Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130372e302f32342d3234203d3e203533313533.roa
File: 3138372e36312e3130372e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: w+UQ2izANVaTQtBHpQKbD0YO7QLH9KoH2O2z1LPLjoo=
Subject key identifier: 58:6B:29:A1:B9:64:22:48:BC:2F:09:F8:5C:9B:A1:BE:41:73:F8:F1
Certificate issuer: /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial: 413F46C4EFDB9E3EED388023D0B24BC4DC1877E2
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130372e302f32342d3234203d3e203533313533.roa
Signing time: Wed 04 Dec 2024 15:43:02 +0000
ROA not before: Wed 04 Dec 2024 15:38:02 +0000
ROA not after: Wed 03 Dec 2025 15:43:02 +0000
asID: 53153
IP address blocks: 187.61.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3f:46:c4:ef:db:9e:3e:ed:38:80:23:d0:b2:4b:c4:dc:18:77:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Validity
Not Before: Dec 4 15:38:02 2024 GMT
Not After : Dec 3 15:43:02 2025 GMT
Subject: CN=586B29A1B9642248BC2F09F85C9BA1BE4173F8F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:0a:4a:7e:6a:90:fe:f7:c8:5e:ba:99:5d:
b7:ad:fd:4c:de:8c:a6:46:06:e7:72:08:99:ba:a4:
c6:17:57:33:68:94:f6:c6:c2:66:ee:49:96:53:bd:
38:96:04:0f:b4:a7:a6:e1:56:78:5b:dd:6f:1e:8c:
fe:24:5e:6f:ee:db:69:30:0a:2d:cc:b8:6b:90:f9:
29:1d:b2:c4:90:f6:60:10:e0:8b:05:0e:b9:22:e8:
e8:74:ea:2f:28:c7:b5:a6:2e:24:27:02:1f:32:8d:
57:e2:cc:bd:d7:71:3a:3b:2f:ba:8f:60:8a:49:d7:
d3:72:b5:f7:8a:3e:8c:09:42:32:27:fc:11:59:00:
0b:9c:22:51:7e:3b:dd:06:00:72:3d:27:ac:69:47:
e4:3b:2e:88:db:ae:99:58:24:0e:21:ff:18:21:6a:
e2:12:1d:46:45:a3:25:ce:ce:fc:ad:78:f8:df:4a:
96:76:ed:4e:a2:ee:34:77:1f:0e:de:b9:3d:54:53:
a3:f8:31:23:17:da:a3:98:47:6d:f2:20:75:5c:b8:
dd:0b:46:cd:2e:ad:55:e9:a1:7a:c3:5d:b8:80:e3:
f2:c1:5c:ae:8f:6e:21:63:93:ab:d9:2b:eb:94:0f:
98:9d:4f:5b:7a:bb:c6:c5:ac:51:53:19:08:82:c3:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:29:A1:B9:64:22:48:BC:2F:09:F8:5C:9B:A1:BE:41:73:F8:F1
X509v3 Authority Key Identifier:
keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130372e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:26:99:b5:f9:96:d9:c6:78:22:14:92:0c:8d:f9:37:3a:8a:
f5:7a:b7:48:21:56:9f:94:6e:b8:11:bb:5a:48:f9:80:c9:7d:
ba:c5:89:ac:ba:7b:9c:37:93:59:7a:0c:a8:55:cc:a9:9c:c6:
f9:8f:1f:7d:ac:3a:6d:a0:aa:81:e2:d0:ac:8f:62:6e:7c:63:
2c:fa:29:aa:42:7a:3f:0b:04:63:0d:b0:c6:5e:fd:ad:92:f7:
aa:79:db:6d:3d:04:6e:87:21:c7:21:ae:b8:8e:d7:6c:41:d3:
c5:5e:e4:a0:a9:5c:4c:c7:0f:b8:e9:7d:0d:fe:25:6c:6d:5a:
59:e9:78:98:95:f5:03:3e:f8:5f:d1:10:51:8e:88:f3:25:7f:
f9:06:0c:2a:c8:b2:51:72:fa:0a:d5:b5:39:e0:c9:ae:b6:4c:
19:0a:bf:75:22:91:06:bb:49:b4:d9:57:96:08:e8:73:54:0e:
74:a4:33:e3:cb:93:d5:26:1d:a6:83:de:fe:fc:21:b8:62:f0:
cd:8d:b9:8e:03:3c:4d:b1:34:41:75:0f:e4:ea:b6:0d:bc:4f:
3a:0e:e0:bc:ca:24:f8:f6:8f:ef:be:ae:d2:c8:75:7f:ec:6a:
1f:93:75:ff:c0:4a:f8:e3:f3:a7:93:93:d9:4b:5d:36:ad:1f:
9d:df:f1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:05:47 2025 by rpki-client