Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232382e302f32322d3232203d3e203238333630.roa
File: 3138392e37362e3232382e302f32322d3232203d3e203238333630.roa (raw, json)
Hash identifier: 1UQ9HLjvoTohD35V+Z8SmbSf32BWiTNlnxQ0IweO7Ug=
Subject key identifier: DD:86:ED:35:D6:5A:26:8C:8C:48:27:1A:BA:0A:DB:0A:E2:D5:8F:A0
Certificate issuer: /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial: 6612860C85EE482F6012CBE24160D60A73723F24
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232382e302f32322d3232203d3e203238333630.roa
Signing time: Sat 06 Apr 2024 02:45:59 +0000
ROA not before: Sat 06 Apr 2024 02:40:59 +0000
ROA not after: Sat 05 Apr 2025 02:45:59 +0000
asID: 28360
IP address blocks: 189.76.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:12:86:0c:85:ee:48:2f:60:12:cb:e2:41:60:d6:0a:73:72:3f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Validity
Not Before: Apr 6 02:40:59 2024 GMT
Not After : Apr 5 02:45:59 2025 GMT
Subject: CN=DD86ED35D65A268C8C48271ABA0ADB0AE2D58FA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:64:5e:e7:f0:1b:37:b4:79:8e:26:7d:ba:
78:85:8e:b8:19:f6:62:aa:e8:53:b8:b2:2c:96:b5:
4e:6b:bc:f2:55:ee:c5:19:f8:d7:68:a0:da:36:84:
b3:b8:8a:e8:0d:73:02:e2:01:96:f7:60:08:1d:43:
e1:15:ee:d1:26:0d:68:bc:e9:df:34:2f:8c:84:b9:
c2:65:8e:88:80:e1:1a:98:42:f1:ef:39:09:59:9a:
76:2a:4d:88:cf:98:e2:89:3b:a5:ef:7d:bd:25:47:
03:dc:7a:2d:06:62:c3:75:bd:a7:94:d6:b2:2b:89:
05:7f:32:e0:35:a9:25:03:64:dd:4a:39:36:0c:95:
b8:d8:57:6a:c3:2a:31:ef:3f:9d:ca:5a:46:55:be:
6f:67:5a:af:2b:43:93:67:93:e6:36:7c:8d:f6:20:
a1:42:64:85:f9:a8:25:71:5e:69:d4:29:28:e8:26:
b2:0c:27:14:db:f0:89:2e:11:ec:c9:c9:d5:9b:65:
b1:3d:0a:66:4e:05:e9:e9:6b:7e:10:2e:74:66:29:
39:c1:4e:49:aa:d9:f5:9b:a8:35:e3:a4:77:55:9e:
9a:e6:e7:56:cf:72:63:6a:a5:6e:aa:db:0e:11:46:
00:ea:21:b3:63:f9:1c:a0:8b:92:50:bd:f8:23:86:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:ED:35:D6:5A:26:8C:8C:48:27:1A:BA:0A:DB:0A:E2:D5:8F:A0
X509v3 Authority Key Identifier:
keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232382e302f32322d3232203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.76.228.0/22
Signature Algorithm: sha256WithRSAEncryption
47:71:af:1c:1c:41:64:9b:1a:ce:28:d7:b3:29:76:de:52:f8:
df:54:21:32:be:2b:8b:a0:c7:f5:f2:f6:cd:8b:27:31:a6:16:
57:8c:2d:d9:cc:1c:3b:48:01:54:e9:b8:f2:cb:a5:04:ba:37:
ab:ad:37:aa:d9:88:9a:a0:f5:41:52:95:4e:ba:0d:a3:b0:67:
52:3a:fa:e5:1e:30:f9:9d:14:80:b8:66:ca:b2:23:c7:c2:3f:
9f:db:37:39:5e:89:5e:e0:cf:06:68:35:79:6c:c4:73:e2:8e:
76:79:5c:e9:dd:c7:b2:43:03:2c:19:a4:9c:bf:64:50:6f:36:
70:46:77:0a:9b:a6:a6:39:3e:23:0e:e4:cf:dc:2e:19:f9:ab:
ff:9c:87:d5:5f:18:80:c0:42:ff:97:41:f2:28:47:77:d5:98:
03:8e:f1:0d:62:07:90:cb:5e:8d:ff:00:3c:3d:88:22:3f:9b:
56:90:5a:03:69:c7:9c:25:da:0a:bb:4c:93:b5:fe:34:07:d4:
3c:ac:80:19:f0:45:a8:b7:36:cd:79:14:51:0f:95:eb:21:7d:
66:a6:2d:14:5c:18:61:46:dc:29:b9:8a:5d:2c:b4:08:13:d9:
dc:68:72:9f:0b:62:b4:f4:ea:47:2a:3d:49:ce:89:c9:4d:be:
d0:c2:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:51 2025 by rpki-client