Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34322e302f32332d3233203d3e203238313931.roa
File: 3138392e39302e34322e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier: OoJ99kjvbF7NZSE0w9pNq0lTRJ+H0VlGv4T5x+bZnws=
Subject key identifier: 84:DD:35:54:62:9C:9F:09:8C:DF:D1:98:6C:4C:FF:6E:87:4A:87:81
Certificate issuer: /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial: 168BA481BA37DD98CA1E52582BB12B27BD3871E8
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34322e302f32332d3233203d3e203238313931.roa
Signing time: Thu 04 Apr 2024 20:13:55 +0000
ROA not before: Thu 04 Apr 2024 20:08:55 +0000
ROA not after: Thu 03 Apr 2025 20:13:55 +0000
asID: 28191
IP address blocks: 189.90.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8b:a4:81:ba:37:dd:98:ca:1e:52:58:2b:b1:2b:27:bd:38:71:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Validity
Not Before: Apr 4 20:08:55 2024 GMT
Not After : Apr 3 20:13:55 2025 GMT
Subject: CN=84DD3554629C9F098CDFD1986C4CFF6E874A8781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:5e:3e:92:08:b9:34:6b:6d:a2:cb:0c:36:
ee:d8:0a:40:b0:99:e6:a8:e1:2d:f8:8d:00:8e:6b:
f5:89:a0:58:ed:ca:c0:96:94:c2:5a:33:8a:c3:2c:
6d:82:5a:30:6c:c5:a2:fd:61:22:4b:53:64:82:12:
96:27:6b:7e:ff:6b:0c:23:46:64:cc:b7:68:62:84:
c2:bc:0d:14:50:fd:34:c2:dd:5a:66:be:12:c0:3b:
87:69:a8:e1:46:5c:29:4e:5a:b3:c2:ab:ea:b2:14:
36:20:77:e5:13:8e:33:72:a7:8d:69:4b:2d:db:0d:
2c:39:48:17:28:2d:8e:ff:73:71:2e:cb:93:9e:e0:
6f:01:e8:84:95:9e:b2:4f:c6:4c:fe:c2:74:d1:38:
7f:1d:da:0f:6c:d8:93:22:13:59:66:27:a6:e4:f6:
07:6b:a5:4f:c7:f2:02:20:9a:f3:07:82:7e:52:63:
3a:54:e2:63:f4:fd:8a:c6:2e:4a:8b:1d:ef:da:fa:
0a:0a:c8:3b:f4:e3:98:7b:b4:26:3c:7a:44:41:81:
31:a6:69:f6:d8:09:05:4f:ab:1e:91:ec:9f:49:9d:
f4:e2:04:ff:95:4b:fb:d3:bc:29:27:38:56:50:45:
c4:5e:1e:af:ce:0b:57:34:b1:a2:ba:cd:a0:b5:9a:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DD:35:54:62:9C:9F:09:8C:DF:D1:98:6C:4C:FF:6E:87:4A:87:81
X509v3 Authority Key Identifier:
keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34322e302f32332d3233203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.42.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:a0:ef:22:6e:25:2f:92:5e:96:14:8f:c4:8c:78:21:44:7f:
1f:f1:0f:20:a0:85:ac:7b:a2:e2:5b:33:28:96:13:1c:cd:d9:
7e:78:f0:94:86:9d:e9:ef:56:11:cc:fe:e7:f7:ea:5c:1a:95:
c2:2a:05:b5:d7:f7:4f:f5:18:ef:3a:4f:26:2d:dc:e6:74:1d:
fd:00:f2:8b:17:c4:90:e1:98:b1:4c:7d:6c:96:56:43:c8:bf:
62:68:2b:ef:e8:80:67:d4:b6:2e:88:cc:13:72:65:37:3a:45:
e5:5e:0d:6c:49:ff:b8:e5:06:16:70:4e:6d:95:6d:df:ae:98:
18:04:96:8f:1e:5d:9e:0c:ca:63:20:52:8c:b5:6e:c9:17:1c:
12:00:3b:14:f5:92:17:b1:e1:16:bf:83:38:34:51:1c:d5:d1:
0f:30:99:3e:b4:4d:96:d7:6c:16:a6:bc:ef:9c:4c:9a:65:d7:
33:68:14:7d:b9:61:35:4e:78:df:8c:12:e7:ce:41:f0:25:73:
d9:57:af:5a:ae:c9:59:f1:17:36:60:3b:40:b1:a9:76:cc:43:
f1:b8:27:04:2f:29:d6:7d:fb:21:6e:ea:17:d3:c1:fa:5c:3e:
d8:ff:51:0f:c4:33:74:49:66:d2:0b:4d:0d:a4:a8:14:c4:98:
9c:24:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org