Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32312d3231203d3e203238333630.roa
File: 3138392e37362e3230382e302f32312d3231203d3e203238333630.roa (raw, json)
Hash identifier: UHQs0b9B4yiD6oezLSDAybgg84cySy6bqL9AiNAQDro=
Subject key identifier: 1D:BE:A8:8D:6C:DA:76:F2:90:A8:39:84:29:3F:74:27:D4:66:D5:C7
Certificate issuer: /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial: 15CBA70912B82BDC8428D0E18FC867D5B0FF5B1B
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32312d3231203d3e203238333630.roa
Signing time: Sat 06 Apr 2024 02:45:25 +0000
ROA not before: Sat 06 Apr 2024 02:40:25 +0000
ROA not after: Sat 05 Apr 2025 02:45:25 +0000
asID: 28360
IP address blocks: 189.76.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:cb:a7:09:12:b8:2b:dc:84:28:d0:e1:8f:c8:67:d5:b0:ff:5b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Validity
Not Before: Apr 6 02:40:25 2024 GMT
Not After : Apr 5 02:45:25 2025 GMT
Subject: CN=1DBEA88D6CDA76F290A83984293F7427D466D5C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0e:ae:ed:d1:6f:7d:50:7e:fa:b9:1a:ed:01:
ba:f0:7a:57:cb:f0:74:f6:8c:f2:9e:5a:b6:ed:df:
6a:e1:2b:ab:ba:f4:70:23:26:e0:88:34:48:00:4c:
75:b6:0e:ea:a0:aa:ec:a7:1d:cf:97:a9:73:bd:48:
d8:cb:3a:e0:76:d0:44:13:4a:63:d0:05:cc:06:15:
f0:22:fb:29:59:bc:19:ec:81:50:13:60:e7:00:04:
fa:b0:e6:7c:e1:4c:ec:36:8c:02:38:bb:63:57:e1:
94:14:58:39:81:a2:d6:34:7c:0f:0b:4f:a9:1f:70:
94:ca:25:e1:32:17:69:0d:d8:a2:24:f5:44:57:ca:
7c:8e:d8:60:b6:4d:ce:d6:b1:35:12:07:7d:72:f5:
23:56:38:4a:04:4d:50:39:61:48:52:5d:69:db:f7:
09:56:bb:a6:24:39:dd:d3:6f:01:e8:e3:9b:f1:ca:
6b:50:01:db:2f:ff:74:32:bf:99:f6:71:b9:a7:9b:
b9:f5:bf:35:7f:4d:7b:e0:a1:03:da:da:c0:dd:0a:
be:4d:f7:8e:df:ec:79:85:0c:9e:70:de:77:08:50:
1e:82:78:2f:24:13:51:ab:f5:52:86:b4:da:76:46:
0a:ef:66:b0:2c:60:01:5c:d0:39:66:af:4b:37:f2:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BE:A8:8D:6C:DA:76:F2:90:A8:39:84:29:3F:74:27:D4:66:D5:C7
X509v3 Authority Key Identifier:
keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32312d3231203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.76.208.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:3e:34:6d:58:62:eb:0c:8b:7c:38:6b:09:59:9d:be:21:9c:
87:cc:6f:ab:62:20:9c:75:85:45:2c:cb:3f:fb:3b:45:bc:a2:
8f:be:1c:54:80:b3:e2:01:0f:e1:90:ee:a4:03:e9:db:eb:00:
99:f0:c9:f0:c0:ca:f7:e7:9a:9b:05:c8:a4:2f:4d:10:40:b0:
24:c8:2d:94:36:62:aa:4a:ef:25:ac:5a:57:ad:46:ab:a1:69:
71:49:2c:1b:f9:07:31:08:6c:cc:e2:22:f4:c1:71:1b:c6:cf:
f6:2f:3f:55:42:1b:d5:f7:84:46:9f:52:97:cf:66:c6:ed:d2:
b2:21:48:6d:cb:bf:c7:a2:3e:2b:86:47:34:da:ce:b8:1b:ff:
73:2d:7a:a0:00:ba:d0:c3:ac:c8:e0:50:8e:34:1f:14:f7:b3:
63:4c:7f:a1:38:72:eb:33:bd:be:43:36:74:72:c7:c7:b0:c4:
4d:db:ec:85:7a:41:e7:97:a4:c2:9a:c7:05:6e:04:82:e4:63:
1b:df:a4:15:40:6d:5c:2e:c7:15:40:64:b1:51:a8:f8:1f:08:
5e:f1:2e:7d:b5:ca:75:59:a7:62:17:d1:f1:2f:dd:2c:35:55:
31:be:d2:1c:f7:2a:fc:49:9d:11:de:35:69:92:80:7a:d8:f6:
19:d6:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org