Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3135362e302f32322d3232203d3e203238323230.roa
File: 3138392e3132342e3135362e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier: CJBzgHDya4r0TQqveKjvRwzv8pGTwDsXehIGurj0jG8=
Subject key identifier: 80:09:5A:E9:31:44:D0:76:71:B0:72:C4:E0:FC:E5:C5:27:33:F1:94
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 589DC8FDA067F3959D15A31A084BE7AD9E903EB2
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3135362e302f32322d3232203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:29 +0000
ROA not before: Mon 08 Apr 2024 20:00:29 +0000
ROA not after: Mon 07 Apr 2025 20:05:29 +0000
asID: 28220
IP address blocks: 189.124.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9d:c8:fd:a0:67:f3:95:9d:15:a3:1a:08:4b:e7:ad:9e:90:3e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:29 2024 GMT
Not After : Apr 7 20:05:29 2025 GMT
Subject: CN=80095AE93144D07671B072C4E0FCE5C52733F194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:13:ef:2e:48:15:d9:29:9f:5b:18:e9:31:
f0:9e:1f:e6:22:4f:db:7f:20:91:86:86:87:20:a8:
18:66:af:27:51:5f:06:8c:e1:10:63:2f:28:fc:fd:
a1:fd:1b:7e:f9:26:c7:8f:34:44:9e:e5:45:f7:4e:
74:5d:c0:e7:ba:dc:4e:90:0a:7c:1d:f2:73:46:be:
d0:2c:68:47:f3:cf:76:a6:6c:ba:a7:d6:ba:d8:3c:
45:d4:de:8c:ac:3d:87:a5:59:b9:79:d9:cf:fa:03:
f9:36:60:1e:4f:2c:6e:f4:98:fb:87:7e:e6:fe:73:
f6:de:72:aa:3d:32:43:9f:aa:4f:1d:dd:bb:3f:b9:
cd:01:e2:ff:f1:21:57:c9:9c:f7:81:f4:52:e7:49:
47:ca:9e:8f:26:6c:c4:87:66:1e:81:5c:04:50:80:
aa:9b:65:94:3e:55:44:a2:33:e1:b6:e1:46:7f:3e:
99:92:a9:a8:49:40:64:85:68:93:5b:71:7b:90:56:
35:5a:d9:2c:59:82:1a:b8:19:8a:3f:63:fc:79:10:
21:52:12:82:60:f7:62:c7:5a:1b:ca:0e:25:44:f4:
3d:8f:08:a4:7d:4d:99:8e:f7:de:49:e4:e8:f1:72:
88:bc:51:3b:bd:50:e6:f2:b8:0f:1c:b5:d6:6e:78:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:5A:E9:31:44:D0:76:71:B0:72:C4:E0:FC:E5:C5:27:33:F1:94
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3135362e302f32322d3232203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.124.156.0/22
Signature Algorithm: sha256WithRSAEncryption
02:29:72:83:51:cb:6b:4d:ee:ca:29:4d:44:af:13:da:8d:77:
11:17:4a:68:fd:62:1c:96:89:d6:65:07:77:2b:44:56:66:c0:
79:e5:a4:27:ad:16:ee:db:13:ee:f8:5c:49:0d:18:cd:e6:66:
7f:d6:e1:38:48:86:5b:ff:b1:00:b5:56:97:c3:b0:ac:4c:23:
7d:c3:9e:9c:49:bb:f0:e0:98:4d:08:cd:1a:36:f6:0a:45:5b:
e7:92:48:81:62:8e:fb:3f:fa:61:d0:bd:3e:81:a3:4e:e0:36:
5b:06:09:13:f9:2f:67:a4:1e:a8:b2:a9:59:31:c2:e8:16:cf:
be:cb:83:92:c0:61:09:d0:5f:48:19:6e:1b:87:8e:44:c3:6b:
48:c6:af:2a:4a:be:df:4f:de:a2:8f:05:8c:a2:79:e8:13:d3:
dc:99:4c:d7:58:4f:11:cf:0d:da:16:86:61:de:be:6e:03:14:
e8:91:6a:39:13:f5:1e:df:63:81:90:38:67:10:75:ef:4a:07:
0e:bf:49:5d:0b:86:50:f3:94:4a:b0:cd:93:7f:12:c2:4f:5b:
9c:e2:eb:3f:7d:e4:f9:fb:c9:31:7e:e4:b0:26:c1:2c:18:80:
53:7f:b3:77:04:d8:21:cb:38:00:dc:3e:b2:06:aa:07:5d:70:
3f:17:6f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:59 2025 by rpki-client