Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e39342e3131322e302f32302d3234203d3e203238363538.roa
File: 3138372e39342e3131322e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier: NpdY+3d9kZai+uCyukzMbW8E4YoBhaj0QtvH27YR+7c=
Subject key identifier: 81:0D:23:AA:70:4A:39:6B:84:2A:1E:CB:D5:C2:2F:2D:86:51:9F:F2
Certificate issuer: /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial: 23C28FC68153F276BDF57E9AEB40EF1B44DE4FB4
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e39342e3131322e302f32302d3234203d3e203238363538.roa
Signing time: Thu 04 Apr 2024 09:18:04 +0000
ROA not before: Thu 04 Apr 2024 09:13:04 +0000
ROA not after: Thu 03 Apr 2025 09:18:04 +0000
asID: 28658
IP address blocks: 187.94.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c2:8f:c6:81:53:f2:76:bd:f5:7e:9a:eb:40:ef:1b:44:de:4f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
Validity
Not Before: Apr 4 09:13:04 2024 GMT
Not After : Apr 3 09:18:04 2025 GMT
Subject: CN=810D23AA704A396B842A1ECBD5C22F2D86519FF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:aa:f4:cb:a8:0e:c3:e5:d1:2a:6c:92:bf:
94:21:c1:c3:42:e2:55:eb:1d:cb:ff:3b:b6:5d:6d:
2b:ac:88:21:4a:c9:a6:71:2e:ee:40:62:2a:ff:f2:
1c:0c:dd:38:2f:7e:3a:a7:17:61:49:0d:d4:0a:f9:
0d:97:14:1b:7d:45:72:59:0c:b4:be:24:38:d4:80:
68:29:c9:85:5a:24:37:31:bc:cd:94:75:22:98:41:
4a:f7:fd:50:30:d1:9f:e8:ef:7c:b3:ec:40:69:f0:
b5:0f:d5:ee:23:54:70:88:45:d8:79:89:b1:70:2e:
36:f9:9e:72:6c:70:f3:ee:02:40:c2:38:2b:bd:d2:
db:22:1e:af:f2:10:9b:c0:5a:1b:db:c2:8a:54:24:
b3:56:5b:16:07:4d:cb:35:02:1e:ec:e5:3a:b2:19:
99:5a:c4:af:c5:70:48:a4:f8:b6:39:22:c2:43:c8:
d8:a3:9b:9a:9e:be:f8:c9:2b:59:3a:39:b6:1f:61:
3f:70:f2:36:69:6d:5e:65:8b:9d:6e:bf:a7:11:f1:
b8:b0:b5:69:43:9e:2d:3c:d3:48:76:3c:89:18:62:
9a:bb:db:19:43:88:cc:23:e0:6b:28:d4:b3:50:18:
c4:56:22:f6:63:12:20:4e:93:81:1e:35:64:8c:b4:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0D:23:AA:70:4A:39:6B:84:2A:1E:CB:D5:C2:2F:2D:86:51:9F:F2
X509v3 Authority Key Identifier:
keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e39342e3131322e302f32302d3234203d3e203238363538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.94.112.0/20
Signature Algorithm: sha256WithRSAEncryption
69:fd:6c:68:5f:c9:97:fd:11:00:f7:d7:cb:3d:c2:3f:46:76:
7a:38:1c:45:01:1c:9d:c8:51:5d:c2:b7:0c:bc:69:46:8d:14:
29:e2:16:c7:93:84:71:27:5f:a3:99:53:fb:1c:d9:41:7b:67:
ef:5b:d1:5a:8c:e4:cb:21:09:40:72:5b:4b:36:4b:04:2b:eb:
3e:fe:35:9d:da:91:a9:c5:10:91:e0:98:3d:d6:59:45:d3:be:
05:00:46:6e:0d:b7:5c:7c:0c:19:65:89:2d:88:37:41:66:29:
09:2a:7e:06:d7:5a:53:07:db:17:93:21:35:dd:d4:21:91:4d:
83:08:31:9c:b4:b5:5f:9a:d9:bb:b3:e4:4c:8a:bf:a3:55:9a:
14:bc:35:2d:36:c9:72:74:26:61:b0:54:07:a6:8e:56:80:af:
22:6d:fe:08:d2:8f:ad:82:69:d7:bd:7c:74:66:5b:f3:f0:01:
d1:7f:a3:a1:74:19:12:0a:9c:dc:44:34:2f:ca:10:f3:0f:95:
e9:ca:39:9b:5b:3a:c8:8a:f1:72:34:18:19:00:d9:fc:aa:28:
c5:86:96:73:cb:5a:95:7c:62:f1:c2:1e:7c:cd:0c:7e:54:b4:
28:4d:b1:9e:4a:a9:5b:00:9c:e1:2a:67:6d:b7:76:2b:83:79:
45:06:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:32 2025 by rpki-client