Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231332e302f32342d3234203d3e203238323936.roa
File: 3138392e33362e3231332e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier: b66rxLSKeSF93m4bFFt3BvWB6t5kfER9z6fteA8G3UE=
Subject key identifier: F8:88:10:1B:FE:F0:10:85:5A:35:91:13:06:49:01:A4:77:4D:AF:E3
Certificate issuer: /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial: 60A3E68833D26F0F01EEC911D62AA355CA532A19
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231332e302f32342d3234203d3e203238323936.roa
Signing time: Sun 01 Dec 2024 22:56:13 +0000
ROA not before: Sun 01 Dec 2024 22:51:13 +0000
ROA not after: Sun 30 Nov 2025 22:56:13 +0000
asID: 28296
IP address blocks: 189.36.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a3:e6:88:33:d2:6f:0f:01:ee:c9:11:d6:2a:a3:55:ca:53:2a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Validity
Not Before: Dec 1 22:51:13 2024 GMT
Not After : Nov 30 22:56:13 2025 GMT
Subject: CN=F888101BFEF010855A359113064901A4774DAFE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:50:84:2b:ce:68:2f:32:89:fa:c5:9f:28:
ad:fb:9d:7d:8c:49:07:56:50:92:ed:0c:f2:bf:54:
eb:40:2b:d5:86:8a:a9:2a:5e:13:5b:e5:63:ef:a3:
e9:d3:8c:bd:e5:5c:88:36:82:16:6d:1a:29:c3:e4:
8c:0d:dd:86:3e:27:16:8b:33:46:56:b5:b8:47:7b:
b7:78:a9:e8:86:8a:b8:5e:4b:3b:f5:06:d8:9d:04:
90:5f:ec:f7:45:b8:5e:10:b1:15:a7:b0:b0:11:04:
cf:c0:79:dd:bc:56:f5:01:b6:d4:f6:a3:13:32:d2:
3c:9d:20:a0:e0:ce:b3:09:ff:25:39:d1:1c:0f:c3:
ad:7e:28:de:72:11:97:b0:7b:64:f1:15:65:15:f9:
de:93:ae:49:87:29:02:8b:b3:e5:9f:63:d7:76:0e:
a2:87:62:89:82:50:07:86:e8:27:91:7b:bc:f6:f2:
af:48:e1:77:31:51:bc:5e:70:75:7d:91:10:d3:af:
cb:5f:43:37:b8:f6:c7:1e:7d:a1:ff:79:e4:1e:b2:
da:b6:72:0a:e9:a2:3f:70:ba:90:79:2b:05:b1:7c:
a8:c6:02:8b:55:0d:52:2a:39:e6:31:ad:8e:ba:8d:
40:6a:b8:cb:48:12:3a:3b:40:87:92:ac:eb:e1:48:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:88:10:1B:FE:F0:10:85:5A:35:91:13:06:49:01:A4:77:4D:AF:E3
X509v3 Authority Key Identifier:
keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231332e302f32342d3234203d3e203238323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.36.213.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4a:9c:0c:66:81:7b:17:5d:61:12:81:ad:0d:b2:bf:f8:eb:
eb:6a:eb:b3:0b:72:0c:b0:5e:58:1f:07:35:1d:a9:ab:0c:eb:
c3:e3:4b:2f:16:0c:67:de:3e:22:78:9a:dc:bf:b7:2b:02:5e:
6d:82:dd:81:50:15:96:b2:9b:ed:f6:8f:53:58:db:f5:97:bd:
ce:1c:53:c1:08:3a:91:6a:76:07:b7:f6:f1:43:02:50:02:83:
f5:c0:8d:ba:b9:2c:3d:f1:87:c6:73:9d:ff:65:94:91:c1:d2:
7c:ba:ad:d1:6d:fe:ef:48:3d:80:89:9a:7e:32:16:3b:5a:77:
bf:3c:ca:ee:0f:a0:77:17:6a:aa:10:14:b7:74:f4:1b:18:ae:
2a:65:e5:33:1c:2e:a8:5d:41:76:8f:21:79:a3:0c:25:e2:a5:
99:41:32:35:85:e7:b1:11:9b:89:b2:8b:b0:ad:54:c4:90:52:
e4:ea:ad:38:30:a9:63:da:5a:3c:81:47:2a:d4:08:28:53:7b:
e6:cb:3b:75:1d:7a:64:be:46:49:5a:af:e8:5e:03:da:0a:a9:
31:14:95:c5:0c:25:81:53:e5:07:9b:3c:b7:cf:1f:44:56:0f:
ce:fd:4c:e1:43:0f:e2:db:07:ca:ea:13:7e:04:32:c8:51:f0:
db:ed:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:47:27 2025 by rpki-client