Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS28664.roa
File: AS28664.roa (raw, json)
Hash identifier: xQvsAxm3E6gNhvhGqxnqOMg1cQdH4uJ/eOFB3DeZwHQ=
Subject key identifier: BB:36:95:82:0C:CA:C2:6F:5E:D0:F8:EF:1D:95:B1:1B:66:31:34:8E
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 4AF814B8FBDB5E3ABE13483C7FBB3B554F1D2D73
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS28664.roa
Signing time: Wed 10 Apr 2024 22:01:14 +0000
ROA not before: Wed 10 Apr 2024 21:56:14 +0000
ROA not after: Wed 09 Apr 2025 22:01:14 +0000
asID: 28664
IP address blocks: 189.1.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f8:14:b8:fb:db:5e:3a:be:13:48:3c:7f:bb:3b:55:4f:1d:2d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Apr 10 21:56:14 2024 GMT
Not After : Apr 9 22:01:14 2025 GMT
Subject: CN=BB3695820CCAC26F5ED0F8EF1D95B11B6631348E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:28:c7:c3:4d:eb:6a:7b:b0:9b:ef:ad:68:
c8:f8:ab:20:2a:34:84:69:7d:59:0b:9b:9d:54:9b:
bd:7d:21:b8:3a:05:a2:cc:c3:b0:a5:a0:8c:33:09:
4d:9b:dd:f9:41:b8:ef:7b:3c:b6:81:18:82:b7:6e:
eb:12:70:bb:11:25:44:96:df:b7:ff:d7:fc:98:0e:
19:cc:d3:64:e9:d6:e5:48:86:a9:99:94:8f:f3:5a:
50:12:10:25:ce:b1:88:87:81:8f:1e:5e:e1:e7:3a:
2e:0e:b1:e4:8e:9a:b4:13:55:22:55:16:6f:15:b0:
ef:d5:6f:a0:3b:dc:00:f3:83:b0:c2:86:41:b8:38:
7e:09:32:57:a1:0a:cc:ea:c5:1a:31:47:1c:f2:26:
ec:45:fe:d1:82:b2:9d:88:6b:2e:3c:8e:2e:5b:74:
48:b7:d1:37:34:e2:0e:f9:41:0a:4f:b5:02:1a:74:
fd:b0:95:af:40:65:b6:0d:25:ad:8e:3e:76:8c:81:
4a:1f:f1:4d:22:d6:6c:a0:87:7b:47:61:0c:c7:a3:
7a:54:ea:3a:e8:79:79:e4:a5:17:84:ff:a4:9a:08:
06:6e:fd:88:a1:2d:ff:a6:76:ed:1b:5d:07:ba:84:
35:94:38:3f:ee:21:f3:f8:b1:91:d3:ee:59:60:a1:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:36:95:82:0C:CA:C2:6F:5E:D0:F8:EF:1D:95:B1:1B:66:31:34:8E
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS28664.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.1.80.0/20
Signature Algorithm: sha256WithRSAEncryption
44:9a:10:55:61:a1:24:0e:c4:8c:2c:36:c8:c3:5c:77:49:63:
9e:84:68:fc:53:8e:70:fb:fb:ee:aa:98:cc:06:d3:12:93:12:
6a:28:43:1d:90:e2:e4:7e:c2:a1:41:8c:cb:da:b1:90:49:e5:
22:89:b2:d4:1b:ab:8c:5a:6e:3e:ec:45:65:24:55:d1:fb:f2:
74:d7:5d:5a:95:13:ef:16:4a:9a:91:9c:4a:29:56:2f:c9:6d:
38:f2:83:e7:43:db:4c:ee:a0:58:79:a9:07:0f:b2:aa:36:4c:
dc:cf:ce:35:35:bb:64:2c:3e:6a:b3:83:6e:c1:63:ac:35:91:
b6:ce:61:73:85:72:ae:14:a3:46:f2:5f:a4:f2:8c:00:ec:e8:
d1:ce:96:28:74:7a:d3:cf:d9:72:89:25:9b:99:39:b2:61:d8:
5f:a9:47:9b:30:98:f1:a5:10:30:29:30:e1:b5:35:15:09:17:
21:45:5c:09:b5:1f:99:ee:e6:da:32:c5:44:51:52:77:da:d1:
37:2e:b2:cb:11:7e:ea:46:d0:2e:b2:78:87:d1:f2:a3:da:db:
86:bb:86:91:24:81:63:a1:bc:5b:24:17:55:f3:08:1c:0a:4a:
6b:af:6f:02:72:f1:03:a7:7a:d1:5f:38:ce:80:73:e7:fe:93:
45:c3:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:48 2025 by rpki-client