Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33362e302f32322d3232203d3e203238313931.roa
File: 3138392e39302e33362e302f32322d3232203d3e203238313931.roa (raw, json)
Hash identifier: CSOMNSTdfrc8F/7EE1kPWbW/ARFQRS7fLElReid1wQ0=
Subject key identifier: 14:7B:A6:1E:6B:A7:37:79:6F:8F:AC:3D:25:14:BE:C8:A8:D2:14:01
Certificate issuer: /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial: 2C2F977FC5BA81814075D47FBE30AD3A3DA3B9E3
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33362e302f32322d3232203d3e203238313931.roa
Signing time: Thu 04 Apr 2024 20:13:56 +0000
ROA not before: Thu 04 Apr 2024 20:08:56 +0000
ROA not after: Thu 03 Apr 2025 20:13:56 +0000
asID: 28191
IP address blocks: 189.90.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:2f:97:7f:c5:ba:81:81:40:75:d4:7f:be:30:ad:3a:3d:a3:b9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Validity
Not Before: Apr 4 20:08:56 2024 GMT
Not After : Apr 3 20:13:56 2025 GMT
Subject: CN=147BA61E6BA737796F8FAC3D2514BEC8A8D21401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:06:29:f6:0a:25:02:24:31:bf:df:f2:91:
b4:8b:67:e0:f8:fa:0f:60:bb:e8:1a:95:63:32:e6:
c2:65:68:5d:cc:9c:e6:16:ed:a3:42:8b:76:72:93:
3d:58:aa:a4:8c:dc:4c:3a:55:77:54:55:8a:20:5f:
b0:b6:df:ce:7d:d1:3c:c6:2f:dc:ba:3d:ee:c0:d7:
2f:19:74:56:db:14:7f:fd:88:c3:57:e6:c4:48:22:
aa:28:5b:ce:db:fd:40:49:34:7a:31:50:54:44:56:
74:94:2e:f8:1b:75:e8:94:5f:f1:ec:71:f0:24:ae:
b0:ef:7e:e5:b1:33:a9:2a:ab:a4:99:30:f3:97:1a:
b4:50:06:5c:d0:f2:54:26:e5:56:fe:b7:aa:b3:98:
d9:d8:f3:47:07:6e:6d:62:e8:40:42:cd:b3:bb:44:
bc:72:27:cf:8f:8f:d3:48:66:7d:7a:c0:bc:1c:55:
61:fd:85:80:a9:8f:6e:67:34:f5:17:b9:fc:0e:38:
75:ed:96:79:d8:fa:ba:fe:c8:4e:50:18:b5:b9:b9:
e4:09:8e:2f:93:b3:2a:76:48:19:ce:82:96:90:e4:
93:c5:6d:c8:82:7d:54:b4:c1:32:1e:26:1f:63:b9:
b5:9a:05:5a:c0:a2:bd:e0:27:4d:7a:44:83:cf:58:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7B:A6:1E:6B:A7:37:79:6F:8F:AC:3D:25:14:BE:C8:A8:D2:14:01
X509v3 Authority Key Identifier:
keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33362e302f32322d3232203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.36.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:62:2b:69:a2:55:bc:26:01:a0:9a:5a:9e:cd:e2:da:67:bf:
0d:b5:45:a9:9e:84:a4:b1:7e:7d:d2:a9:a1:9d:8f:5e:3e:63:
bb:77:92:d3:bb:24:71:28:c1:46:93:93:e1:c3:d8:d6:f8:b8:
aa:2a:09:5e:ab:bd:14:92:95:b7:31:ba:32:90:ba:af:89:98:
db:dc:a8:46:49:a9:3c:4b:9a:8a:1a:95:01:76:6a:f7:d8:5c:
06:75:03:9e:b5:c8:e9:05:19:bd:30:df:3d:42:6b:74:f9:e9:
c0:be:d4:de:25:27:a1:e6:30:57:4e:8b:ab:73:78:df:04:e3:
c3:05:96:52:32:68:fe:db:5a:02:6e:00:d4:36:4b:39:ab:7e:
29:4c:23:a9:de:49:67:ed:62:ee:be:0d:2f:9d:a0:c5:f1:a2:
c5:52:2f:92:ae:b6:d9:b7:95:b3:cd:7a:51:e9:f2:e3:e2:d0:
ce:04:54:da:d1:e3:48:1a:01:54:36:06:98:2e:0a:87:67:15:
dd:70:43:7f:18:22:f2:83:cf:d4:e4:21:92:99:ac:51:12:f0:
47:4f:ba:6c:e1:e3:45:93:3f:ca:8e:c8:e3:a2:1f:c9:db:07:
3a:49:aa:73:b8:c6:cb:a2:4d:86:66:1d:e9:f1:3a:94:8b:b4:
f9:31:9e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org