Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32312d3234203d3e203533323234.roa
File: 3138392e34352e31362e302f32312d3234203d3e203533323234.roa (raw, json)
Hash identifier: BZ7nk+/XIqHv9zw/F9VbyuPn6+pmJyRPebzTVBw2AJU=
Subject key identifier: EE:BB:65:AF:CA:F0:88:5C:58:4A:59:CF:BE:AE:4C:6F:93:BA:FA:52
Certificate issuer: /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial: 5F1FF4567473BAADE4B21BAA044BFA92B4254C49
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32312d3234203d3e203533323234.roa
Signing time: Mon 13 Mar 2023 17:08:27 +0000
ROA not before: Mon 13 Mar 2023 17:03:27 +0000
ROA not after: Mon 11 Mar 2024 17:08:27 +0000
asID: 53224
IP address blocks: 189.45.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:1f:f4:56:74:73:ba:ad:e4:b2:1b:aa:04:4b:fa:92:b4:25:4c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Validity
Not Before: Mar 13 17:03:27 2023 GMT
Not After : Mar 11 17:08:27 2024 GMT
Subject: CN=EEBB65AFCAF0885C584A59CFBEAE4C6F93BAFA52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:67:21:ce:33:4f:dc:a8:63:c6:fe:93:ae:
1d:d4:83:17:27:40:4b:7c:22:06:76:f6:55:69:79:
ae:8d:ea:2f:61:11:7f:67:78:6e:31:d5:e6:52:4b:
58:4c:2f:95:02:2e:f8:b4:96:bf:98:12:c4:f3:59:
2d:5a:d1:52:94:18:ae:6c:5e:02:c7:44:fa:02:8d:
2e:4c:a3:c0:6b:90:54:12:98:90:af:9d:3b:b7:e0:
4f:bc:54:a8:67:eb:32:07:cb:44:df:39:d0:2c:07:
1c:84:47:dd:8f:0d:d9:19:d9:b4:80:2d:07:8a:3f:
1d:87:fa:d0:50:4b:42:27:92:93:70:e8:ee:11:79:
2c:66:6b:34:d7:68:b3:2f:98:ac:70:0b:93:06:1f:
e5:de:39:2f:e6:46:13:33:f2:a9:e8:8c:3d:6d:38:
22:3b:35:e2:51:f2:5d:fb:13:f5:57:f5:c1:fe:70:
04:f9:a0:e2:ea:da:1d:6a:75:e6:93:26:1d:30:36:
17:3e:3a:45:51:ac:69:cb:48:e0:ec:55:ba:bb:63:
e5:49:3f:d8:74:eb:d0:18:a8:96:0b:4a:b5:1f:c1:
61:c1:38:01:e5:6b:b1:3c:3f:a0:de:a1:11:dc:65:
71:85:fd:09:c9:30:be:4f:e6:a8:4e:3b:a5:94:2c:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BB:65:AF:CA:F0:88:5C:58:4A:59:CF:BE:AE:4C:6F:93:BA:FA:52
X509v3 Authority Key Identifier:
keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32312d3234203d3e203533323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.16.0/21
Signature Algorithm: sha256WithRSAEncryption
78:77:e6:09:02:27:72:7d:0a:35:60:38:b9:49:ae:1e:d6:85:
94:90:60:3f:c3:3e:85:05:6d:c8:4e:e5:24:1b:46:c5:f5:1b:
de:13:92:13:87:b0:fd:74:f3:b0:68:81:f3:7e:d8:86:73:aa:
48:fa:8b:e2:62:85:19:44:da:02:d1:f6:9a:a0:28:f3:f8:bf:
42:26:98:c1:32:92:90:a6:f0:48:a4:e7:17:01:a5:2a:67:7e:
3c:78:c0:7d:7a:df:dd:88:3e:60:97:05:74:f0:c8:c7:08:39:
27:0a:a4:14:aa:b3:bc:7c:d0:03:bb:bb:4d:e9:7e:7c:45:6c:
4a:aa:04:19:f5:db:09:12:d8:f3:80:91:44:69:4f:70:68:d7:
4f:82:46:80:bd:ec:26:22:df:32:1d:7f:b3:78:8a:62:d2:a1:
66:00:e0:94:38:2d:b2:69:65:1a:f4:c0:49:45:c5:39:29:02:
09:8f:e4:eb:2a:d8:d3:cc:77:e5:a6:80:7b:cf:b2:94:21:90:
c0:6a:67:e0:93:13:66:3d:b2:4b:f0:6a:f2:58:09:f3:53:a3:
75:d9:95:e7:80:1d:64:78:49:17:9e:87:bb:6a:85:0f:40:dd:
d2:f0:df:7b:61:c6:47:88:59:65:76:87:03:00:70:79:70:72:
50:50:17:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org