Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e31332e302f32342d3234203d3e203238333036.roa
File: 3138392e33382e31332e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier: z+j2NEnCJgldIsEd3fvmsPadcAeZsbVy5unAW46wRWY=
Subject key identifier: A8:98:72:56:5C:EA:17:84:9B:14:61:56:43:12:BC:CE:B1:B9:10:5C
Certificate issuer: /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial: 1D9DA0087588CDA2BA22D2609B6335F873547437
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e31332e302f32342d3234203d3e203238333036.roa
Signing time: Tue 25 Jun 2024 15:21:11 +0000
ROA not before: Tue 25 Jun 2024 15:16:11 +0000
ROA not after: Tue 24 Jun 2025 15:21:11 +0000
asID: 28306
IP address blocks: 189.38.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9d:a0:08:75:88:cd:a2:ba:22:d2:60:9b:63:35:f8:73:54:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Validity
Not Before: Jun 25 15:16:11 2024 GMT
Not After : Jun 24 15:21:11 2025 GMT
Subject: CN=A89872565CEA17849B1461564312BCCEB1B9105C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:e6:16:ae:6d:59:60:44:a4:90:8e:61:a3:
d8:56:01:16:ee:73:3d:8a:ee:e1:3e:c5:67:b5:86:
f5:98:b4:bd:a1:8f:14:6a:ca:06:95:91:12:7c:5b:
41:16:5e:a5:b2:05:df:ad:af:94:2b:e6:e2:aa:00:
44:b3:80:89:c3:df:0b:83:12:6d:f4:2f:8b:f0:22:
4c:ba:72:c0:c2:11:a1:3a:52:67:29:e3:b3:c2:dd:
20:4f:11:ca:56:b9:41:4a:02:14:73:a2:d0:5b:8b:
aa:d9:b4:6c:98:28:b3:77:e6:cc:18:8e:c8:54:11:
5b:73:93:e5:ff:e6:c7:d2:9a:ed:ab:fe:ce:f6:ff:
14:d1:d7:78:76:be:d2:99:da:c7:12:e3:0f:9a:c4:
0e:a6:c8:9b:40:90:cd:94:45:9c:f5:5c:94:d3:e0:
6c:7a:a2:d1:80:1b:74:e6:6a:37:b6:15:c7:76:1e:
e7:83:c8:98:18:c4:f5:39:7d:40:a6:b2:02:b2:bc:
a5:4c:9c:af:e7:17:45:fa:94:ff:9e:30:ee:81:12:
9d:93:1c:e4:bb:9e:df:74:56:e3:b9:f0:82:72:d8:
56:dd:da:08:9a:2e:f9:76:17:78:33:14:0c:55:40:
6a:9b:ee:32:d2:4f:d4:f4:51:2b:ec:25:0b:aa:c5:
05:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:98:72:56:5C:EA:17:84:9B:14:61:56:43:12:BC:CE:B1:B9:10:5C
X509v3 Authority Key Identifier:
keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e31332e302f32342d3234203d3e203238333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.38.13.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6f:07:44:d7:c2:6c:ac:e8:89:4d:b1:d3:38:d9:15:87:a1:
7c:96:44:ea:0a:1d:dc:15:38:86:a2:4f:2b:61:13:a0:c1:fc:
74:80:28:70:13:f1:bf:13:a7:6e:b3:1d:f1:b6:d0:d9:4f:b5:
5a:a4:a8:78:d8:d1:5b:1b:db:69:4c:52:1a:ed:74:fb:77:92:
0d:c2:b1:55:cd:27:3f:e1:1c:a2:46:83:13:ab:ca:55:51:0b:
e2:e5:05:86:ec:4b:e9:87:46:cc:d2:b5:e6:0b:ff:04:8a:b6:
b6:46:62:d6:34:81:98:48:91:ca:40:37:7e:71:99:18:3f:6f:
e9:cf:f1:d5:06:6c:e9:3a:54:02:f0:41:a0:c6:ee:3d:65:0f:
72:0c:81:c7:f8:48:cb:09:2e:9c:e4:45:f4:86:c5:bb:64:23:
70:88:5c:e4:97:6a:58:e1:6e:78:6c:5a:3e:40:dc:c0:1b:9b:
5a:28:7c:1f:05:c9:60:3c:d6:55:58:91:d9:75:3a:6d:c1:66:
88:df:f3:3a:4c:12:e3:13:c0:87:48:b3:f6:d4:81:71:5b:95:
3f:4e:e9:7a:47:05:86:9e:cc:7e:5a:49:f7:96:22:43:cd:7c:
ad:0f:00:73:d2:8e:65:c2:22:dd:28:b8:f5:4d:a0:68:8f:81:
e5:88:76:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:05 2025 by rpki-client