Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3232203d3e203238363536.roa
File: 3139302e35322e37322e302f32322d3232203d3e203238363536.roa (raw, json)
Hash identifier: TWrrwVCiWA1AF0gHT6O9MV0Rui8piL7XxanWQen22LA=
Subject key identifier: CD:05:E3:87:2B:9E:BB:09:0F:8B:07:46:A6:1C:82:AA:D6:EB:66:D3
Certificate issuer: /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial: 544210A1AEBCFF95D867FC4747FAAECD7CC0CCB0
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3232203d3e203238363536.roa
Signing time: Thu 16 Mar 2023 14:50:14 +0000
ROA not before: Thu 16 Mar 2023 14:45:14 +0000
ROA not after: Thu 14 Mar 2024 14:50:14 +0000
asID: 28656
IP address blocks: 190.52.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:42:10:a1:ae:bc:ff:95:d8:67:fc:47:47:fa:ae:cd:7c:c0:cc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
Validity
Not Before: Mar 16 14:45:14 2023 GMT
Not After : Mar 14 14:50:14 2024 GMT
Subject: CN=CD05E3872B9EBB090F8B0746A61C82AAD6EB66D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:a4:0d:05:9c:8a:89:c9:ed:51:79:6a:e1:
dc:6f:aa:05:18:1f:27:63:6e:8a:7c:a8:eb:9d:38:
24:ce:e0:2d:a8:3d:ab:95:a9:47:62:bf:76:1e:5a:
e5:d5:0e:c2:0b:c0:f1:0d:6c:13:83:df:40:bd:96:
67:70:40:a5:69:93:a5:18:bc:54:ba:04:10:49:a6:
3d:44:d7:01:58:39:f8:46:4d:64:0c:eb:6a:36:37:
0b:96:98:8e:bd:bc:3c:6a:a0:7d:4c:9c:a0:61:e1:
dd:b8:9c:29:53:d8:62:61:cb:68:ae:c2:ef:4d:ae:
2b:cf:9d:6e:05:3f:37:e8:59:59:e7:34:49:84:d4:
f1:e1:e5:62:9a:19:ef:33:c4:2d:ca:6f:74:32:4c:
ce:79:ad:33:ee:a7:01:11:2e:06:07:53:9d:99:d9:
ec:3b:bb:d7:5c:69:38:cb:02:8c:95:86:55:50:81:
0a:a2:81:14:11:73:7a:a3:84:59:84:bb:c7:74:42:
98:46:6d:15:f4:c2:1e:6d:49:39:93:d0:b7:91:75:
c0:3d:d1:fd:a4:81:f6:22:e2:75:9e:67:7f:8e:76:
fc:12:3d:d5:2d:67:44:83:cd:3e:d5:62:54:3f:95:
6f:75:87:bd:18:51:a8:80:c8:bb:55:1d:40:42:e2:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:05:E3:87:2B:9E:BB:09:0F:8B:07:46:A6:1C:82:AA:D6:EB:66:D3
X509v3 Authority Key Identifier:
keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3232203d3e203238363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.72.0/22
Signature Algorithm: sha256WithRSAEncryption
03:d8:06:ae:38:1b:28:62:a3:c5:00:fc:1c:98:2d:d6:e0:5f:
7a:57:be:39:62:49:85:ee:14:be:c3:53:3e:c0:31:40:42:54:
c7:a8:60:64:67:42:e0:6a:7f:6c:a6:0b:c5:6e:f2:50:df:28:
96:13:19:13:d9:c1:e2:b9:ce:e6:c8:66:b0:dc:cd:d9:e7:76:
9e:a9:c8:95:f0:a2:3a:8a:a4:06:98:11:1d:d8:be:33:7c:3d:
e3:1d:3e:11:bd:63:84:8b:a7:17:16:b8:1e:1a:32:17:2d:14:
4a:cb:1f:d0:e3:cd:01:f2:1e:cb:ef:32:54:65:77:27:50:cd:
2a:b4:a9:6a:94:a6:af:7b:fa:38:c4:a9:f1:32:9f:07:93:f8:
37:a6:75:2f:cf:d6:a6:fa:e0:6c:bc:e6:f4:c8:55:03:63:35:
3a:07:af:de:28:4f:c5:66:b6:44:c6:8f:f4:3c:71:cc:0d:21:
49:5e:ac:3a:10:72:0e:8c:6c:8c:7c:46:ec:ee:17:92:0d:01:
95:78:e0:d7:78:39:4c:3b:33:31:1e:b2:1e:3d:e9:bd:bf:3b:
33:a5:e4:97:68:0c:bb:e5:d4:51:c4:9b:e3:95:88:cf:2c:cf:
78:f1:63:41:f7:23:d5:38:1f:74:a8:76:40:7e:e7:de:c6:75:
95:81:06:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:22 2025 by rpki-client