Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32302e302f32332d3233203d3e203238323230.roa
File: 3138392e34352e32302e302f32332d3233203d3e203238323230.roa (raw, json)
Hash identifier: Ls0/36zhx4bG5mu4fGGKwUZbDS35ua5P4njKdlmsAOc=
Subject key identifier: 7F:45:9C:00:D8:4F:32:9A:6B:AF:CE:38:9C:7F:93:35:D8:CC:76:23
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 097258B8A55E4B0014AA84B2BCDC5ACA3C7FE407
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32302e302f32332d3233203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:12 +0000
ROA not before: Mon 08 Apr 2024 20:00:12 +0000
ROA not after: Mon 07 Apr 2025 20:05:12 +0000
asID: 28220
IP address blocks: 189.45.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:72:58:b8:a5:5e:4b:00:14:aa:84:b2:bc:dc:5a:ca:3c:7f:e4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:12 2024 GMT
Not After : Apr 7 20:05:12 2025 GMT
Subject: CN=7F459C00D84F329A6BAFCE389C7F9335D8CC7623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:fe:99:4d:78:83:8d:42:06:87:25:05:fa:
7d:9d:31:d9:e7:00:b3:12:98:6e:9c:d4:49:bc:6a:
fb:57:04:13:56:dd:d2:f0:ad:bc:da:1c:b9:20:b3:
b6:e5:5c:d0:f2:d9:b1:3b:a7:50:bc:8e:19:c7:70:
5e:cd:a4:c3:ac:84:ec:20:7d:98:a8:1f:5f:b3:03:
23:8e:f1:a9:09:d9:9a:13:ec:e1:85:74:f9:0a:b0:
99:1f:68:a1:5f:04:29:57:f6:59:7f:3a:44:fb:fd:
10:4f:22:b0:8b:9e:da:fb:98:13:59:c4:cc:c8:58:
2c:b3:21:de:f5:9e:bb:1f:c6:dc:2d:98:74:50:1c:
19:35:e0:fa:51:ea:16:cd:cc:d4:46:69:0e:08:89:
d5:ba:e7:8b:4e:2d:16:1c:72:94:f9:7c:cd:47:95:
95:cc:96:6e:af:13:fc:a0:9d:dd:3d:de:2d:8e:ab:
8f:2b:62:4e:5d:e1:73:77:03:f4:f0:42:d8:72:12:
c4:d9:b9:ae:9e:b4:c8:75:1d:c8:14:68:da:71:35:
98:3d:f1:3e:8a:2c:e8:aa:e2:06:cf:50:6b:ce:90:
f6:a2:e4:24:62:e5:77:58:8f:13:d8:28:8e:d7:5f:
f3:05:de:ed:8a:21:4f:e0:51:84:2c:25:a8:fb:b9:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:45:9C:00:D8:4F:32:9A:6B:AF:CE:38:9C:7F:93:35:D8:CC:76:23
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32302e302f32332d3233203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.20.0/23
Signature Algorithm: sha256WithRSAEncryption
51:8e:0d:01:5e:3b:db:2d:88:4a:d0:db:50:31:35:6f:3a:9d:
cb:e0:b7:5c:0e:7e:e6:57:b7:e5:42:dd:3b:87:1c:25:ca:a0:
f1:b6:29:09:85:3a:cc:05:c3:cb:d9:38:f0:cb:00:2b:70:7f:
dd:a2:7e:5a:f9:fe:89:7c:e9:a1:02:0c:94:8e:1a:ac:42:2b:
48:ca:85:65:f1:68:7f:d6:5a:7f:7d:96:5d:14:85:5b:a3:f8:
2c:81:02:8b:de:31:aa:f8:5a:26:8d:b1:68:f8:40:84:10:73:
2a:cb:42:e7:53:3c:dc:ff:b3:cf:46:fd:ec:4e:a2:7e:4a:5e:
b3:61:98:ff:55:cb:82:39:01:03:f7:5b:65:00:7f:0b:d9:95:
b1:27:30:15:9d:45:7a:17:79:bd:46:96:16:67:08:6b:f9:b7:
1d:1d:9c:dd:b5:cf:0d:04:f0:2e:17:5e:99:dc:6f:9d:da:73:
bf:1c:1d:78:96:35:00:23:32:2a:a3:a6:93:67:ad:7e:ac:ca:
f2:12:e8:1f:e2:25:61:6f:22:67:6d:cd:89:0e:82:36:23:51:
a2:a2:eb:08:d6:36:31:ef:3b:55:68:18:c3:26:73:69:6f:fd:
54:0e:c0:2c:ce:6b:05:b6:3c:60:ca:c3:45:0f:fc:58:7c:a3:
03:33:64:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org