Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32342e302f32312d3231203d3e203238323230.roa
File: 3138392e34352e32342e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier: pXabgUR2gkvEIc13ZL6bL/HrdjPLjgsb28SmJtYa5ZY=
Subject key identifier: 25:B6:6E:91:3D:D3:74:5D:3C:D7:24:89:64:56:99:F8:EB:F4:F0:5E
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 168FDF9E8936AAF37D56BADABCEAC70833A0DEC9
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32342e302f32312d3231203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:13 +0000
ROA not before: Tue 12 Mar 2024 19:46:13 +0000
ROA not after: Tue 11 Mar 2025 19:51:13 +0000
asID: 28220
IP address blocks: 189.45.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8f:df:9e:89:36:aa:f3:7d:56:ba:da:bc:ea:c7:08:33:a0:de:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:13 2024 GMT
Not After : Mar 11 19:51:13 2025 GMT
Subject: CN=25B66E913DD3745D3CD72489645699F8EBF4F05E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:6d:1e:e5:12:7f:06:05:f8:d8:c2:3c:df:
a6:22:8f:f0:55:c4:dc:72:9e:4d:91:7f:5c:62:78:
9d:b7:1c:a2:01:f1:09:c2:a5:e9:47:03:54:6d:19:
8b:61:6c:84:47:a5:90:e4:c1:75:d5:a1:f5:c5:b3:
33:df:d7:ba:ba:d8:eb:26:a8:d4:03:25:b1:49:57:
9c:40:35:4f:b1:cd:44:70:4f:51:f1:e0:43:bc:ba:
c4:d8:a9:a9:ab:25:84:d2:02:e5:4a:93:86:e2:9f:
e2:41:ac:1f:a4:da:b1:2b:5c:5a:5e:c0:fa:c1:9c:
67:9a:c8:f8:60:38:ea:fb:6a:1c:79:35:14:cb:f7:
e1:01:2c:c8:fd:e1:7f:77:bd:87:57:98:bc:70:32:
ee:85:9f:ff:d5:b5:49:bb:42:be:32:7d:85:f4:be:
d1:8f:ea:c6:2e:63:1a:f5:3d:34:ab:e8:c2:c6:d0:
23:5d:76:8e:01:0d:07:7f:cc:a0:a1:7a:9d:79:a0:
bc:3c:70:16:57:c5:57:7f:d0:f2:4d:96:41:e2:94:
43:b4:ee:93:ac:27:cb:1c:d5:6f:bf:f7:50:32:28:
7e:a5:3b:13:45:ef:61:19:be:b7:ad:47:4c:4b:f9:
2e:ad:97:30:ed:30:3d:57:cc:d0:19:58:a7:84:04:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B6:6E:91:3D:D3:74:5D:3C:D7:24:89:64:56:99:F8:EB:F4:F0:5E
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32342e302f32312d3231203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.24.0/21
Signature Algorithm: sha256WithRSAEncryption
35:44:56:89:82:82:54:08:74:e2:f1:9a:13:f1:32:42:1a:98:
32:81:5b:83:a2:9c:87:67:77:49:00:87:21:45:11:79:88:de:
82:1c:b4:b4:01:90:6d:ab:ba:c8:7f:d5:1c:7f:aa:3d:f7:ef:
6c:3b:90:33:a2:e6:99:b4:ae:01:d0:b2:56:50:e5:43:49:e0:
32:0d:3b:21:68:24:ab:9b:5a:69:2d:d2:c2:3e:3f:a9:d1:3d:
c9:40:00:11:55:4b:71:ad:ab:c1:08:97:8b:04:6d:41:70:5b:
b1:23:18:04:33:4b:74:08:08:e4:15:c3:43:d6:f4:d7:a0:06:
4a:80:de:87:6d:ec:c8:8c:f3:8e:e7:93:64:05:43:ed:22:b5:
b2:a8:3d:b9:dd:1e:6f:df:5f:7a:fb:ab:3c:a1:54:1a:20:54:
4d:8d:de:c9:d6:ff:09:b1:26:6c:a7:7b:f5:e6:67:27:ce:5d:
62:16:20:88:5f:f1:e3:4b:c9:db:02:c6:04:54:ea:62:f3:2c:
4d:48:20:22:47:81:44:6c:c7:86:66:9d:64:97:19:2d:84:b9:
09:bd:0b:25:cf:a8:0d:2f:2f:97:95:fc:b5:37:6a:34:aa:a6:
49:e7:4a:d2:64:3b:c1:12:79:c9:be:19:b2:a3:9e:05:e6:8f:
9e:c9:d6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org