Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34322e302f32332d3233203d3e203238313931.roa
File: 3138392e39302e34322e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier: XY3/urbxCCUAAhaseoS77t9RIR7ufVSD3xdDP/89aoA=
Subject key identifier: 20:1A:7B:E0:44:1E:6D:83:39:4E:66:E9:8E:8C:5A:C2:6C:CF:0A:CD
Certificate issuer: /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial: 5E691ADB5FEF6212DAD3F77E24E5F93A90A1D131
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34322e302f32332d3233203d3e203238313931.roa
Signing time: Wed 17 Apr 2024 11:42:32 +0000
ROA not before: Wed 17 Apr 2024 11:37:32 +0000
ROA not after: Wed 16 Apr 2025 11:42:32 +0000
asID: 28191
IP address blocks: 189.90.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:69:1a:db:5f:ef:62:12:da:d3:f7:7e:24:e5:f9:3a:90:a1:d1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Validity
Not Before: Apr 17 11:37:32 2024 GMT
Not After : Apr 16 11:42:32 2025 GMT
Subject: CN=201A7BE0441E6D83394E66E98E8C5AC26CCF0ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:46:1e:2a:33:f1:8e:de:51:b9:9f:4f:c9:
0b:b0:6c:6a:c7:5d:f9:92:8e:c4:61:4f:45:aa:71:
ae:1b:67:33:cc:c2:7d:11:12:51:c1:71:e9:20:81:
46:9f:54:28:89:f6:96:11:d9:1c:55:9c:1c:cb:ca:
e3:48:d8:24:35:15:8e:1c:5c:7b:66:6f:47:27:79:
79:85:5a:78:60:c1:73:7d:30:76:73:5e:42:00:85:
2a:31:74:80:88:21:52:f7:32:50:60:d4:b8:40:50:
dc:cf:70:87:d2:b2:39:ed:f6:19:8b:a2:cf:7c:56:
66:b9:27:69:6e:22:2a:05:a9:06:6b:33:03:3b:d3:
39:a7:75:dc:c1:dd:87:66:b7:d4:e4:f4:d2:40:72:
d2:ea:46:9a:c6:61:c8:a2:4f:f6:8d:0c:85:cc:04:
f1:22:e1:05:2a:8f:64:4c:47:27:e5:cb:6d:1c:ed:
bf:91:81:06:73:31:0a:09:7a:34:bc:da:c6:bc:56:
26:e7:7a:f1:fd:0d:30:67:1a:cd:ca:3a:5b:11:0f:
1b:6b:9a:0e:6e:5e:e9:1b:32:ed:70:ed:91:d2:af:
65:77:55:20:8b:92:78:58:b7:db:70:f0:f3:8e:8f:
b3:e0:b5:79:a7:52:c4:eb:bd:1e:19:71:ae:d1:c4:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1A:7B:E0:44:1E:6D:83:39:4E:66:E9:8E:8C:5A:C2:6C:CF:0A:CD
X509v3 Authority Key Identifier:
keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34322e302f32332d3233203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.42.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:a0:c1:ca:f9:40:51:e8:b0:70:23:a0:ee:0e:04:d9:f7:d9:
2f:fd:eb:34:f4:c1:73:b7:7f:3b:a6:18:b9:73:6a:31:f3:01:
8b:01:68:95:8c:fe:aa:61:20:cd:38:56:58:63:02:33:1f:e5:
40:ff:1f:6b:04:d9:e7:2b:8b:52:33:3e:c0:ac:9d:4d:0a:07:
90:7b:ef:1e:6b:3b:f7:0c:8e:fb:fb:d7:57:e0:37:f7:bf:74:
c3:78:f2:6e:c9:3a:25:2b:2f:ad:97:b5:bc:75:b7:2b:32:a4:
61:e4:73:16:12:84:f2:5d:c4:23:25:93:1b:b8:2c:8b:50:c7:
47:ec:66:9b:f6:3b:9e:83:2e:ac:c8:68:af:b3:a4:a8:ab:69:
e5:b6:b0:c3:a1:8a:57:ee:ea:e7:82:e9:2e:bf:0d:ba:04:4b:
d9:50:22:2f:10:48:49:23:e3:cc:c9:76:da:4a:ba:0b:53:4f:
32:b3:d9:22:b1:38:e5:ca:08:b3:dc:ef:38:95:97:fb:9f:9c:
28:81:eb:b2:e0:d2:47:38:b3:80:a6:cc:05:ce:e7:cc:82:5a:
1c:f6:c2:54:90:7c:8c:3b:77:5c:f3:4d:e3:95:64:c2:9a:c1:
a6:a8:5c:08:1a:0b:47:4b:d6:e2:98:8e:03:bd:2b:9d:84:80:
f6:42:e0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:12 2025 by rpki-client