Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3132382e302f31372d3137203d3e203238323230.roa
File: 3138392e3132342e3132382e302f31372d3137203d3e203238323230.roa (raw, json)
Hash identifier: 8LzF1QcUmNgSPYh5gGjqXeUVsypYeF0LJhaGMf6g7pw=
Subject key identifier: 88:BE:A3:AA:F5:32:F7:E1:BF:F4:F8:7A:BB:C6:BF:3C:B1:E3:2F:D6
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 743F84C4F52F4196D2D9B4D4C764CAFAD737EE2A
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3132382e302f31372d3137203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:23 +0000
ROA not before: Tue 12 Mar 2024 19:46:23 +0000
ROA not after: Tue 11 Mar 2025 19:51:23 +0000
asID: 28220
IP address blocks: 189.124.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3f:84:c4:f5:2f:41:96:d2:d9:b4:d4:c7:64:ca:fa:d7:37:ee:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:23 2024 GMT
Not After : Mar 11 19:51:23 2025 GMT
Subject: CN=88BEA3AAF532F7E1BFF4F87ABBC6BF3CB1E32FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fe:ee:ae:3d:75:69:6e:7f:7e:46:81:bb:0e:
34:4c:85:9e:19:ce:79:ef:21:f0:2b:f8:b0:48:85:
dc:09:74:19:f6:23:23:96:7c:47:7f:2d:a5:43:1e:
e1:ce:67:2b:e3:2b:51:c6:ee:da:4c:8c:cd:0c:bd:
5e:a9:d8:3c:5a:e1:8e:7d:73:45:72:77:10:25:18:
d7:2b:33:a6:d7:19:37:f6:3a:50:fe:61:a5:b9:06:
ce:bd:dc:98:ba:af:e1:98:4f:01:ba:44:c9:30:72:
c5:e5:1d:d8:1a:36:2a:51:c2:62:8c:cb:51:d5:a9:
70:d7:30:c7:b6:52:d0:78:0c:c3:6f:36:4d:3b:a4:
55:22:9b:dc:f8:fa:34:2a:4e:34:9c:60:c0:49:63:
c6:4d:ac:dd:42:89:fc:60:bc:2a:04:86:c4:9f:79:
f7:f0:a8:39:87:0d:d4:23:21:3f:b1:76:cc:53:91:
ac:41:22:59:f2:c3:05:df:5b:b9:d1:83:f4:da:ca:
13:a6:97:2e:7a:f3:f0:0a:f9:7f:2a:bc:08:60:a6:
75:80:e7:67:4a:ef:c6:6a:b5:ce:e7:95:b4:4e:9a:
67:98:1c:71:52:37:72:5d:1d:e2:1a:f2:3d:41:03:
ed:e4:21:49:e1:db:fa:f0:35:f5:0f:54:79:b0:e1:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BE:A3:AA:F5:32:F7:E1:BF:F4:F8:7A:BB:C6:BF:3C:B1:E3:2F:D6
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3132382e302f31372d3137203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.124.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4b:56:6f:82:c3:10:c3:97:d3:df:0c:ef:b9:54:50:ee:9b:a7:
59:76:79:c0:ad:79:70:81:c6:0c:da:eb:f4:5c:01:4a:06:4f:
95:59:a0:68:f4:a9:13:07:d1:52:9f:76:7f:d5:c3:8c:b0:0a:
21:74:4d:17:7e:3a:2a:b1:7a:e9:f9:d0:c8:9e:68:c8:f7:05:
82:b0:0c:6c:e0:74:22:99:06:98:50:91:24:98:45:cd:4e:f9:
3a:2f:3b:40:1b:82:f0:c5:b3:80:92:5f:9a:87:97:a6:aa:17:
39:19:97:25:14:3c:c8:d4:2d:da:8e:0f:21:d2:bf:42:1a:6f:
89:d2:da:77:55:29:84:4d:9d:01:88:89:fc:f7:39:6c:f7:aa:
c8:9a:6b:76:ec:fd:0f:5b:22:90:83:40:a2:70:a0:79:f1:34:
85:6c:f0:2a:1d:2b:17:6e:e3:ff:fd:71:12:f3:39:f7:fb:4f:
ef:34:66:97:1c:0d:7f:ac:04:1d:dd:9d:5c:df:ea:a3:45:c7:
47:27:7a:d1:eb:7a:c0:b5:17:7c:7f:6a:36:ba:2e:b9:f0:d1:
b2:76:f9:fb:7e:cb:e9:92:9d:e9:d8:8a:81:fa:25:04:66:92:
a3:fa:d2:6d:ba:53:35:9d:fc:f5:0f:52:fb:fa:67:92:86:3c:
4f:38:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org