Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32322e302f32342d3234203d3e203238323230.roa
File: 3138392e34352e32322e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: /GZwPWtyDJOt3Gyuwbf+Ovis/und1LjACFHRdxDv9r8=
Subject key identifier: 9E:1B:71:49:01:79:F1:5A:8C:79:7C:83:E9:40:7F:F2:2F:87:D6:17
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 43316CDB197AA36480E7AFAEB8CC3E9236B775D0
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32322e302f32342d3234203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:16 +0000
ROA not before: Mon 08 Apr 2024 20:00:16 +0000
ROA not after: Mon 07 Apr 2025 20:05:16 +0000
asID: 28220
IP address blocks: 189.45.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:31:6c:db:19:7a:a3:64:80:e7:af:ae:b8:cc:3e:92:36:b7:75:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:16 2024 GMT
Not After : Apr 7 20:05:16 2025 GMT
Subject: CN=9E1B71490179F15A8C797C83E9407FF22F87D617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:17:28:83:e6:4b:9f:64:86:c5:35:92:5c:
f8:e3:8a:f0:cb:e3:01:e2:42:49:ae:92:db:88:ee:
13:8e:76:f7:03:d9:b5:17:46:7c:9e:fc:85:1d:3e:
df:66:dd:2b:33:f5:fa:42:c2:13:6d:c5:44:89:a3:
ba:72:89:29:be:a9:5c:25:21:c5:cf:6c:04:76:76:
47:cf:73:53:9b:6f:eb:a6:68:22:04:e8:e4:bb:61:
ec:90:9c:2c:c7:b6:da:22:7f:a8:b8:e8:e8:00:9a:
04:97:95:88:fe:ff:2a:4f:89:60:59:7f:96:43:06:
f4:d9:7e:cb:32:0f:8a:86:ea:3e:1e:2d:fb:23:71:
1f:5d:7f:fd:7d:c4:fe:bf:33:c5:b3:77:ce:d2:d9:
a6:17:9b:a7:0a:57:e7:ef:74:31:33:a8:8f:0e:e9:
cf:a2:77:13:e6:a0:96:cf:0f:cd:a7:6a:86:bd:f2:
ea:49:30:ea:ab:f8:5e:8a:4f:31:06:78:c6:f2:23:
cf:62:33:c6:15:99:50:85:8f:22:1f:2d:86:10:c9:
72:80:cf:c3:a5:bd:11:dd:3e:75:c3:8a:1b:65:22:
c0:f5:ca:9a:86:6e:2b:31:2f:32:ec:b5:f8:1d:49:
bf:02:c4:f9:7f:3f:19:bc:d9:f1:3e:ab:ef:f7:59:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:71:49:01:79:F1:5A:8C:79:7C:83:E9:40:7F:F2:2F:87:D6:17
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32322e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.22.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fe:b3:bc:f4:0c:e0:f6:80:cd:84:30:57:3f:6f:19:99:75:
9e:8b:9a:92:e8:ee:85:57:42:75:c2:e9:68:a0:72:e4:6d:a4:
df:a4:ee:06:1f:73:36:7b:3e:fb:a1:42:1e:f4:68:ab:d9:57:
59:2d:4d:b6:7f:ac:c0:32:13:15:2e:4d:be:f4:3b:de:83:6b:
38:7a:b3:26:84:75:6a:f2:56:9b:31:cd:22:fc:58:02:3e:c8:
17:de:d4:c8:42:a9:88:af:f4:2e:67:29:60:d7:ee:92:94:63:
f6:f4:2c:46:cc:2e:45:e7:6c:e5:54:b7:e6:08:c9:37:b6:bb:
f8:94:51:34:4a:4e:e9:f6:7d:15:09:98:1f:4b:72:32:36:da:
f7:c4:54:b2:ca:6f:28:e8:f6:c3:fd:09:0b:00:46:3a:d7:80:
72:68:b4:ae:aa:04:59:2a:19:af:9c:a8:0e:91:cd:bd:84:ee:
25:5b:1f:8c:98:1b:b3:48:a2:f5:98:4c:c6:20:69:2d:2a:8d:
91:bd:58:4f:f8:9d:09:4d:f8:cb:6a:97:fa:d7:e2:90:38:05:
d2:ab:45:48:c0:a4:d5:c6:2d:45:9f:af:c4:35:18:9b:94:79:
25:e8:27:64:ff:ad:49:b3:c3:97:3f:1e:14:51:ab:5b:a5:38:
7a:b2:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:36 2025 by rpki-client