Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e31372e302f32342d3234203d3e203238323230.roa
File: 3138392e34352e31372e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: XBJ/mrYmPPPebWvQDFD++EgKT/qZ4ix+aZQ90x/UARE=
Subject key identifier: 1C:A6:6E:8B:73:28:6D:B7:EC:0D:60:FD:4A:41:39:6D:01:44:A8:23
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 417F0996B9F21B593D70A53941330627013C1D16
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e31372e302f32342d3234203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:25 +0000
ROA not before: Mon 08 Apr 2024 20:00:25 +0000
ROA not after: Mon 07 Apr 2025 20:05:25 +0000
asID: 28220
IP address blocks: 189.45.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7f:09:96:b9:f2:1b:59:3d:70:a5:39:41:33:06:27:01:3c:1d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:25 2024 GMT
Not After : Apr 7 20:05:25 2025 GMT
Subject: CN=1CA66E8B73286DB7EC0D60FD4A41396D0144A823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2f:e9:1b:89:23:56:68:9d:62:06:eb:11:18:
97:69:e5:34:12:49:8c:df:86:0c:73:38:d8:8a:36:
94:79:20:84:55:a5:be:7e:c8:49:d4:b6:9d:9b:7a:
8d:24:b5:06:64:57:3f:55:8f:ba:be:16:7b:7f:be:
54:ce:70:c9:db:30:53:28:5a:a8:e4:e1:d6:8f:72:
80:ed:31:f2:fe:54:f6:f6:6e:d1:fa:55:0b:99:02:
a4:11:c7:f9:73:12:ff:18:89:8b:5a:2b:a7:96:f5:
f1:23:ed:fa:d7:7e:1b:a2:26:6b:af:0a:78:d5:28:
79:57:03:63:99:32:b6:e4:dc:0a:71:75:28:c8:c0:
3b:39:84:35:85:fc:33:ed:80:8a:4d:bc:09:74:ec:
1c:13:b2:ef:5e:82:88:42:ef:8a:47:27:5e:d9:75:
50:3d:d0:b3:d3:93:30:68:4e:dd:04:9e:24:ed:2a:
c0:6a:d7:22:04:db:2e:a6:8a:a5:20:6d:3f:c5:38:
7e:57:18:80:00:40:da:21:13:ff:c7:7f:96:01:52:
2a:c1:e1:a6:c7:24:a3:3c:5f:5a:95:8d:40:14:8f:
02:43:49:98:0d:c3:eb:bb:e6:3f:4e:d5:f8:04:1e:
ad:ab:a2:12:ea:45:6a:a0:61:b3:d5:0d:c7:34:72:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A6:6E:8B:73:28:6D:B7:EC:0D:60:FD:4A:41:39:6D:01:44:A8:23
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e31372e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.17.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a7:d3:d9:1a:bb:56:4f:fb:6b:e7:c7:ed:f7:41:78:c8:cb:
c3:a3:92:34:b9:52:f6:2d:40:9d:4f:38:e6:da:40:f2:61:76:
a6:59:d2:dd:4c:f8:df:68:7b:d1:67:eb:eb:18:41:7c:c1:90:
31:bd:2b:67:4b:b6:47:72:47:8c:44:2f:cd:0b:48:c0:0f:03:
60:07:ba:15:a1:d4:fe:b8:a4:5b:3c:a2:2e:46:52:66:56:5d:
74:53:ec:64:c5:d7:ae:da:28:4e:de:fb:be:c6:59:29:0b:35:
8c:8d:81:66:93:68:1b:0b:30:20:82:9f:f1:04:14:88:f2:0c:
a7:4d:b4:83:f9:6a:fe:07:f1:cf:a9:c7:59:9d:84:15:60:0e:
fa:86:41:eb:2a:e6:f7:17:f1:9e:16:5c:8e:9b:5c:43:e6:18:
d7:df:22:ae:7f:a5:c4:2e:29:25:e7:d0:a6:9b:99:ce:74:b3:
63:8f:c5:bc:d5:d6:bd:68:6d:bc:e0:48:ad:a7:9d:ee:b3:e7:
04:28:a1:f5:17:62:61:d2:5f:d4:e8:64:7d:cf:3b:8d:1d:9c:
c6:3f:77:04:f5:03:7f:94:56:f4:b9:fe:c9:fc:ea:ef:b6:d3:
69:78:7d:b7:89:79:f3:a9:e3:72:5f:3a:02:59:a5:72:0f:8e:
93:b3:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org