Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32302d3234203d3e203238313931.roa
File: 3138392e39302e33322e302f32302d3234203d3e203238313931.roa (raw, json)
Hash identifier: vIORKi5kLLeBgV8nPAx/G+gR5m3mbrok9LXdNJh7A20=
Subject key identifier: 9E:83:86:34:84:89:08:DA:23:30:A8:91:23:AC:BC:16:21:1E:5F:49
Certificate issuer: /CN=7F8EA995A4408768396ABD97DA2AABC1207C94EC
Certificate serial: 0687EBB07D1E161EBE43D68C434DC0B73618F442
Authority key identifier: 7F:8E:A9:95:A4:40:87:68:39:6A:BD:97:DA:2A:AB:C1:20:7C:94:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8EA995A4408768396ABD97DA2AABC1207C94EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32302d3234203d3e203238313931.roa
Signing time: Wed 01 Feb 2023 14:00:00 +0000
ROA not before: Wed 01 Feb 2023 13:55:00 +0000
ROA not after: Wed 31 Jan 2024 14:00:00 +0000
asID: 28191
IP address blocks: 189.90.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:87:eb:b0:7d:1e:16:1e:be:43:d6:8c:43:4d:c0:b7:36:18:f4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F8EA995A4408768396ABD97DA2AABC1207C94EC
Validity
Not Before: Feb 1 13:55:00 2023 GMT
Not After : Jan 31 14:00:00 2024 GMT
Subject: CN=9E838634848908DA2330A89123ACBC16211E5F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:89:3d:32:0a:f2:66:e4:e4:a1:a1:8f:b8:a3:
fd:a6:ed:b9:2d:2b:43:5b:5d:d7:67:d6:f1:89:fd:
ea:65:7f:dd:7b:a6:22:16:6b:2d:e7:e0:81:0e:11:
1c:00:fe:06:8c:9f:6f:90:bb:1d:e5:8d:e9:9f:ee:
7f:7c:33:ec:cd:a1:88:da:a1:ae:13:2d:5e:cc:9d:
d7:9e:3b:df:01:bf:61:ba:72:3a:b3:b0:37:ed:49:
2d:66:c8:5b:a9:27:92:60:4a:a3:4c:53:f5:fb:5a:
9c:7b:8c:35:53:e3:8b:a2:3c:54:e9:24:32:fc:29:
9e:95:ea:cb:98:c9:01:d1:46:8c:36:be:a7:3d:aa:
b9:df:b5:50:1c:78:08:1a:02:57:4f:0c:52:42:d7:
f0:8f:42:29:08:f9:e2:0d:74:c4:ed:a2:94:5a:d4:
80:67:9e:cd:8d:2e:d4:ce:3d:81:a0:a5:79:dc:7b:
99:f4:af:b2:0e:7f:6b:0c:fe:59:32:7b:29:87:e8:
b8:bd:a5:3a:b8:6a:ff:6d:5b:16:ce:ac:1e:fb:40:
4d:af:5e:d5:bf:76:5c:d5:60:54:90:46:82:58:ad:
cd:9a:06:97:16:5d:16:fb:44:e7:01:aa:f3:8c:c1:
84:70:17:d0:e1:d0:a4:fb:55:75:9a:c5:b5:68:97:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:83:86:34:84:89:08:DA:23:30:A8:91:23:AC:BC:16:21:1E:5F:49
X509v3 Authority Key Identifier:
keyid:7F:8E:A9:95:A4:40:87:68:39:6A:BD:97:DA:2A:AB:C1:20:7C:94:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/7F8EA995A4408768396ABD97DA2AABC1207C94EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8EA995A4408768396ABD97DA2AABC1207C94EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32302d3234203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.32.0/20
Signature Algorithm: sha256WithRSAEncryption
72:9f:16:08:21:7d:51:09:ae:31:f5:de:ad:15:47:91:1b:d1:
a3:f4:3e:a0:06:a9:4a:ee:5b:30:dd:de:af:82:dc:2e:a2:01:
a7:d8:82:ca:1d:af:f0:ff:26:29:53:53:1f:38:bd:d7:ea:53:
e0:65:09:8f:43:7d:d3:3c:6c:e2:a3:25:1d:6e:87:a4:b8:14:
31:b5:65:d5:3f:06:5e:d8:a1:8d:20:b4:be:ab:7b:cd:08:24:
32:c6:01:90:e4:88:b6:2f:68:dc:cc:00:40:49:13:c0:94:49:
97:46:19:3a:b9:4e:12:bd:d2:f7:18:92:24:e0:96:02:2a:22:
69:86:f2:5a:60:0c:28:25:ef:de:d7:b1:8f:b3:ba:a5:03:ed:
8d:16:ab:0e:e7:72:fc:ca:ac:bd:1c:54:d8:bd:f5:cc:58:04:
37:c4:36:92:a2:9e:44:56:17:8a:38:41:5e:87:82:6e:6f:6a:
54:b9:82:5d:8b:de:69:80:f5:e3:bb:4d:5e:30:49:37:cb:75:
19:b8:89:cb:54:37:95:6a:48:84:74:2c:c7:2c:55:38:af:fe:
de:ed:92:85:f4:2e:c3:90:12:5d:40:cd:b4:ee:f0:cc:fd:f9:
f2:9e:75:e5:72:45:27:86:54:cb:3c:1b:6d:64:b9:65:8c:fc:
3c:8b:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 12:58:51 2023 by rpki-client on console-ams.rpki-client.org