Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/1/3139302e38392e37362e302f32322d3332203d3e20323730333539.roa
File: 3139302e38392e37362e302f32322d3332203d3e20323730333539.roa (raw, json)
Hash identifier: B2RRzmGPqLEtpQ/q0W9ZNT0xfLtYH68RcxgBMsbWG5s=
Subject key identifier: 21:00:16:31:7F:FF:E0:2E:8A:A9:75:22:30:99:26:A4:E4:FB:D4:AC
Certificate issuer: /CN=59B8FEB0A86E7BE3C5AFA4010051347F8F724456
Certificate serial: 68436443AF55E204DDDABADB78E9A0C4DEFFCEFB
Authority key identifier: 59:B8:FE:B0:A8:6E:7B:E3:C5:AF:A4:01:00:51:34:7F:8F:72:44:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B8FEB0A86E7BE3C5AFA4010051347F8F724456.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/1/3139302e38392e37362e302f32322d3332203d3e20323730333539.roa
Signing time: Thu 25 Jan 2024 19:15:27 +0000
ROA not before: Thu 25 Jan 2024 19:10:27 +0000
ROA not after: Thu 23 Jan 2025 19:15:27 +0000
asID: 270359
IP address blocks: 190.89.76.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:43:64:43:af:55:e2:04:dd:da:ba:db:78:e9:a0:c4:de:ff:ce:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59B8FEB0A86E7BE3C5AFA4010051347F8F724456
Validity
Not Before: Jan 25 19:10:27 2024 GMT
Not After : Jan 23 19:15:27 2025 GMT
Subject: CN=210016317FFFE02E8AA97522309926A4E4FBD4AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:b1:c3:8a:22:34:5a:8b:2e:7c:f9:99:17:
6f:e9:e3:06:79:22:48:48:1c:ad:82:32:19:3b:f2:
90:9e:15:e8:b2:66:a2:11:b5:4c:77:cd:f0:f6:4c:
c3:7a:12:69:34:35:37:f4:bf:f3:4b:19:90:90:5a:
20:77:39:42:c2:d8:ad:cf:b5:37:8e:f0:b1:7a:13:
b1:35:ca:5d:46:9a:09:2b:6d:30:89:e1:20:c8:08:
89:1f:8f:93:ee:14:16:9c:7d:b9:50:2f:30:9f:e6:
b3:94:ce:9a:d9:05:13:8d:00:65:9e:d7:86:f0:1d:
21:46:e7:f0:fc:ac:57:86:a2:04:05:01:c5:b4:ab:
28:be:29:0f:ad:51:0f:80:c4:e2:34:c5:e9:1c:85:
a2:a1:57:c0:9c:06:1c:7f:92:85:7e:d6:0e:07:7d:
97:bd:45:45:5a:ef:4a:e2:b0:9d:73:87:6a:09:27:
2d:b4:0f:83:01:c6:7d:e3:dd:ce:ec:05:88:63:76:
a0:37:f2:fc:11:20:3d:b0:4d:2d:0d:d5:15:1e:67:
bf:36:36:6b:60:e3:81:05:a1:b1:1e:5b:10:fa:47:
6a:6e:c8:00:64:45:ee:33:6c:d9:3d:d3:fa:49:1e:
ab:df:70:e1:ea:d6:0b:e1:ac:c8:f6:25:3d:d1:9f:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:00:16:31:7F:FF:E0:2E:8A:A9:75:22:30:99:26:A4:E4:FB:D4:AC
X509v3 Authority Key Identifier:
keyid:59:B8:FE:B0:A8:6E:7B:E3:C5:AF:A4:01:00:51:34:7F:8F:72:44:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/1/59B8FEB0A86E7BE3C5AFA4010051347F8F724456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B8FEB0A86E7BE3C5AFA4010051347F8F724456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/1/3139302e38392e37362e302f32322d3332203d3e20323730333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.76.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:80:75:25:2a:a2:77:ed:82:67:11:df:25:cd:98:8b:78:f0:
61:56:b8:ef:de:e7:34:ac:56:d2:3c:9c:b7:69:11:2d:72:ee:
ce:d2:c2:a4:13:7b:d1:64:73:58:6e:ef:30:63:21:6e:63:d1:
51:e5:43:10:f2:6c:d2:6f:95:c4:f1:ae:d4:79:a4:ae:02:35:
8e:54:c4:8c:f2:fd:8e:e5:e6:cc:d3:17:63:de:05:02:48:cb:
5f:c7:a9:0b:1a:d4:ec:8f:7e:80:0a:f2:89:33:d7:10:0b:a3:
ce:86:bc:73:b1:2f:11:2e:ef:3e:97:13:45:1c:b5:f6:a5:7a:
ae:9b:07:5c:f3:a3:9d:31:4c:a0:da:d8:ed:59:d8:4a:97:52:
29:8f:26:56:f3:19:3e:60:73:5b:be:48:8e:be:bf:b0:5c:41:
21:a4:2c:67:83:1e:a6:63:7f:2b:cb:4f:53:b0:d4:e1:44:48:
67:3f:18:9c:6b:eb:3a:f7:3d:95:b0:1e:a0:14:a9:9c:af:29:
f0:51:33:6d:2c:a4:71:ad:51:d9:a6:d0:35:33:0e:d0:ab:4d:
0a:83:4d:24:b0:64:01:02:da:f8:4f:ac:32:f5:86:8b:ac:74:
12:37:8f:6d:96:e2:c9:8e:e3:b1:ce:c4:a3:3e:52:cf:03:d7:
65:93:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org