Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138392e382e38302e302f32302d3234203d3e203238363639.roa
File: 3138392e382e38302e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier: 4LRrI3qzBa7aekZax7CMY/eYifhaTihPLvfCPk6BHNY=
Subject key identifier: 8C:63:B6:DC:8C:8A:2E:C1:80:1C:55:D1:97:0A:FE:A9:83:A4:9E:43
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 59FBD7E2FB3C6E4BFC4166441927DD0FFAA8AFA3
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138392e382e38302e302f32302d3234203d3e203238363639.roa
Signing time: Tue 23 Jul 2024 11:38:45 +0000
ROA not before: Tue 23 Jul 2024 11:33:45 +0000
ROA not after: Tue 22 Jul 2025 11:38:45 +0000
asID: 28669
IP address blocks: 189.8.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fb:d7:e2:fb:3c:6e:4b:fc:41:66:44:19:27:dd:0f:fa:a8:af:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Jul 23 11:33:45 2024 GMT
Not After : Jul 22 11:38:45 2025 GMT
Subject: CN=8C63B6DC8C8A2EC1801C55D1970AFEA983A49E43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:88:4c:07:1a:0c:8c:99:e5:58:bc:d5:6a:f7:
0d:fe:9e:82:0c:dd:00:7d:5a:ae:50:1d:80:77:fd:
b0:0c:00:ff:6c:21:5f:59:47:45:b7:ce:a0:c2:38:
9b:4d:3f:e8:41:c7:8c:bc:39:23:22:6a:4d:5b:87:
35:67:b3:ef:e1:b4:a6:35:be:66:19:57:6c:6c:f9:
d8:27:9a:a6:b8:a0:b3:d7:9a:d3:2b:57:4d:1b:a1:
30:f2:f0:32:11:c3:0f:2e:07:e0:37:bb:07:a1:fe:
4c:d8:e1:7b:df:c1:6b:fd:9c:6e:96:35:5b:f9:b2:
99:29:9a:63:4d:f6:d7:4c:8f:5a:a1:b6:c5:b7:78:
2f:41:a5:a2:57:83:4d:a8:4d:39:a1:83:03:c8:2d:
46:68:be:76:97:9a:68:ef:e5:e7:03:fb:67:04:86:
14:6a:99:76:79:3a:89:11:56:b6:09:49:49:a9:9f:
d0:56:a4:20:9b:1c:e8:64:75:1f:89:b6:16:10:55:
96:c1:b8:1a:7f:b5:47:d1:91:ba:a5:9c:a0:13:35:
1e:41:ee:67:c1:86:1c:5f:59:0d:3b:07:f5:da:eb:
db:9c:10:ae:e8:aa:39:bb:71:c7:6a:4b:34:ae:a4:
20:84:c2:ef:7e:64:7c:16:f8:b2:bc:eb:a6:c3:b5:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:63:B6:DC:8C:8A:2E:C1:80:1C:55:D1:97:0A:FE:A9:83:A4:9E:43
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138392e382e38302e302f32302d3234203d3e203238363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.8.80.0/20
Signature Algorithm: sha256WithRSAEncryption
27:4c:01:23:a1:00:be:82:2c:fc:ab:9f:69:36:c1:78:05:7d:
63:1f:bc:1e:ad:3d:86:aa:97:3f:c4:72:eb:fd:23:d3:40:db:
f2:b8:1c:64:02:7a:38:de:c9:6e:17:17:a0:80:58:9e:39:b3:
f1:d9:64:25:d9:81:dc:72:08:9f:b5:63:7a:22:85:19:8c:a5:
31:d3:e2:ee:27:db:bf:21:be:b1:2b:5f:2c:4e:0f:1a:e2:49:
85:ad:45:e2:61:2b:b5:2c:8d:25:15:ef:f0:04:0b:b0:b8:c4:
8b:d4:24:dd:03:93:61:21:ad:2e:50:12:e4:03:23:e3:40:49:
39:71:22:1b:15:6e:09:a4:fe:bb:2e:3d:7d:5c:c5:b8:9c:df:
a6:56:ae:cf:43:c4:fa:30:37:75:d1:ec:b3:25:98:59:42:80:
a1:02:56:61:db:fa:5e:a9:12:38:30:e1:2f:32:4c:0b:62:8d:
65:e3:fb:43:c9:b9:ed:fd:8e:7f:b7:e5:04:d9:1b:5a:84:2e:
1d:f4:46:de:66:22:6b:04:31:de:f3:6a:69:4b:b7:68:3f:be:
e1:a8:ba:58:31:b6:08:8a:4c:df:a5:98:e1:d2:3f:40:f5:32:
61:91:c0:1f:18:0c:bc:ca:e9:1b:1d:19:0e:9f:ff:d6:51:0e:
5e:f6:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:04:02 2025 by rpki-client