Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32382e302f32342d3234203d3e203238323230.roa
File: 3138392e34352e32382e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: Z4o4xbatBKqVNF8hDuxE/uiaMp+QRHSp5IPoPtrLDP4=
Subject key identifier: 76:0F:14:61:47:41:15:86:AF:2A:83:6D:09:67:F9:8D:B8:FD:00:E0
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 1CDB3D69A9E6638618A82AFCE6F7CCB82E241B02
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32382e302f32342d3234203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:13 +0000
ROA not before: Mon 08 Apr 2024 20:00:13 +0000
ROA not after: Mon 07 Apr 2025 20:05:13 +0000
asID: 28220
IP address blocks: 189.45.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:db:3d:69:a9:e6:63:86:18:a8:2a:fc:e6:f7:cc:b8:2e:24:1b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:13 2024 GMT
Not After : Apr 7 20:05:13 2025 GMT
Subject: CN=760F146147411586AF2A836D0967F98DB8FD00E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:23:0a:9f:99:35:b3:20:48:80:27:7f:7f:
22:8b:c8:07:f3:7e:c9:12:40:80:21:06:8f:c2:5f:
f8:1e:67:1a:1f:14:14:21:11:16:bb:70:d9:c2:be:
c7:bc:6c:a5:2b:b5:23:b3:05:f4:ee:d4:24:d9:86:
f3:5d:98:fe:e4:8f:0a:5f:1b:2f:35:7c:9e:bf:10:
e2:b8:27:da:14:9e:a2:fa:e8:50:24:ee:05:e2:52:
e5:89:11:ca:3c:39:34:7d:14:08:33:10:02:29:97:
4a:ef:6a:e4:02:1d:d0:38:d3:b8:d9:db:6a:27:a2:
79:4d:80:a5:af:4d:68:46:69:4c:14:1c:41:b8:3c:
3a:a2:0a:62:02:57:37:6c:8e:a7:1d:79:6e:61:ec:
a9:71:d2:15:2f:0a:73:ce:f9:c2:74:5a:28:38:98:
be:88:07:5c:31:29:d4:db:8f:33:3c:3d:24:ea:17:
78:c8:2b:84:7b:6f:b1:74:c1:06:40:ba:3c:7b:d9:
e2:2d:b4:ba:bc:68:4b:bd:74:01:8b:82:2e:3e:ea:
b0:4f:f6:74:0f:dc:e7:97:6a:0d:45:21:97:b6:d1:
52:28:fd:5f:89:a8:c6:2c:2a:0a:d2:a1:b4:7f:bc:
4d:5a:8c:34:4f:e3:c1:60:cc:73:f1:8d:75:85:1c:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0F:14:61:47:41:15:86:AF:2A:83:6D:09:67:F9:8D:B8:FD:00:E0
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32382e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.28.0/24
Signature Algorithm: sha256WithRSAEncryption
61:15:63:dc:ed:84:fc:e1:aa:e0:ce:e0:93:8b:ad:31:80:13:
35:b6:62:95:8a:57:97:e6:a2:75:b5:b9:98:9f:67:9b:50:7f:
02:3c:d3:e3:d1:ab:aa:1d:ef:8f:b8:7d:39:2a:d3:2d:70:21:
1b:91:53:42:df:31:6c:28:79:a6:52:4e:59:df:84:82:49:50:
a3:7f:2c:9b:c2:0a:0e:9f:88:38:25:d2:7c:0d:41:6e:f6:b0:
78:10:b3:86:cc:a5:31:7b:1d:9a:ca:31:ae:34:b9:21:94:7a:
6d:e6:b3:7f:75:93:ac:19:f9:76:ee:b0:6e:13:a8:a2:fb:b5:
73:1b:5d:df:00:17:4a:e8:00:15:df:b9:5d:ca:03:16:43:37:
68:e5:50:e0:1d:5d:8d:0b:dd:88:6e:89:bb:04:3a:e6:a4:1d:
0a:2a:27:0a:2e:76:0a:07:83:e4:00:ed:c7:8f:01:65:b4:0d:
8f:93:a9:ce:5e:4e:69:2e:b3:95:90:1f:8c:ef:94:85:e4:9d:
3b:c3:a0:34:33:d0:2f:86:bb:bb:4b:fb:e0:8b:7b:45:5d:85:
6c:f4:aa:86:5d:31:5b:1b:ca:f8:7b:c9:a4:5d:17:0c:44:f1:
ae:92:99:5a:f6:57:29:f2:0b:26:d7:e3:12:e2:33:d3:82:0c:
14:52:83:69
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHNs9aanmY4YYqCr85vfMuC4kGwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMTNaFw0yNTA0MDcyMDA1MTNaMDMxMTAvBgNV
BAMTKDc2MEYxNDYxNDc0MTE1ODZBRjJBODM2RDA5NjdGOThEQjhGRDAwRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHSMKn5k1syBIgCd/fyKLyAfz
fskSQIAhBo/CX/geZxofFBQhERa7cNnCvse8bKUrtSOzBfTu1CTZhvNdmP7kjwpf
Gy81fJ6/EOK4J9oUnqL66FAk7gXiUuWJEco8OTR9FAgzEAIpl0rvauQCHdA407jZ
22ononlNgKWvTWhGaUwUHEG4PDqiCmICVzdsjqcdeW5h7Klx0hUvCnPO+cJ0Wig4
mL6IB1wxKdTbjzM8PSTqF3jIK4R7b7F0wQZAujx72eIttLq8aEu9dAGLgi4+6rBP
9nQP3OeXag1FIZe20VIo/V+JqMYsKgrSobR/vE1ajDRP48FgzHPxjXWFHMavAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUdg8UYUdBFYavKoNtCWf5jbj9AOAwHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM5MmUzNDM1MmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy
MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL0tHDANBgkqhkiG9w0BAQsFAAOCAQEAYRVj3O2E/OGq
4M7gk4utMYATNbZilYpXl+aidbW5mJ9nm1B/AjzT49Grqh3vj7h9OSrTLXAhG5FT
Qt8xbCh5plJOWd+EgklQo38sm8IKDp+IOCXSfA1BbvaweBCzhsylMXsdmsoxrjS5
IZR6beazf3WTrBn5du6wbhOoovu1cxtd3wAXSugAFd+5XcoDFkM3aOVQ4B1djQvd
iG6JuwQ65qQdCionCi52CgeD5ADtx48BZbQNj5Opzl5OaS6zlZAfjO+UheSdO8Og
NDPQL4a7u0v74It7RV2FbPSqhl0xWxvK+HvJpF0XDETxrpKZWvZXKfILJtfjEuIz
04IMFFKDaQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org