Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233322e302f32322d3232203d3e203238333630.roa
File: 3138392e37362e3233322e302f32322d3232203d3e203238333630.roa (raw, json)
Hash identifier: 1C/aS+rZ4yEs3VdcrdoLiJTv/3511CwK6h9SZWct1VA=
Subject key identifier: AA:04:25:1E:55:70:57:B7:34:1A:0D:D3:F3:45:5F:00:90:C6:29:BB
Certificate issuer: /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial: 1673A0FE41CA2E30E23D799DC697E9E73814BD6B
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233322e302f32322d3232203d3e203238333630.roa
Signing time: Sat 06 Apr 2024 02:45:51 +0000
ROA not before: Sat 06 Apr 2024 02:40:51 +0000
ROA not after: Sat 05 Apr 2025 02:45:51 +0000
asID: 28360
IP address blocks: 189.76.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:73:a0:fe:41:ca:2e:30:e2:3d:79:9d:c6:97:e9:e7:38:14:bd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Validity
Not Before: Apr 6 02:40:51 2024 GMT
Not After : Apr 5 02:45:51 2025 GMT
Subject: CN=AA04251E557057B7341A0DD3F3455F0090C629BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:1f:36:d1:7e:5a:7b:84:88:d9:48:00:13:
14:4b:fc:e7:23:ab:74:77:d2:50:61:2c:e8:f7:16:
3b:dc:20:0a:b7:d5:89:c9:c1:9d:f9:c8:81:a6:d0:
1a:05:e9:de:b3:f9:99:5c:03:63:d8:c8:37:11:84:
a5:74:c6:d7:a8:61:e4:31:f2:bb:84:3c:64:6a:50:
1a:ce:32:67:4a:24:42:64:8e:36:81:c8:0c:22:9f:
2f:90:b5:93:57:65:c5:c6:d1:09:fc:ac:ae:24:25:
45:e1:b2:a6:22:b7:c4:b3:68:eb:9b:65:44:07:53:
f6:9a:a7:fe:4b:04:52:3b:ac:8b:1c:e4:1a:e4:87:
3a:22:78:51:53:b0:ef:0c:59:b6:45:53:f7:7b:85:
69:2c:b3:be:57:d1:e6:bc:bd:17:e1:90:cb:c6:e1:
5d:93:17:81:08:ba:2b:c3:ea:31:3c:3f:c8:b8:f6:
87:38:2f:65:af:8a:b3:83:fa:76:6d:a4:a6:be:26:
97:a2:d3:4c:8f:f3:74:98:0c:f7:6d:49:bf:2c:9c:
8f:10:b5:e2:74:fa:59:e6:5f:6a:71:ff:8e:63:e4:
1f:36:ce:0d:81:3a:c2:f0:f1:41:34:18:66:ba:5f:
37:ac:c6:db:ae:ed:10:b8:c7:5c:6a:96:2b:ce:87:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:04:25:1E:55:70:57:B7:34:1A:0D:D3:F3:45:5F:00:90:C6:29:BB
X509v3 Authority Key Identifier:
keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233322e302f32322d3232203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.76.232.0/22
Signature Algorithm: sha256WithRSAEncryption
71:54:56:18:85:8f:78:c1:63:0f:82:07:fe:3d:14:0a:9d:04:
e0:62:ec:03:af:c1:94:be:41:8c:9b:2d:2f:b7:d1:85:6f:9e:
9b:08:5d:d9:70:b7:68:06:78:92:70:4c:1d:fa:92:82:0e:1e:
84:c9:cf:39:f4:f3:83:31:37:cc:34:e7:b7:99:e9:84:4d:e0:
cc:00:ac:36:ce:38:93:44:47:f4:84:a5:69:69:30:5f:83:ea:
19:1c:71:7d:bb:3d:56:da:67:aa:f0:6b:28:99:d0:c8:23:d9:
1e:6a:df:2a:50:0e:fc:62:f2:66:11:db:84:80:9b:0a:15:5e:
c0:10:08:15:7c:f6:70:6e:bd:56:d9:3b:d4:68:8a:80:35:2a:
ed:90:e5:e2:a8:eb:7e:b2:3c:f5:ec:f6:52:67:84:5c:46:24:
b0:a7:9d:bf:bc:f9:a3:ed:84:7f:bb:48:99:c4:de:f9:f9:09:
20:17:db:31:10:4c:6d:d3:6a:19:b3:ec:a1:25:42:f6:63:6c:
ac:3f:04:c2:82:f2:81:e9:0e:31:2a:13:5b:ca:06:79:7e:40:
b1:66:97:6f:ef:18:4f:fa:bb:5d:47:1f:b9:6f:5b:8c:30:a3:
b9:4b:66:24:ea:0d:e7:3c:a3:0b:43:bf:c0:77:d2:5f:3a:c2:
bc:81:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org