Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e33322e302f32302d3234203d3e203533313538.roa
File: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (raw, json)
Hash identifier: hbNHm3JSWGn8mnXVU3f6OzBEDG47bAy239375lTILdQ=
Subject key identifier: 2C:CB:61:8C:F7:C9:96:C7:47:FC:C9:C2:6F:1E:04:27:00:81:AC:7E
Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial: 5C47808F04EA4992D6F074FE22BA4F60BDE8E38A
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e33322e302f32302d3234203d3e203533313538.roa
Signing time: Fri 20 Dec 2024 14:59:05 +0000
ROA not before: Fri 20 Dec 2024 14:54:05 +0000
ROA not after: Fri 19 Dec 2025 14:59:05 +0000
asID: 53158
IP address blocks: 186.209.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:47:80:8f:04:ea:49:92:d6:f0:74:fe:22:ba:4f:60:bd:e8:e3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Validity
Not Before: Dec 20 14:54:05 2024 GMT
Not After : Dec 19 14:59:05 2025 GMT
Subject: CN=2CCB618CF7C996C747FCC9C26F1E04270081AC7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fb:11:32:7c:26:b6:29:d6:28:e6:02:a3:46:
eb:77:8d:aa:86:22:ba:2f:c6:de:79:fb:13:16:44:
3d:96:86:fb:90:80:74:9e:27:b2:97:16:f8:ce:e2:
22:84:4e:b1:4f:41:39:0d:a3:b1:c3:16:ba:97:d5:
fa:82:8a:59:55:bd:9c:67:6a:26:0a:81:44:d1:fb:
60:0f:6f:7a:5a:39:66:9a:c6:f0:66:d2:50:b7:72:
b0:76:be:9d:f7:02:c9:46:f4:0e:13:04:82:d7:da:
ad:c7:71:53:97:d5:75:c0:4b:d6:1b:e9:a3:cb:0a:
cb:a8:7c:16:c7:27:09:8d:5d:21:af:ee:5f:40:dd:
4a:00:f1:c6:0e:61:d9:45:7d:cd:15:99:cd:e0:34:
65:7c:e8:30:18:ee:c0:f5:1a:be:70:74:67:af:68:
57:37:4d:2b:57:43:16:7c:b6:c2:0b:e0:58:a1:08:
75:f4:06:f6:2e:bf:06:e1:24:25:d4:f5:00:4f:30:
56:7b:d0:b4:92:a5:d6:1a:00:e2:56:3e:ff:ab:95:
3d:64:90:6e:8c:9e:88:4b:cc:d6:05:fc:7c:87:20:
40:c2:1a:91:62:4e:c0:d9:ea:60:bd:f6:b4:07:ff:
84:e9:09:6c:5b:9c:55:ec:02:21:09:c6:1d:e5:b1:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CB:61:8C:F7:C9:96:C7:47:FC:C9:C2:6F:1E:04:27:00:81:AC:7E
X509v3 Authority Key Identifier:
keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e33322e302f32302d3234203d3e203533313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.32.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:cc:a0:64:f1:cd:09:db:ac:81:63:89:47:45:d8:42:74:de:
ef:c3:2c:8b:02:4b:3d:88:88:24:12:e8:ce:32:af:6e:11:aa:
a5:37:7c:87:06:56:b6:ae:d2:9e:d9:b8:1e:9a:48:bd:1d:8b:
72:a3:55:c7:b4:60:1a:bc:de:07:d8:f2:6f:d0:11:e3:98:a6:
e6:1c:79:30:27:ab:1b:ca:46:84:66:ad:b7:f4:fc:cf:07:0c:
18:87:dd:e1:55:c8:24:d6:a2:b5:34:9b:7e:c2:a4:d7:5a:7d:
d7:58:95:18:11:83:8a:96:f7:3e:30:d6:3f:df:43:85:f3:25:
9a:a8:a6:6b:b2:71:03:20:1f:bb:e5:38:94:18:36:ad:00:e8:
cf:96:ab:1e:bb:ce:31:09:cc:59:e8:b2:4c:1a:b5:1f:d1:62:
86:40:75:0f:7b:59:4f:8d:c3:9c:7a:7d:a9:94:02:0b:62:c8:
65:b2:a4:79:73:8b:17:31:cf:29:69:d2:db:f4:24:90:b2:a7:
75:27:20:24:56:70:f7:ff:ab:bb:04:62:4a:6c:cb:f6:40:e2:
87:5d:9c:72:94:de:6d:12:e4:6e:3e:40:a4:0d:13:e3:5b:e7:
19:6e:36:7e:fb:ee:44:16:0b:5f:77:67:2b:ea:d9:6f:47:1a:
46:92:13:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:25 2025 by rpki-client