Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3234203d3e203238363536.roa
File: 3139302e35322e37322e302f32322d3234203d3e203238363536.roa (raw, json)
Hash identifier: whIfx2qDwRcwfu4C1fIYceBkxGrLbgrGXuYqU7N12Vg=
Subject key identifier: A5:0E:22:D6:63:D3:1E:1B:8C:3A:08:C3:B1:56:9C:15:F9:83:0E:51
Certificate issuer: /CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
Certificate serial: 56DFF32860909D83CBF4C1D2E7B289FC04EC5DEB
Authority key identifier: 7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3234203d3e203238363536.roa
Signing time: Mon 08 May 2023 11:47:52 +0000
ROA not before: Mon 08 May 2023 11:42:52 +0000
ROA not after: Mon 06 May 2024 11:47:52 +0000
asID: 28656
IP address blocks: 190.52.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:df:f3:28:60:90:9d:83:cb:f4:c1:d2:e7:b2:89:fc:04:ec:5d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
Validity
Not Before: May 8 11:42:52 2023 GMT
Not After : May 6 11:47:52 2024 GMT
Subject: CN=A50E22D663D31E1B8C3A08C3B1569C15F9830E51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:5a:95:38:18:ef:f1:48:7a:24:0f:99:95:
47:da:01:45:86:26:b2:de:58:02:0d:62:51:dd:b5:
21:1c:c0:6e:7e:1a:87:15:3f:2c:f1:b7:4c:e8:ae:
8a:77:ac:3b:54:d0:83:86:76:14:2c:ea:bd:80:af:
2d:29:86:5a:23:90:8f:ca:96:83:3b:ec:69:c5:ae:
86:81:f0:01:f8:b4:e3:99:9b:13:c2:4e:32:89:c9:
9a:de:a3:8b:99:db:04:cc:8c:b6:c6:0e:5a:14:f1:
75:6d:a2:92:22:1e:09:a6:45:69:29:8e:cc:8e:0b:
27:d7:3b:cd:aa:41:1d:e8:4e:26:7d:60:7b:e6:e8:
07:73:f3:3b:db:e3:35:b2:d2:22:1f:f7:8b:89:b9:
54:26:be:76:1c:a3:69:e4:63:cf:e5:cd:06:44:3d:
82:61:93:a6:1d:f8:22:53:d8:16:cd:d4:80:be:0d:
49:d8:82:01:a5:3a:bc:28:68:25:e3:29:14:5f:1d:
91:6e:b0:4e:c3:00:1e:e1:e5:4d:5d:7f:1c:5a:a3:
eb:0d:bf:ae:42:25:91:1a:8f:a8:bf:be:0c:0c:2e:
14:29:7d:8d:a9:8c:52:be:0e:48:68:4e:4c:04:ac:
a6:97:1a:7a:53:91:12:fb:9b:30:b9:bd:22:9c:57:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0E:22:D6:63:D3:1E:1B:8C:3A:08:C3:B1:56:9C:15:F9:83:0E:51
X509v3 Authority Key Identifier:
keyid:7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3234203d3e203238363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:02:05:1b:b9:79:fd:45:05:00:d5:6e:fa:63:d0:18:13:b6:
74:4f:3b:5c:dc:8f:e4:5f:02:d3:78:5c:2c:7f:51:ff:b9:5f:
72:cd:06:45:03:ee:36:9b:c1:98:07:43:b2:e4:05:f1:a4:48:
08:d4:89:b2:ad:48:33:be:8e:09:4e:25:b6:8e:54:9c:f5:04:
a7:bd:70:57:f6:da:6d:f8:a0:e8:2c:85:dc:a3:57:bc:96:52:
d8:bb:8a:2c:48:37:a8:31:01:08:9c:63:4a:5d:af:5e:68:37:
36:b0:85:65:0b:87:41:92:77:c7:63:36:40:16:72:6c:45:91:
be:c3:28:59:26:38:5c:c8:13:d8:04:96:e2:ce:a7:c8:45:71:
ce:05:e5:b8:37:16:e9:10:5c:6b:65:d8:4b:cb:27:cb:bf:b0:
6f:6d:2c:b8:68:fd:07:7e:1a:cd:df:6a:65:3f:25:c4:5b:f6:
94:ac:e1:00:78:e2:1d:3d:fa:75:dc:ad:e1:0d:cd:30:45:ae:
ab:7f:22:0d:78:98:bb:3e:ab:e5:8e:9b:c8:03:22:2d:e2:fe:
d4:3b:e3:1b:56:ee:53:27:56:d6:5d:c4:0f:e5:50:38:fb:ab:
f1:13:24:eb:6f:83:2b:8b:eb:ca:a8:5b:59:de:24:23:bd:8e:
70:1d:ad:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:24 2025 by rpki-client