Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
File: 3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa (raw, json)
Hash identifier: B/K7b4hVnrsE+r+shm1Nl7yG80Roy8ptBj3yu8bksUY=
Subject key identifier: 70:BD:43:3D:3C:5A:46:06:57:C7:89:C5:18:4E:CA:CA:F8:D1:6C:3A
Certificate issuer: /CN=028B43AD112899168CE5212FE3FB097B8D664FD2
Certificate serial: 0CD8F8833DCD3BCFC634CF3E4B19BA7BE9A68317
Authority key identifier: 02:8B:43:AD:11:28:99:16:8C:E5:21:2F:E3:FB:09:7B:8D:66:4F:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/028B43AD112899168CE5212FE3FB097B8D664FD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
Signing time: Mon 11 Mar 2024 20:48:19 +0000
ROA not before: Mon 11 Mar 2024 20:43:19 +0000
ROA not after: Mon 10 Mar 2025 20:48:19 +0000
asID: 263252
IP address blocks: 189.201.232.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d8:f8:83:3d:cd:3b:cf:c6:34:cf:3e:4b:19:ba:7b:e9:a6:83:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028B43AD112899168CE5212FE3FB097B8D664FD2
Validity
Not Before: Mar 11 20:43:19 2024 GMT
Not After : Mar 10 20:48:19 2025 GMT
Subject: CN=70BD433D3C5A460657C789C5184ECACAF8D16C3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:62:bb:56:17:a5:1f:c5:70:f4:76:55:b7:
74:7a:d9:3b:9c:3f:25:cc:21:99:01:a5:31:ac:08:
cd:52:6b:f8:67:f3:05:ee:0d:83:fd:e2:5b:55:b8:
58:1c:64:22:46:b3:65:7c:47:58:6e:c2:d2:e5:44:
23:7d:41:9a:d6:b3:fa:9d:6e:2b:c4:50:9a:07:8d:
08:57:de:3b:ff:7e:a8:ae:18:d1:9b:94:0c:02:e4:
2b:65:c0:a3:0d:f2:85:2f:3b:88:08:33:e7:4a:9d:
5a:e7:6a:9b:b3:74:9e:45:4d:d3:cc:5d:0c:41:19:
92:47:e0:e4:7c:2f:b1:c0:0c:ab:8a:b9:96:96:d2:
5a:81:2e:4c:44:92:70:23:b2:c2:cb:bd:d4:9f:5d:
99:eb:9c:f2:4f:4a:a7:bd:40:6f:ca:3e:e6:d2:e7:
e2:15:05:0f:52:68:82:30:1e:b4:5a:f8:61:a2:b8:
ba:3b:73:cf:06:f5:a3:b1:63:00:d7:3b:17:0e:e0:
58:91:77:ae:5f:1b:bf:68:26:c7:20:6b:e6:11:c7:
d9:3d:3c:2c:fc:af:ee:84:54:de:a9:da:b8:30:c1:
2a:c4:a4:75:d1:e0:8c:1a:ba:73:f6:6a:bf:fa:78:
95:1c:0f:e4:2c:c1:d6:32:99:dc:d3:a8:b2:e2:20:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BD:43:3D:3C:5A:46:06:57:C7:89:C5:18:4E:CA:CA:F8:D1:6C:3A
X509v3 Authority Key Identifier:
keyid:02:8B:43:AD:11:28:99:16:8C:E5:21:2F:E3:FB:09:7B:8D:66:4F:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/028B43AD112899168CE5212FE3FB097B8D664FD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/028B43AD112899168CE5212FE3FB097B8D664FD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.232.0/21
Signature Algorithm: sha256WithRSAEncryption
81:25:2e:11:62:ed:82:a4:84:2e:34:fa:a2:46:9b:0d:95:b2:
77:b0:b0:bc:4f:c4:77:22:40:a8:01:3d:59:3d:1a:b1:4c:fb:
97:4a:4b:4c:fd:c3:3a:b4:32:52:e3:55:78:06:15:3a:ed:56:
df:12:8f:3b:4a:f3:99:f2:18:1c:f2:ee:b9:e2:58:15:b5:e1:
a1:84:fe:db:2c:41:4f:60:40:e9:2b:07:99:3f:67:13:31:38:
39:33:31:85:6d:f1:85:fb:23:8f:09:6b:60:72:07:b1:63:d1:
63:2a:77:76:03:0c:e9:ec:b7:9a:9e:ec:c1:b9:5f:3f:de:41:
0d:de:b5:1c:0e:cb:e1:77:b6:6d:e1:25:66:fb:3c:72:02:70:
82:33:44:87:03:93:3f:bf:e9:7f:db:74:5d:3a:b4:ba:99:4b:
42:f6:ac:83:28:b6:89:8d:e2:07:5e:a8:e8:20:9c:2d:22:f9:
cf:8b:73:5d:22:db:be:e3:93:32:b0:07:d2:e2:b7:66:ed:e8:
25:6c:c2:a1:9a:28:19:71:57:c4:8b:2b:64:00:98:08:2c:4d:
b8:4b:79:a6:55:49:e6:c6:8e:e7:94:bf:0c:86:28:af:28:80:
6d:3c:53:75:e2:10:cc:0f:ec:75:35:40:8a:21:9e:37:6f:07:
8d:21:3c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org