Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32312d3231203d3e203238323230.roa
File: 3138392e34352e31362e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier: Hj158z9+u5M1TAaAfLQUZr/sC3bvmGp68l+8/rvSyls=
Subject key identifier: 96:59:F5:1D:18:50:B4:8C:69:BA:0C:74:BE:6B:D3:85:17:38:07:D8
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 138B138D6D729AF2B0F000AD3FBF53FB0C366917
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32312d3231203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:16 +0000
ROA not before: Tue 12 Mar 2024 19:46:16 +0000
ROA not after: Tue 11 Mar 2025 19:51:16 +0000
asID: 28220
IP address blocks: 189.45.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:8b:13:8d:6d:72:9a:f2:b0:f0:00:ad:3f:bf:53:fb:0c:36:69:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:16 2024 GMT
Not After : Mar 11 19:51:16 2025 GMT
Subject: CN=9659F51D1850B48C69BA0C74BE6BD385173807D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:5e:92:2e:e0:ab:59:80:92:f1:aa:76:d7:
f0:d9:50:8c:2d:ba:31:ee:d9:32:73:17:58:b4:55:
6b:7e:7b:bb:a0:f8:62:76:c0:48:76:7c:4e:88:05:
17:72:28:f1:f9:f7:9d:3e:87:ee:be:a5:0e:ee:83:
27:6b:38:db:ed:0a:5c:98:f6:29:b6:cb:44:6e:fc:
8d:24:2a:3e:99:49:0f:64:49:6b:db:b6:ff:4c:77:
c5:16:5c:7f:40:35:22:23:ae:f0:f5:08:3b:7e:14:
f6:bd:24:b4:4f:a7:5a:41:19:f9:06:79:f7:58:03:
70:37:a6:f4:ac:d3:3a:6f:5b:07:75:80:4a:ad:be:
f9:6a:00:c6:ef:fd:c4:6d:cf:d8:6e:f4:09:70:68:
fe:f5:0b:65:60:16:33:2f:88:ca:c7:2f:a5:e2:32:
a5:c6:0e:87:da:1b:81:06:81:24:9f:86:1f:1b:a8:
89:85:ad:da:81:c2:aa:6e:a6:48:34:2b:57:29:cb:
2c:7e:fe:88:2a:d6:9b:69:f1:af:f4:5c:6f:62:db:
4c:28:fc:42:58:9b:8f:ee:7e:ee:a1:ce:3d:e0:89:
91:92:51:b4:56:d9:72:93:7d:cc:54:e2:d9:4b:75:
ec:11:a1:f9:39:84:ce:7c:cf:ab:02:cf:17:d4:ba:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:59:F5:1D:18:50:B4:8C:69:BA:0C:74:BE:6B:D3:85:17:38:07:D8
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32312d3231203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.16.0/21
Signature Algorithm: sha256WithRSAEncryption
43:32:3e:92:56:b0:98:12:69:ea:0e:4d:f6:1f:24:13:b5:d3:
a2:c6:02:8e:3d:11:4b:14:11:f9:d2:d8:d4:52:5c:9c:10:0e:
9e:41:91:70:95:7e:c6:cf:c6:de:37:c4:37:15:12:b5:1b:c9:
b0:77:70:a2:a3:7f:f0:51:32:13:98:c5:06:69:37:a6:1b:ba:
a6:2e:49:19:05:8a:ad:9e:0e:48:5c:8e:d0:e5:80:36:d7:3d:
a8:84:91:95:fc:96:6a:6a:51:ff:11:e6:75:e0:55:9a:b2:fe:
07:7a:54:ee:71:0f:21:af:0b:91:c0:29:f5:e8:00:43:d4:37:
6c:ed:06:2f:91:7a:b4:c4:de:e3:0e:ba:e2:3b:fa:a1:4e:82:
44:67:e7:08:d7:fb:58:c3:dd:59:0b:69:99:84:50:f1:35:35:
1e:f9:22:47:90:40:83:72:a2:1d:ab:bf:66:9c:5c:fa:11:1b:
7a:ad:fe:53:fa:23:4c:56:b8:f9:3e:7e:86:09:05:83:4a:e0:
e9:bd:21:11:a8:00:f2:8e:4c:3a:b5:4f:3a:cd:e5:dc:ae:b5:
fa:e6:84:bf:0d:57:f7:0d:8e:f0:fa:10:63:15:7f:78:82:59:
f4:c9:8d:bf:5e:99:b3:38:5c:9f:57:d7:17:d0:51:7a:37:4f:
08:63:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org