Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32312d3231203d3e203238313931.roa
File: 3138392e39302e34302e302f32312d3231203d3e203238313931.roa (raw, json)
Hash identifier: P1U/sKNBS3OhHqVgiu8iBg3+VXhKKj2CbF5cp+R82WY=
Subject key identifier: A3:E6:B1:99:BA:87:B8:9E:60:C8:AC:61:05:50:C5:9E:44:34:10:07
Certificate issuer: /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial: 586ECACDE40212C175BEBD6C1A184669B65A2025
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32312d3231203d3e203238313931.roa
Signing time: Wed 17 Apr 2024 11:42:28 +0000
ROA not before: Wed 17 Apr 2024 11:37:28 +0000
ROA not after: Wed 16 Apr 2025 11:42:28 +0000
asID: 28191
IP address blocks: 189.90.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:6e:ca:cd:e4:02:12:c1:75:be:bd:6c:1a:18:46:69:b6:5a:20:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Validity
Not Before: Apr 17 11:37:28 2024 GMT
Not After : Apr 16 11:42:28 2025 GMT
Subject: CN=A3E6B199BA87B89E60C8AC610550C59E44341007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:8d:56:9b:25:56:84:cd:d6:a2:ce:d6:4b:
90:d4:67:87:fc:9a:2e:17:cd:dd:3a:2c:93:36:dc:
92:33:01:89:e3:c5:b0:90:c0:f5:75:9b:d5:95:7f:
4c:f5:a1:26:17:46:e1:09:fc:a5:e1:5f:79:e6:00:
c8:49:bc:9c:79:47:7e:f3:fd:2f:a6:9c:d5:b4:27:
38:84:a0:bd:bf:f6:52:df:f1:39:3e:01:8c:1e:46:
b7:64:ae:96:4e:ac:84:19:23:17:3d:c8:51:34:e2:
e4:c7:15:61:55:27:4f:9c:b5:f7:53:85:b2:18:0a:
05:79:f6:ab:4b:98:e5:92:83:c7:42:5d:e4:ab:d9:
6e:ad:92:60:7f:04:13:8a:b1:73:07:1b:5a:01:80:
65:47:4a:e9:cb:03:9a:a7:75:60:f9:4a:63:b5:b8:
07:1c:8e:3e:7e:da:2a:e8:4e:e9:e4:44:a3:51:02:
c5:b4:3c:1d:5a:50:e1:a0:4b:25:bc:a8:e2:19:f8:
1b:f4:5a:dd:98:fe:23:2b:6c:af:f9:c1:34:f8:91:
12:d4:7b:0a:58:ac:8f:ef:56:01:8c:f5:57:1f:ce:
9f:c6:3c:8e:7d:3e:f1:05:15:61:4f:8b:c9:f7:5d:
9d:e9:9e:12:7a:9a:c9:b7:f9:14:d4:65:d2:82:03:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E6:B1:99:BA:87:B8:9E:60:C8:AC:61:05:50:C5:9E:44:34:10:07
X509v3 Authority Key Identifier:
keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32312d3231203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.40.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:17:f4:0a:a2:cc:01:fe:ee:8d:52:5a:ea:e9:be:e9:44:3f:
90:74:12:0b:d0:ea:aa:9c:0e:dd:b5:75:16:eb:d2:05:71:cc:
4a:aa:7e:d3:55:d1:81:ce:4d:c4:05:e8:bc:f2:8f:b6:87:f4:
e5:20:e1:ae:34:0f:01:37:d5:24:35:5d:92:41:c6:29:90:70:
af:83:54:ac:3e:91:8c:e7:b7:fb:8e:67:74:5f:61:c3:e6:71:
dc:fa:be:1d:eb:16:f2:d4:de:9e:36:ea:3e:b5:70:66:9b:5a:
6d:a8:0b:5d:21:30:36:ff:a0:27:90:09:4e:9b:b9:4d:44:df:
90:4f:e9:96:d5:c6:86:0b:ff:29:e1:a3:58:7f:dd:96:be:03:
50:ac:c2:a5:3b:60:8f:0d:7e:bb:02:15:27:17:26:f5:a4:9d:
0b:ff:22:20:60:18:53:48:6c:cd:51:0c:67:35:20:e5:c9:f6:
80:24:e7:04:1f:3e:a4:66:9d:a6:bd:42:51:99:db:f2:a2:f7:
8b:8f:4d:70:bc:8a:5b:af:8d:42:3d:fd:2d:98:d9:c4:54:36:
4c:fb:db:a3:9b:6a:20:95:3b:19:dc:ab:3f:48:80:8b:d3:c8:
57:a1:dd:ca:af:f9:cd:f8:6a:76:77:49:fb:8a:d8:2a:40:5a:
92:68:c5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:17:21 2025 by rpki-client