Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3332203d3e203238333630.roa
File: 3138392e37362e3232342e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier: VArEVVoQSo6mmgqgThge67qIEXk4nUeV07/UlQ+S2B0=
Subject key identifier: D3:5F:B0:DA:7E:35:1A:B3:E7:6F:2B:08:3F:03:04:8A:57:F5:FC:8B
Certificate issuer: /CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
Certificate serial: 79FD1D655CE86895C258B903EA6F7170692BD25F
Authority key identifier: 01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3332203d3e203238333630.roa
Signing time: Fri 10 Jan 2025 19:58:12 +0000
ROA not before: Fri 10 Jan 2025 19:53:12 +0000
ROA not after: Fri 09 Jan 2026 19:58:12 +0000
asID: 28360
IP address blocks: 189.76.224.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:fd:1d:65:5c:e8:68:95:c2:58:b9:03:ea:6f:71:70:69:2b:d2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
Validity
Not Before: Jan 10 19:53:12 2025 GMT
Not After : Jan 9 19:58:12 2026 GMT
Subject: CN=D35FB0DA7E351AB3E76F2B083F03048A57F5FC8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:c8:b0:4b:9b:ba:e1:22:2f:32:21:bc:28:
58:85:9c:82:a8:fc:51:96:dc:b6:a6:3e:30:3b:b9:
fb:a4:d3:ce:cc:3f:61:59:b6:a6:24:f4:d1:9b:c9:
b5:e3:04:1f:dd:97:64:83:26:24:71:26:b3:1d:1d:
14:9f:bb:97:f0:28:ae:3c:ba:3d:ce:35:26:ab:66:
27:e5:5b:a9:45:f6:ff:52:ea:13:45:cf:bb:62:f6:
10:e2:f6:30:5a:3e:54:bd:16:1d:3e:44:ba:f2:0c:
ec:f6:27:f2:e8:b4:4d:37:55:46:46:9b:dd:38:93:
38:23:4a:d1:31:55:5f:b7:0c:57:0d:78:6f:57:94:
70:e6:5a:c7:94:44:9b:6c:14:36:69:c4:4b:0e:31:
19:d5:71:9a:70:c1:cd:0a:15:b4:b2:3e:99:fd:00:
ca:0e:fe:a3:cb:ea:a4:0b:e3:a9:d7:47:6b:8a:04:
76:0f:3f:4b:32:fe:b0:e6:3f:19:98:1e:f3:48:78:
25:d2:45:39:5d:5d:ca:4a:50:89:58:bb:82:e6:4e:
41:85:08:d5:de:9e:55:d6:15:ac:8d:2a:f7:ba:ec:
a8:f2:7e:23:bf:50:03:a5:83:17:ec:cc:df:3c:7f:
db:43:1a:c2:96:41:1f:b1:5c:a9:ea:ea:03:4f:17:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5F:B0:DA:7E:35:1A:B3:E7:6F:2B:08:3F:03:04:8A:57:F5:FC:8B
X509v3 Authority Key Identifier:
keyid:01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3332203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.76.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:f3:8e:85:33:ca:b7:f9:dc:10:ba:82:f5:88:0d:5c:39:00:
41:82:9f:1e:66:57:72:d6:8d:06:a1:83:bf:0c:7f:0c:96:a0:
fd:77:28:10:a9:4a:a0:89:6d:32:ec:af:95:85:33:19:59:a6:
e8:3b:fc:cb:32:0a:15:c8:09:ef:d5:c2:b8:1e:68:26:e5:0e:
cc:a3:2f:35:21:c7:6d:ce:7f:93:74:b9:05:f7:8d:5e:ed:58:
12:41:13:15:61:b6:5d:7b:3e:b0:3f:ee:87:41:6c:d1:9d:10:
c1:a8:8e:e3:ad:26:f7:7e:b0:8b:80:1e:ec:6a:84:ae:c5:44:
4f:9b:7a:54:7e:02:b3:9d:5e:4b:e1:fd:d9:df:fc:19:be:39:
76:65:00:9c:28:2e:e0:23:58:f0:b0:12:1a:d6:5c:f5:c3:9b:
c7:7f:09:d6:9e:70:fb:3d:21:ac:c2:e7:94:69:f6:0c:a3:e7:
f0:29:e5:89:03:dd:8e:5e:9b:69:ee:55:f1:22:af:56:6c:74:
cb:eb:84:c8:dc:2c:ba:00:ec:f1:44:81:d7:4f:0b:aa:a6:36:
65:d7:e6:e4:7b:d4:82:68:f3:bf:04:4a:09:4f:4d:d1:6c:17:
c4:03:64:2f:63:49:a4:31:ee:ac:e5:49:bb:87:5e:e7:7d:ff:
55:c6:0c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:42:46 2025 by rpki-client