Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34342e302f32322d3232203d3e203238313931.roa
File: 3138392e39302e34342e302f32322d3232203d3e203238313931.roa (raw, json)
Hash identifier: SXM7sOdH05YmAPMOyZ9026zrEBjrnneKLKh3Y9b1Hpk=
Subject key identifier: CB:30:50:79:51:D5:83:99:1C:BE:28:4F:B0:AC:34:35:B6:2E:D1:C5
Certificate issuer: /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial: 1433135032D91B57126B4D49D6938F134A085817
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34342e302f32322d3232203d3e203238313931.roa
Signing time: Wed 17 Apr 2024 11:42:34 +0000
ROA not before: Wed 17 Apr 2024 11:37:34 +0000
ROA not after: Wed 16 Apr 2025 11:42:34 +0000
asID: 28191
IP address blocks: 189.90.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:33:13:50:32:d9:1b:57:12:6b:4d:49:d6:93:8f:13:4a:08:58:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Validity
Not Before: Apr 17 11:37:34 2024 GMT
Not After : Apr 16 11:42:34 2025 GMT
Subject: CN=CB30507951D583991CBE284FB0AC3435B62ED1C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:0c:24:17:b9:2c:01:2d:71:6a:a4:49:aa:
7d:37:82:29:d1:27:f6:43:53:e6:81:4a:7d:7e:81:
93:f9:1c:9a:15:02:8f:2c:e3:99:91:ac:60:a8:6c:
f0:4e:27:76:f9:63:06:20:e2:04:57:b0:54:2b:65:
1c:7e:24:0e:78:40:b8:b5:10:68:5e:90:ab:37:d4:
06:ee:89:80:83:5e:6c:11:dd:10:6f:2c:79:fa:66:
80:cc:96:c9:d4:07:5a:54:27:eb:9b:99:64:4d:e5:
81:00:b1:62:7a:3c:11:cb:96:6f:39:26:31:1d:d1:
b1:1d:73:3b:e5:2e:87:7d:b0:cb:8b:41:0b:91:fc:
19:f5:86:b0:05:c5:cb:d1:f9:2c:f6:72:6e:09:46:
82:1d:ab:b2:30:5a:a3:fa:46:c0:c1:0c:38:01:38:
73:f0:6e:57:d4:61:d2:d5:80:8b:8c:eb:8d:0a:93:
65:27:ae:77:a4:22:d3:dd:0f:cc:71:b3:63:82:58:
0a:90:99:a3:93:74:d4:4d:61:00:37:88:00:77:53:
3e:7d:19:65:98:21:ee:f0:ab:05:1d:db:ad:c9:99:
65:15:1d:d0:3a:1d:43:6c:8e:bc:0b:90:52:af:aa:
80:0e:6e:c7:ab:a8:29:c6:4c:2b:34:74:9b:62:cc:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:30:50:79:51:D5:83:99:1C:BE:28:4F:B0:AC:34:35:B6:2E:D1:C5
X509v3 Authority Key Identifier:
keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34342e302f32322d3232203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.44.0/22
Signature Algorithm: sha256WithRSAEncryption
37:fc:9b:a5:bc:29:9a:f7:b2:08:0c:c0:76:be:2a:c6:fd:8b:
d9:de:0d:41:1b:2f:9f:76:19:12:6f:bd:2e:7a:b9:f0:93:5e:
5d:36:8d:0a:7b:8c:e7:07:e0:b7:2c:10:1b:fb:cb:a5:66:d1:
b5:59:11:55:f0:5e:26:43:5e:f8:ea:bf:cc:04:7b:5f:33:6e:
2c:9e:17:c4:23:3a:d1:a2:42:89:ae:91:26:ce:ef:f0:28:3d:
ac:b1:ef:b7:f1:d4:2b:df:34:2d:da:e0:56:ec:df:68:42:81:
e8:4a:54:47:7d:a0:c0:4f:03:99:a3:fb:37:20:18:19:f6:8c:
dd:a4:f4:d0:a1:c1:7e:1d:65:8b:80:8d:47:23:da:f5:c3:fa:
d4:23:43:c1:ef:3b:72:35:3d:f3:d6:80:d7:ad:39:aa:53:59:
89:66:d7:0d:c0:d8:bf:cb:f9:ee:4a:39:ed:c1:24:22:a5:58:
6b:10:00:7d:51:21:ba:3f:d8:92:73:f1:44:f9:e5:91:d3:14:
8b:9d:de:83:a6:22:b7:93:79:65:e8:73:e8:2d:6a:ee:95:9b:
07:9b:ae:b6:ef:c8:ca:60:7a:90:26:f2:59:19:1e:c5:c4:87:
04:74:3e:19:59:9f:6b:1f:c3:6f:df:84:50:83:22:55:92:b2:
77:47:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:19:14 2025 by rpki-client