Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3234302e302f32312d3231203d3e203238323230.roa
File: 3138392e3132342e3234302e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier: eAdM4k2MvB/Th8gwd+NQ1PJ+bwfL45rfUOfW7EcGW+o=
Subject key identifier: 4B:AF:39:1E:AF:97:46:E6:84:0B:7B:6D:93:2E:D6:B6:E1:43:1F:B5
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 46DC593211A0DD90FEA3475C1D7565C7C91C12AB
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3234302e302f32312d3231203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:25 +0000
ROA not before: Tue 12 Mar 2024 19:46:25 +0000
ROA not after: Tue 11 Mar 2025 19:51:25 +0000
asID: 28220
IP address blocks: 189.124.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:dc:59:32:11:a0:dd:90:fe:a3:47:5c:1d:75:65:c7:c9:1c:12:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:25 2024 GMT
Not After : Mar 11 19:51:25 2025 GMT
Subject: CN=4BAF391EAF9746E6840B7B6D932ED6B6E1431FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:6f:05:97:12:0b:fd:c2:4a:c0:ab:67:b8:
49:8c:11:21:1e:37:9e:bd:5d:46:5a:9e:ce:7c:09:
a0:df:ce:f0:bf:25:79:71:fb:ec:97:09:26:2e:a0:
8a:f2:ba:2e:0f:bf:e5:f9:cb:94:f8:83:06:78:91:
eb:b7:3e:75:b7:26:b7:9a:55:a9:51:ff:54:dc:39:
2c:13:20:a0:5f:b0:9a:c4:00:a1:d8:09:2d:39:48:
ae:86:54:be:3b:23:2f:f5:df:35:ce:31:7a:02:ee:
55:65:02:bc:24:4c:b2:4b:a1:7e:2b:59:4b:54:8b:
18:1f:61:c0:4f:00:92:a9:a3:eb:d5:1a:7f:2f:a9:
e0:34:2a:0b:6a:be:3c:53:83:ec:e7:c3:11:bc:42:
cb:c2:ca:68:57:f8:2c:6f:ee:e6:05:85:a7:a1:e8:
31:a6:e1:94:41:a6:9f:53:d2:c1:1e:ef:da:69:f0:
12:76:54:76:04:d1:30:b1:05:52:28:50:cc:1d:07:
69:34:a8:9b:c7:23:31:09:b0:0a:14:bf:cc:7b:3a:
de:69:f0:a5:f8:18:bb:dc:40:73:7f:87:20:85:61:
d5:ed:bd:38:48:57:19:46:d7:d8:91:6c:5a:a1:6e:
2e:7b:22:d0:bb:e2:8a:81:5e:27:02:55:53:1a:6b:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AF:39:1E:AF:97:46:E6:84:0B:7B:6D:93:2E:D6:B6:E1:43:1F:B5
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3234302e302f32312d3231203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.124.240.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:15:d0:fc:0c:92:31:b5:58:75:5b:77:fa:4a:74:34:90:df:
e4:38:19:bd:0f:69:51:5d:3b:45:43:03:85:33:9e:9c:ea:31:
29:c2:94:c3:92:7b:3a:8a:30:eb:a4:26:58:4c:c3:98:16:85:
17:20:0d:c3:36:76:12:65:49:db:0e:03:4a:14:46:d3:4d:1b:
b1:fe:74:79:28:32:4b:3e:a1:07:1b:a0:90:69:13:dc:0a:9c:
f9:56:f2:cf:ce:eb:42:e3:5c:66:e5:07:dc:5c:4a:22:bf:35:
f9:26:4e:5f:f6:21:d8:a6:0e:f4:c7:7a:11:cf:f0:8a:f6:ef:
f9:ef:e1:a7:81:6b:bb:d6:43:6d:b3:49:55:85:d3:48:ce:e8:
aa:2b:f7:26:e4:07:c5:9b:df:96:cd:c9:a0:0a:e0:4a:4a:ac:
3e:4f:3a:f9:91:af:9b:6e:32:f2:6e:aa:d8:94:fd:d3:3a:1d:
cb:12:0d:5e:50:ee:85:88:cc:13:08:bf:56:95:94:6e:4c:1c:
e2:a4:cc:80:f1:b1:eb:ca:8a:e5:70:54:16:2e:4b:b9:72:78:
a5:ee:8b:a1:3e:69:27:9d:02:b3:f5:6d:c2:5c:82:a4:f1:6c:
1b:72:54:2d:00:9d:fd:c4:9c:da:af:7c:9f:ae:b1:60:9d:bf:
78:41:32:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org