Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e34352e36342e302f31382d3138203d3e203238323730.roa
File: 3138392e34352e36342e302f31382d3138203d3e203238323730.roa (raw, json)
Hash identifier: 2IKh9TkmgdTiK8/oTxAOH1HqpN5oL0XLx3Ae7BJhjss=
Subject key identifier: 41:83:A4:A8:B1:62:95:75:33:E6:60:0E:A4:BB:1F:6A:94:93:61:7C
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 59D05708E6F71BEB0CBEF917F2DADBB9F691CCDB
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e34352e36342e302f31382d3138203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:12 +0000
ROA not before: Thu 07 Nov 2024 20:35:12 +0000
ROA not after: Thu 06 Nov 2025 20:40:12 +0000
asID: 28270
IP address blocks: 189.45.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d0:57:08:e6:f7:1b:eb:0c:be:f9:17:f2:da:db:b9:f6:91:cc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:12 2024 GMT
Not After : Nov 6 20:40:12 2025 GMT
Subject: CN=4183A4A8B162957533E6600EA4BB1F6A9493617C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:ec:58:0a:5c:1c:85:91:f1:30:fe:27:18:
a9:7e:01:97:c6:3d:e9:40:1b:9e:97:59:78:c7:db:
7a:f7:89:bb:36:5b:c0:0a:7e:aa:4c:64:ec:76:89:
24:e4:e7:d1:11:59:d1:d1:7a:97:d3:1c:c6:bf:e9:
54:1e:da:92:f6:c6:a8:94:04:72:e6:68:e9:00:27:
95:93:30:60:ce:33:68:aa:9f:d8:4f:09:fb:c0:31:
18:a5:dc:3f:3f:9e:0e:54:51:80:60:f5:c3:fd:17:
b3:4f:fd:4a:24:85:37:71:28:c4:d3:fa:a2:b5:76:
ad:aa:51:21:2d:e4:67:d3:c3:09:cb:72:4a:b6:b6:
27:20:42:ea:b5:22:b6:d5:ad:eb:db:e0:ef:4c:b6:
54:1b:4d:fb:b0:7d:48:a3:f8:34:ec:59:00:4f:c9:
a7:21:b5:59:da:76:16:0a:ed:c7:62:a2:8e:d9:87:
b8:4c:a4:48:fc:9a:d1:a7:25:32:d2:3c:8e:2c:8d:
f6:cc:8a:59:6e:20:d6:58:43:31:cf:0f:c4:14:aa:
aa:65:3c:5a:e6:47:ce:4c:82:c8:6e:6a:40:79:f4:
4f:3c:39:e6:04:4a:0a:f3:d3:a9:b8:33:c7:db:57:
66:c7:bb:ed:15:57:c5:71:3e:bc:18:76:72:ec:20:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:83:A4:A8:B1:62:95:75:33:E6:60:0E:A4:BB:1F:6A:94:93:61:7C
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e34352e36342e302f31382d3138203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.64.0/18
Signature Algorithm: sha256WithRSAEncryption
76:47:2e:74:b8:50:c4:88:ba:67:a9:cf:c8:af:36:a4:10:11:
25:e2:3e:9e:43:ee:4f:be:14:5f:bf:ae:0a:4e:f7:c8:25:e0:
82:11:0c:5b:35:ab:34:87:7b:21:5b:6e:b8:83:0d:ee:f5:bf:
b5:5d:83:62:85:98:fc:4c:d6:05:18:06:76:b7:44:89:c1:ad:
a4:df:b4:9d:18:9d:d6:6e:dc:93:74:b1:28:33:d9:23:f8:fd:
2f:8a:d1:e8:67:0c:aa:44:8d:dd:ce:a6:c0:3a:a0:29:fb:ba:
77:9c:64:33:a6:36:f3:56:b0:41:db:47:3a:ae:22:4a:7f:9b:
ba:58:ec:eb:44:18:78:b8:2a:66:d1:df:e7:ac:dd:e0:06:51:
ec:77:65:3e:2e:cb:25:43:5d:7f:d9:33:69:37:0e:4f:f5:69:
d3:fe:db:52:82:fb:66:75:ae:0c:78:5e:ea:04:3b:d6:4a:5d:
ab:21:34:56:80:97:18:2c:0a:b8:ca:70:4b:de:c1:5a:a7:42:
69:0e:4b:de:bd:79:75:f2:0a:53:58:14:fe:9e:19:c4:64:93:
6b:24:5c:ab:2e:51:fc:0a:36:cd:a9:89:76:9c:2a:17:64:1d:
ed:c4:85:79:16:a9:c1:f8:8e:f1:21:f9:95:d5:7c:52:da:67:
37:5a:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org