Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e33302e302f32342d3234203d3e203238323230.roa
File: 3138392e34352e33302e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: jujWYW/x3Eo0nhYeaeCiFMZZZzY9MP0bsi9P5CWctz4=
Subject key identifier: 66:53:F8:07:1A:C8:34:72:0A:9C:EB:FF:60:33:AD:F0:F9:64:42:37
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 7835E1D684E48EFC453D75536E3B5FADA639DE3E
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e33302e302f32342d3234203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:25 +0000
ROA not before: Mon 08 Apr 2024 20:00:25 +0000
ROA not after: Mon 07 Apr 2025 20:05:25 +0000
asID: 28220
IP address blocks: 189.45.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:35:e1:d6:84:e4:8e:fc:45:3d:75:53:6e:3b:5f:ad:a6:39:de:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:25 2024 GMT
Not After : Apr 7 20:05:25 2025 GMT
Subject: CN=6653F8071AC834720A9CEBFF6033ADF0F9644237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:92:9f:45:af:70:84:6e:e6:74:d2:4c:31:
95:95:ea:f1:ec:2a:40:92:5c:d5:8f:00:3e:6d:db:
60:28:70:e3:63:ea:a8:bc:a7:76:f4:b0:1f:4e:40:
cd:c0:a9:c1:ff:d2:05:49:27:5c:de:71:03:9f:f9:
a1:d3:4d:46:0a:e2:0b:e6:4f:48:86:a3:aa:07:4b:
cf:e3:3e:be:65:17:ef:3e:67:6e:86:bd:44:7f:e6:
5b:3f:92:0f:ab:cd:70:95:41:2f:a9:dc:e3:17:b3:
2c:05:73:87:79:35:17:e4:32:2f:97:1a:f9:7c:91:
72:a4:c1:2a:9f:4d:6a:25:95:df:de:33:a2:7b:e3:
56:73:f7:cd:dd:ff:89:70:71:2c:f4:fa:0f:b9:d7:
81:90:02:d4:de:57:22:80:27:32:98:55:c1:3a:55:
6f:69:e5:55:e7:b3:12:31:36:c0:8f:e9:5d:a3:77:
1d:b5:96:cd:20:1a:2a:b2:b6:c4:3a:a5:df:9c:80:
ef:70:dc:e7:bc:e8:8a:3c:8c:75:b5:56:a6:bf:97:
02:20:d0:a4:4d:55:be:7c:af:cf:a8:80:dd:29:22:
71:24:ae:5a:e2:88:d9:b2:9f:54:76:15:cd:5a:32:
1f:5e:ff:85:56:60:03:8d:92:d5:4d:2f:bf:48:f8:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:53:F8:07:1A:C8:34:72:0A:9C:EB:FF:60:33:AD:F0:F9:64:42:37
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e33302e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.30.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ef:5f:ae:ef:3f:3e:12:cc:69:aa:c5:8c:34:dd:37:3b:e4:
14:e3:f3:8e:1e:09:80:5e:5c:1c:da:75:30:5f:05:cd:94:ed:
bd:73:42:a0:c2:d8:4a:8f:a0:5c:5d:6d:37:45:86:15:20:08:
85:e9:e7:9b:2e:c4:18:ec:ca:bd:d9:6b:ef:87:b4:a8:c3:7d:
63:32:82:73:3c:f8:e0:01:7a:74:36:a5:55:d2:d5:86:6f:36:
f9:c2:83:f8:35:9d:02:40:a4:de:7e:9d:2b:fd:92:de:61:e0:
19:98:f4:19:4f:32:a4:19:1c:fc:a8:a9:1d:b1:66:20:09:83:
13:7a:b2:46:b5:6e:5b:31:b1:31:1e:ee:ea:e6:df:8d:e8:15:
ab:c1:b9:38:09:e0:67:ab:ee:7a:ce:b7:c0:bd:f9:08:6b:af:
e3:89:39:dd:fa:62:ac:34:bb:b7:f3:f6:df:8b:ff:bd:4e:92:
e2:d2:3d:4e:2e:a5:f0:90:98:04:7d:55:1e:6b:37:40:a3:47:
f3:20:b0:f1:30:33:a4:6c:c2:93:87:9e:bd:4b:3e:a1:76:a4:
0d:5e:77:6f:fd:08:ed:d8:fb:a6:38:41:b3:99:a7:44:dd:f6:
06:af:50:35:2e:d0:ff:e9:aa:45:cd:a0:4c:f5:99:74:5f:93:
76:3e:5b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:33 2025 by rpki-client