Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131382e302f32332d3233203d3e20323730353631.roa
File: 3138392e38352e3131382e302f32332d3233203d3e20323730353631.roa (raw, json)
Hash identifier: UBLQEXLPo0xDISJmmpw2u0at8tuCXNk5y3cfOBUjvfs=
Subject key identifier: 1C:DB:5D:D9:D2:79:E3:93:95:52:1A:7F:E9:07:E8:6E:62:B5:FC:EC
Certificate issuer: /CN=D76AC9525C9299F8D9F26853A5246419EB9913D9
Certificate serial: 056550FB581D2DE03B499DBCC513679FEF8E8E19
Authority key identifier: D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131382e302f32332d3233203d3e20323730353631.roa
Signing time: Thu 12 Dec 2024 01:44:24 +0000
ROA not before: Thu 12 Dec 2024 01:39:24 +0000
ROA not after: Thu 11 Dec 2025 01:44:24 +0000
asID: 270561
IP address blocks: 189.85.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:65:50:fb:58:1d:2d:e0:3b:49:9d:bc:c5:13:67:9f:ef:8e:8e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D76AC9525C9299F8D9F26853A5246419EB9913D9
Validity
Not Before: Dec 12 01:39:24 2024 GMT
Not After : Dec 11 01:44:24 2025 GMT
Subject: CN=1CDB5DD9D279E39395521A7FE907E86E62B5FCEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:29:78:93:38:b2:61:40:d6:3a:9e:f6:b2:
ec:9a:a4:6f:2e:1b:d2:b0:7a:c9:ad:b6:c8:cf:16:
c9:78:86:40:ed:36:49:f3:84:02:34:8b:47:38:ec:
2a:d6:eb:07:2c:b9:0c:5f:75:6e:02:32:2c:3d:bc:
e5:a4:7c:aa:a4:09:2c:e3:20:ab:c3:ac:61:cf:33:
9e:ff:e3:31:ef:92:78:70:5e:11:ea:41:cc:60:bd:
bb:77:3b:7c:d1:e2:62:90:da:c1:92:60:f7:4f:2c:
40:70:6e:52:57:08:ae:6b:02:a6:ae:58:e1:b1:02:
a7:3b:15:af:65:29:45:61:1e:39:1f:40:7a:b6:fb:
75:ae:a7:60:be:79:d5:94:cd:eb:4d:5d:8b:ea:e7:
c9:c8:bb:cc:99:68:88:d8:a4:5e:22:28:50:df:83:
83:c7:53:dd:03:a2:9b:f1:17:bb:18:02:32:0a:2f:
fa:66:f8:71:23:f9:b3:82:9e:80:af:bc:1b:a2:0e:
10:ae:97:47:45:10:5d:8e:53:33:e8:a6:3c:b9:df:
75:94:eb:7c:a4:62:20:0a:1f:43:f6:29:75:e0:4d:
18:0f:39:51:b9:b7:93:21:eb:1b:58:68:fa:97:5d:
14:1a:5f:5d:62:cf:c1:2e:b9:19:69:ef:e9:bf:b7:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DB:5D:D9:D2:79:E3:93:95:52:1A:7F:E9:07:E8:6E:62:B5:FC:EC
X509v3 Authority Key Identifier:
keyid:D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/3138392e38352e3131382e302f32332d3233203d3e20323730353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.85.118.0/23
Signature Algorithm: sha256WithRSAEncryption
67:f6:e7:c7:3d:a4:f7:9e:87:02:89:6c:07:6c:ca:e6:6b:85:
c3:21:00:b0:36:36:76:24:22:f3:a3:f1:41:73:97:07:db:3b:
9a:af:93:e5:b5:26:f3:50:3b:e8:a0:ed:31:6a:4f:05:d7:4f:
6f:1f:dd:7f:a9:e6:fc:9b:43:71:72:d3:bf:d1:d3:98:53:ea:
52:7d:fa:26:0e:11:17:62:b2:96:aa:e6:ed:4a:e5:90:19:3b:
7b:3c:45:d9:e3:70:be:7d:3c:76:89:06:8b:59:f6:65:43:a3:
e6:bf:20:66:c9:ae:0e:36:33:dc:e9:8e:b5:19:cb:86:ab:6a:
2b:b8:90:b7:4a:70:c3:d4:b4:55:8c:a1:6a:99:97:a1:f0:7b:
ca:6e:da:1f:75:c1:49:8a:66:f4:5a:16:ec:35:74:2b:51:91:
ea:13:8a:12:94:3a:d9:e8:ef:22:a1:ff:6b:d1:be:ce:3b:92:
2c:03:56:41:5c:58:0c:d9:c3:0b:e5:5e:3c:24:ec:c4:50:ce:
67:cb:c5:ad:0e:d4:6e:9e:08:c1:22:e8:21:4f:d0:0f:d2:ff:
c0:0c:ae:7f:9b:6d:2f:56:e0:18:2c:50:78:6d:3c:d5:2b:cb:
61:30:13:54:25:6d:33:dc:40:74:8d:02:b3:c7:5c:c6:cc:bc:
0b:0f:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:43:45 2025 by rpki-client