c:
81:fc:40:26:41:77:d0:4d:42:de:68:d6:c8:1d:9c:
59:3c:e0:ab:69:13:22:5c:5e:5f:cd:dd:de:5a:4e:
f8:69:06:1c:a5:64:a4:c3:cb:c5:e8:4e:2b:fa:d0:
60:54:c9:99:a1:54:b2:59:13:30:20:a4:a5:33:14:
3a:22:c1:e1:45:e0:3e:ad:3d:9d:ba:f0:2b:fb:a0:
56:61:38:ae:81:1f:a0:7d:13:1e:fc:91:2b:19:52:
18:6d:7f:3f:ae:a9:a9:b5:be:23:8d:fa:c8:b2:16:
f2:9f:eb:b4:98:8e:1a:45:6b:8e:8c:77:de:40:81:
14:7f:f8:a1:50:97:b9:c7:35:f2:ca:fd:2c:6e:e3:
88:48:06:ab:e1:a3:5b:15:00:32:e8:9a:99:26:71:
cc:59:4b:ac:d3:09:49:d1:1d:d4:51:c2:92:8b:61:
e2:1b:36:b8:e8:a4:d7:89:f7:ad:8f:cf:c6:5c:8e:
2b:e3:ba:c7:31:b0:22:a9:0a:4d:c0:a1:68:23:0e:
6d:6b:82:1f:5f:34:ff:df:a5:4e:8e:4b:d1:c8:80:
4c:3f:e9:13:16:07:71:6f:c5:0a:3a:de:c8:71:a5:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:DB:E6:54:FC:39:4D:FB:BA:AA:B0:6C:B6:3B:50:39:9F:C2:DF
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.50.144.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:90:20:6c:76:52:f6:84:7c:be:63:74:3f:03:f2:20:94:53:
9e:bf:36:cd:b6:05:34:46:3e:f9:15:d3:ac:b0:b3:ed:32:da:
9d:0b:42:37:6f:85:5a:c1:b3:08:d0:96:12:6a:0f:2f:48:9a:
04:33:2c:07:9a:62:00:21:d1:8d:bd:45:c9:2b:ca:be:eb:00:
14:ab:2e:47:b7:00:fb:75:36:e1:52:34:f2:9b:11:c2:32:6e:
fe:72:9a:06:d0:08:51:df:3c:e3:48:6b:f1:81:7a:63:e4:b7:
0e:e0:3f:31:75:91:09:5c:6b:ef:2b:4d:29:68:61:c2:76:dc:
50:1d:d9:52:c3:c3:5a:ba:23:45:67:6f:1d:2e:3d:3a:4e:32:
1a:ef:73:13:ca:c1:d0:99:6d:a2:52:c4:e4:93:e5:c1:06:49:
02:18:79:d7:53:8a:f3:3e:28:6c:b7:42:fd:dd:12:1a:92:6e:
f0:7d:f5:11:32:4b:22:2e:05:0e:e0:f5:f6:65:5a:54:ca:5c:
0b:b7:5c:21:ae:a0:ee:81:91:13:4d:97:27:ca:26:e5:1e:d8:
23:9c:9c:9e:2e:94:3c:68:35:d3:73:fa:b5:75:2e:06:2a:de:
1d:81:bd:a0:17:b8:aa:3b:5a:f5:ee:96:ea:bf:ea:ef:2a:64:
6a:82:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:50:41 2025 by rpki-client