Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32342e302f32312d3231203d3e203238323230.roa
File: 3138392e34352e32342e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier: Zdh0Dz6YKZoZgV6oAxyGSXbY57HC5KW2dizDtkWZ4Lo=
Subject key identifier: CF:AD:DD:04:1B:83:4D:26:0F:B4:E5:E5:88:84:BB:BE:3B:37:02:BD
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 65696B1FEB77CF071D175A541CEE63F81A04655F
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32342e302f32312d3231203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:25 +0000
ROA not before: Mon 08 Apr 2024 20:00:25 +0000
ROA not after: Mon 07 Apr 2025 20:05:25 +0000
asID: 28220
IP address blocks: 189.45.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:69:6b:1f:eb:77:cf:07:1d:17:5a:54:1c:ee:63:f8:1a:04:65:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:25 2024 GMT
Not After : Apr 7 20:05:25 2025 GMT
Subject: CN=CFADDD041B834D260FB4E5E58884BBBE3B3702BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:c5:97:ea:59:32:3f:14:2f:ea:dd:34:7b:
c5:23:c4:4c:c6:26:a1:ac:66:7c:a0:c4:e7:01:a5:
95:aa:b7:29:a2:f9:41:0c:ba:a9:69:ea:c7:29:30:
de:54:55:e0:31:5b:73:6b:9d:4a:ba:65:81:3e:51:
89:b7:bf:fe:0d:14:6d:da:f8:bf:85:17:9a:65:07:
03:33:7c:ec:0e:25:8c:ad:e1:52:dd:d4:50:fc:91:
21:ed:f5:bd:c5:6b:2c:1a:1e:8c:b0:5d:93:59:63:
18:8f:2c:2e:0b:7d:6e:3b:34:ff:be:a3:01:ac:07:
93:c0:3f:96:5e:e7:a7:6a:53:86:d2:8c:70:ec:33:
27:61:d7:f2:50:0a:cd:ad:d9:05:b0:be:a4:9a:5f:
f2:31:0c:56:be:1b:c4:57:2b:64:c5:cd:c0:be:cb:
c1:23:bf:46:16:f1:94:ec:01:5b:a4:d6:26:d1:4d:
b4:37:5d:88:d1:a4:eb:9a:b2:f1:2e:8d:38:b7:f0:
b1:6d:15:a3:50:f7:0c:cb:14:da:13:51:de:c3:90:
9a:1e:e4:7c:6d:48:41:a0:d9:c0:e3:e9:ef:fb:b2:
c2:01:46:ac:b7:be:76:20:7a:be:60:9a:84:08:f7:
d2:f5:1f:4f:ea:89:c4:22:a7:13:f7:90:5c:ad:80:
4f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AD:DD:04:1B:83:4D:26:0F:B4:E5:E5:88:84:BB:BE:3B:37:02:BD
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32342e302f32312d3231203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.24.0/21
Signature Algorithm: sha256WithRSAEncryption
18:e5:49:86:b8:fd:64:69:fb:ea:0d:3a:cf:80:50:78:76:0d:
ac:86:88:39:fb:ea:f3:3f:48:f7:d9:29:eb:5b:e1:87:cb:90:
e6:0e:d1:cf:fc:37:8f:b5:fc:fd:d1:c8:d2:25:ea:32:67:5e:
b1:c9:a5:08:fd:2e:76:1c:6f:5b:e4:b1:63:bc:ad:18:f2:19:
3b:7b:93:92:01:d5:0a:26:1b:c0:2a:0d:dd:90:db:d5:7d:b8:
61:ed:1a:fc:a1:af:36:7a:53:bf:d6:d4:ba:e2:4c:7d:d8:0a:
62:7a:50:92:b6:79:a5:79:1b:d2:24:51:37:92:a6:81:58:6d:
f1:a2:36:fa:bc:f7:ad:81:c3:d2:60:54:28:82:68:4e:aa:05:
2c:72:6a:6a:8e:e7:79:0f:bd:c8:76:79:08:0c:e7:c9:cb:02:
53:df:80:87:06:51:a4:2d:87:1a:62:07:b3:45:fc:9b:80:cc:
d7:9b:da:ed:4c:88:c2:6f:2b:25:bf:50:ee:25:8f:51:84:4e:
40:0d:c0:72:e9:1f:f4:21:b4:dd:77:f0:b7:51:2d:6c:c2:d5:
1f:21:30:d9:7c:ef:f1:80:63:60:79:ec:ca:d5:d0:96:69:20:
5f:f2:f4:41:41:32:50:7f:e9:41:46:24:ad:09:5f:5c:af:bb:
00:af:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:48:45 2025 by rpki-client