Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32332d3233203d3e203533303532.roa
File: 3138372e38342e34342e302f32332d3233203d3e203533303532.roa (raw, json)
Hash identifier: hThbYJzfCExtNbGoSnemWW7UDWQuojnSpPPKNsIgnJ0=
Subject key identifier: 8B:85:94:81:FB:0E:25:98:66:C1:A4:87:5D:F6:5F:33:69:9A:C2:F3
Certificate issuer: /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial: 6ED751520D791F8BD02C879CF3C8B5B7AE725736
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32332d3233203d3e203533303532.roa
Signing time: Mon 30 Sep 2024 18:02:34 +0000
ROA not before: Mon 30 Sep 2024 17:57:34 +0000
ROA not after: Mon 29 Sep 2025 18:02:34 +0000
asID: 53052
IP address blocks: 187.84.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d7:51:52:0d:79:1f:8b:d0:2c:87:9c:f3:c8:b5:b7:ae:72:57:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Validity
Not Before: Sep 30 17:57:34 2024 GMT
Not After : Sep 29 18:02:34 2025 GMT
Subject: CN=8B859481FB0E259866C1A4875DF65F33699AC2F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:48:04:1e:e0:aa:df:b5:cb:cc:41:2f:b7:
84:01:c1:81:f0:23:e8:0a:bd:66:f5:3f:56:f5:52:
df:07:1e:5d:d0:88:43:14:59:37:13:bf:43:70:25:
bc:c9:9e:d2:0b:06:85:b8:77:a8:19:1d:fe:3a:5b:
37:5b:03:d0:50:10:1c:25:a4:c3:93:28:2d:39:b0:
9d:07:f1:39:96:fd:ba:86:7f:7a:1d:8b:cb:53:a7:
a0:6e:c0:ac:d6:ac:f4:6b:f5:4d:1d:ec:f5:0c:02:
8f:f1:0a:a2:a6:6f:d4:40:ae:85:f3:d6:ab:9e:fb:
ff:c7:48:00:7d:b2:35:f9:14:f4:d6:14:5a:16:30:
e1:56:45:94:0f:28:0c:b6:28:4d:bc:1b:31:4f:85:
a8:23:c4:dc:8a:dd:91:d5:59:74:e6:56:15:a2:93:
82:10:24:3b:02:52:bb:95:a3:73:8c:8c:6e:66:27:
5f:1d:94:bf:1e:7f:92:37:1e:45:7e:80:ab:80:41:
27:22:69:cf:6b:52:50:b9:9b:12:94:be:81:d8:11:
c3:60:f0:0c:14:ad:5b:03:ea:0a:3a:68:b6:65:b8:
ee:c6:f3:6f:2b:50:5e:1b:c2:dd:b1:5c:2f:fd:75:
2e:f3:e8:ed:9b:45:9e:04:dd:5e:c0:ba:8c:20:c4:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:85:94:81:FB:0E:25:98:66:C1:A4:87:5D:F6:5F:33:69:9A:C2:F3
X509v3 Authority Key Identifier:
keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32332d3233203d3e203533303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.84.44.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:c4:18:6d:a4:bd:da:a7:89:f7:ee:cb:62:61:ea:8f:d5:8e:
5a:90:2f:5b:e8:93:48:f5:37:3b:a3:df:79:9d:37:67:15:51:
ef:ba:18:91:b5:3d:ad:13:e9:40:96:bb:de:37:ed:0d:76:78:
b7:55:41:56:7e:9e:d7:f9:e1:64:51:6d:3d:ed:a7:5c:e6:b5:
de:b7:27:75:3e:d9:e8:2e:53:9a:25:1a:f5:56:03:5f:55:de:
67:18:d6:61:e2:06:02:83:6d:91:ca:8f:b1:14:a8:2b:11:36:
81:66:a3:79:3c:4f:b7:04:ac:3c:60:ef:7e:ff:33:e9:a4:28:
6c:42:68:0f:20:9b:12:a8:1a:88:4f:5f:ce:ad:c8:81:92:c9:
7b:e4:f7:03:e1:d0:0f:50:9f:22:29:8d:02:dd:a1:f1:d0:b5:
50:6a:04:f3:7a:c4:89:22:63:70:ab:43:56:b2:c1:99:8a:2a:
a5:2f:e5:ec:c0:1b:e8:08:71:d0:57:be:9a:d2:2a:6d:6c:6c:
6a:43:3c:c1:30:f4:dd:75:b7:d0:5f:8d:46:1c:b6:f0:e3:16:
dc:70:7f:2f:4f:08:9a:24:67:d3:61:21:d5:5d:78:34:0c:1b:
b5:1a:b4:65:33:2b:00:ad:5f:94:4e:a1:81:f2:f6:07:d9:1b:
cb:49:56:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:44:48 2025 by rpki-client