Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33362e302f32342d3234203d3e203238313931.roa
File: 3138392e39302e33362e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier: EQ5fbAs/3Z9VWnUYZI3t5sdGo5Yx0nbSqfl0Pgl5syQ=
Subject key identifier: 0A:AE:56:8F:09:EF:9B:AF:E8:60:AB:9C:E8:DB:45:C2:99:A8:4D:7E
Certificate issuer: /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial: 02C5C39006FF221698C7A6E861534F0CE7F7F747
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33362e302f32342d3234203d3e203238313931.roa
Signing time: Thu 04 Apr 2024 20:13:59 +0000
ROA not before: Thu 04 Apr 2024 20:08:59 +0000
ROA not after: Thu 03 Apr 2025 20:13:59 +0000
asID: 28191
IP address blocks: 189.90.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c5:c3:90:06:ff:22:16:98:c7:a6:e8:61:53:4f:0c:e7:f7:f7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Validity
Not Before: Apr 4 20:08:59 2024 GMT
Not After : Apr 3 20:13:59 2025 GMT
Subject: CN=0AAE568F09EF9BAFE860AB9CE8DB45C299A84D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:e5:19:0f:97:d7:ec:d5:94:90:f6:d4:49:
74:fd:b3:81:80:c2:34:25:75:a7:2a:8e:f4:e1:2d:
a5:f5:56:60:ab:d8:5c:06:8b:4e:08:73:9d:56:52:
78:18:f6:31:69:8a:4d:83:a6:56:c7:0b:ec:35:74:
4b:bd:05:7d:f3:fe:76:28:44:c4:a4:c3:00:a7:5a:
f1:89:4f:9a:89:47:db:d5:78:40:df:f0:49:c8:37:
80:12:a7:9b:07:a5:e2:31:24:3d:31:d0:57:63:4a:
30:3c:2c:ad:fd:a4:2c:f0:ca:e5:57:7c:39:e2:87:
b0:85:89:dc:9b:43:02:7b:7a:87:24:dd:4b:e7:13:
bc:f8:45:97:a1:f1:ab:e9:35:08:77:ea:46:24:c0:
71:71:6f:66:5e:87:b9:e2:72:6d:13:39:e8:63:fa:
f2:5f:91:b3:11:d0:be:87:f7:a2:cd:7a:d8:12:9c:
29:91:12:54:97:9d:97:c6:86:88:24:16:ff:c5:c4:
76:57:f6:64:ae:2c:bb:38:7c:37:15:ad:9c:e6:7c:
08:e2:5a:bc:89:0f:7a:3f:93:2d:fa:66:e6:51:80:
22:3e:79:21:33:53:14:ff:28:7d:71:56:ca:9b:e1:
81:ee:3a:1e:d2:a1:5e:a7:8f:b5:25:a0:61:71:70:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AE:56:8F:09:EF:9B:AF:E8:60:AB:9C:E8:DB:45:C2:99:A8:4D:7E
X509v3 Authority Key Identifier:
keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33362e302f32342d3234203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ac:28:3a:d0:bf:e6:25:d7:f5:eb:09:13:86:c2:75:6f:1a:
64:b4:d4:c6:88:d8:4e:63:0a:d7:c8:5b:24:59:75:60:2f:4f:
c7:15:5c:77:1c:f1:93:c0:f6:d3:97:4a:31:e8:04:3e:4f:09:
a5:e1:35:77:6d:43:66:a0:f3:da:8b:51:38:34:0a:3b:18:b1:
d3:55:e1:b1:e7:69:67:8e:90:d0:97:47:47:0f:12:05:45:43:
0e:03:f7:ba:46:1a:da:47:bb:7c:c4:ee:45:45:d5:96:8c:ff:
c0:3c:f9:8b:4e:a6:f0:d2:9c:28:2a:8f:8b:55:3a:56:af:1a:
69:d1:cd:e1:20:53:83:d9:83:19:9c:53:2e:da:45:2e:90:16:
30:7a:96:6b:f7:68:12:51:2e:01:f9:da:7c:6e:5b:bf:21:ea:
46:3a:09:31:53:7c:46:6f:5d:be:13:70:32:26:78:1e:53:d7:
71:ae:87:1f:41:fb:da:f0:65:b9:de:4e:4a:60:07:ea:ad:1c:
94:50:d1:dc:0b:25:ab:af:e6:55:14:3d:42:0a:48:3e:52:b3:
1b:9e:70:8d:c7:e9:38:80:64:1c:1d:bd:e3:e7:76:b4:97:a1:
4a:8a:74:2b:e0:54:da:9d:13:54:c6:ca:a4:4e:f8:1f:bc:77:
36:f7:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org