Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130382e302f32342d3234203d3e203533313533.roa
File: 3138372e36312e3130382e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: 50n/UDZbaRINe+xOiUDZ74AuFHqf9YcwC6vhTGQIuDo=
Subject key identifier: C0:6B:5C:88:8C:90:C4:A2:D2:2C:A0:F9:B6:F0:26:BD:43:F3:DA:C6
Certificate issuer: /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial: 700C2980D0B8872CFE0DC6E9597F1CE59375C90E
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130382e302f32342d3234203d3e203533313533.roa
Signing time: Wed 04 Dec 2024 15:42:59 +0000
ROA not before: Wed 04 Dec 2024 15:37:59 +0000
ROA not after: Wed 03 Dec 2025 15:42:59 +0000
asID: 53153
IP address blocks: 187.61.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0c:29:80:d0:b8:87:2c:fe:0d:c6:e9:59:7f:1c:e5:93:75:c9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Validity
Not Before: Dec 4 15:37:59 2024 GMT
Not After : Dec 3 15:42:59 2025 GMT
Subject: CN=C06B5C888C90C4A2D22CA0F9B6F026BD43F3DAC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:52:d2:d5:1b:ec:5b:c1:98:30:90:b1:43:
2a:07:28:9e:30:e2:9b:c7:95:aa:84:b9:71:9f:03:
95:69:1d:21:94:3e:cf:32:04:b9:10:91:84:7f:b8:
62:9d:3f:f5:80:19:45:a4:7f:5f:23:4b:ef:60:b0:
63:30:7b:a7:92:e2:f0:1d:c9:ca:de:98:8a:da:65:
04:92:2e:8e:3d:1c:de:b8:5b:83:5c:d3:73:89:7c:
fd:ea:b5:b6:b1:c3:d4:55:8b:0e:53:07:45:a9:e5:
4d:05:e5:92:9f:da:49:d4:e7:3e:fd:85:5b:dc:39:
43:32:3f:38:4b:45:c0:c0:8f:a8:48:85:97:c8:fe:
94:b6:be:f2:58:31:e7:0c:f8:99:48:eb:1a:04:c5:
a2:cb:1f:cd:79:42:04:e9:fc:de:72:83:38:4b:f4:
87:f1:56:a8:69:61:57:a7:f8:ae:99:86:35:a6:c6:
ad:8a:ee:fd:71:13:34:ab:6f:47:cf:2e:2b:05:24:
a6:26:da:2a:71:41:b8:2f:83:1f:56:50:cd:22:16:
93:05:78:6d:c1:dc:79:a4:7f:a5:08:f2:65:3b:3e:
b6:9b:18:fe:e5:6b:dd:2a:6e:03:fb:2e:13:97:3f:
6e:bb:13:73:b1:3d:21:1f:fe:09:89:f1:76:9c:45:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6B:5C:88:8C:90:C4:A2:D2:2C:A0:F9:B6:F0:26:BD:43:F3:DA:C6
X509v3 Authority Key Identifier:
keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130382e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.108.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d7:15:51:63:bc:bc:dd:5b:f9:28:c2:d3:b4:b0:f9:44:80:
78:df:81:c6:2d:ea:ca:8d:9c:00:f6:18:6d:22:ae:79:dd:df:
e6:3f:49:e0:8c:bf:8a:5e:2e:9b:fe:ff:b5:65:2e:73:fb:ea:
b3:a1:c4:57:b5:f4:08:3f:28:fa:c9:92:e7:41:cc:42:73:5a:
b4:4b:7e:89:c8:24:63:78:bf:fb:56:22:09:86:32:a5:16:f1:
a1:bf:8a:27:33:21:00:0a:f1:7b:2f:49:46:a6:31:da:85:09:
02:8b:b7:72:e9:64:76:40:01:8d:fd:3b:db:fd:f7:b8:2b:a1:
1e:8c:45:32:8a:18:7e:ae:18:51:f2:55:9a:9f:69:92:14:0a:
04:75:63:54:16:4c:7e:7c:42:ab:6d:33:3c:83:d7:d2:b7:2b:
79:6d:48:b3:0b:ba:9a:16:59:4c:41:bd:10:e2:a9:93:56:a3:
a5:52:3e:26:6f:4c:0b:e7:29:fb:c1:0a:ec:c1:6e:3e:04:06:
00:31:08:fa:47:4b:06:c2:b1:38:84:ac:2f:db:df:fd:71:56:
41:4f:ca:22:41:b3:2e:4b:10:25:68:f5:cb:4e:2e:f3:66:f2:
0b:a6:66:e3:c5:b1:c5:16:51:48:6a:b7:d0:50:09:29:3b:8c:
71:31:ac:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:10:55 2025 by rpki-client