Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32322e302f32342d3234203d3e203533303539.roa
File: 3138392e34352e32322e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier: STRF992R0wLBhdvxJIjiGnAnN8yf8T7znXq6wkwkGB4=
Subject key identifier: 14:37:FE:C7:49:B3:44:6C:0C:23:C9:8D:19:96:C5:22:28:A6:1D:08
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 6F45508AE15EAAFB9C08F5D1D4DD8B5426F11C24
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32322e302f32342d3234203d3e203533303539.roa
Signing time: Tue 12 Mar 2024 19:51:24 +0000
ROA not before: Tue 12 Mar 2024 19:46:24 +0000
ROA not after: Tue 11 Mar 2025 19:51:24 +0000
asID: 53059
IP address blocks: 189.45.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:45:50:8a:e1:5e:aa:fb:9c:08:f5:d1:d4:dd:8b:54:26:f1:1c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:24 2024 GMT
Not After : Mar 11 19:51:24 2025 GMT
Subject: CN=1437FEC749B3446C0C23C98D1996C52228A61D08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:df:a5:bf:5d:59:e6:72:96:c6:76:41:67:
0b:ff:4e:9b:e8:61:21:73:c3:76:e5:e6:6b:65:73:
4b:37:24:aa:f3:41:ea:18:c3:75:5f:51:c0:fd:50:
a9:9d:a0:9d:c5:95:d8:c4:b0:8f:b6:6c:43:72:62:
f5:10:43:58:86:25:57:e7:fe:39:db:f9:f6:42:b4:
85:ab:1a:75:07:ad:d7:27:5d:b0:e6:75:08:bd:39:
87:7e:2a:ed:87:bc:62:fb:aa:03:86:d7:ee:78:2d:
a1:f5:6b:56:8a:f2:e7:96:fd:db:63:cd:56:73:de:
34:97:57:62:9d:e6:f6:56:23:aa:16:26:ab:ab:18:
07:ae:ec:fe:e6:de:ae:f1:c7:10:f1:3d:de:90:27:
ac:34:dd:00:cf:c0:08:bb:3c:30:cc:fd:c0:0f:55:
f0:2f:a5:e8:d5:74:2a:7c:c4:b8:dd:cd:45:dc:b8:
98:0d:0f:19:93:3c:bd:0c:7b:6d:7e:74:d5:6b:9e:
7b:3f:07:13:78:23:e3:29:b0:f4:84:2b:55:13:79:
5c:94:c7:41:7e:be:e3:0c:58:80:f6:f5:d0:23:16:
3a:93:2d:4f:2a:56:8b:4f:82:02:6b:1b:ed:87:7d:
7f:24:2b:a2:11:74:ae:bc:f5:b8:41:7e:a4:18:c0:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:37:FE:C7:49:B3:44:6C:0C:23:C9:8D:19:96:C5:22:28:A6:1D:08
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32322e302f32342d3234203d3e203533303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:36:dd:b3:2a:e9:7a:ec:a0:8d:ec:a6:0f:c0:e9:c3:8d:51:
44:09:8f:6c:5a:6c:ec:e5:c3:ba:f7:1a:65:55:33:a1:2e:e3:
73:76:48:35:a9:e1:fc:f2:47:c5:50:af:ae:f8:8b:e4:27:ef:
27:61:dd:0d:27:c9:7f:f6:e7:4c:de:a5:6e:97:a9:3c:e7:f6:
f1:16:12:52:ed:62:20:85:68:eb:8a:4e:9f:73:a6:41:a6:1e:
ab:bc:6c:0a:f7:7c:d3:fc:a3:1a:4a:aa:98:34:59:a8:f5:bb:
59:69:59:30:73:cd:09:f3:f0:f1:91:ff:96:1b:75:18:b2:8f:
d4:f5:56:fa:9c:3f:1e:1f:d8:4d:c3:30:e8:d8:1c:f5:53:0a:
b0:e8:6c:7d:60:6a:4f:a1:d5:03:bd:9b:a9:de:a9:3f:fc:30:
e8:ee:f7:98:6b:71:a5:66:f6:15:e2:b0:bb:4d:dc:90:d1:d3:
74:3a:63:ca:c3:cd:19:30:09:33:5d:6b:59:73:26:95:26:41:
ba:94:55:45:70:7f:86:49:7b:d6:b5:a0:1c:1c:81:39:3d:04:
92:8f:a3:c8:a7:cb:ae:63:2a:6d:c0:a4:2f:12:85:a2:6c:98:
34:bd:ee:69:59:95:f0:38:cc:81:11:90:8d:57:80:2f:3e:39:
e8:3d:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org