Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137392e3138392e39362e302f32302d3234203d3e203238323031.roa
File: 3137392e3138392e39362e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier: aYksXUy9ervq0HUgzyknzLNfzZY+3NLF7VcR9qKCCVI=
Subject key identifier: A4:96:0F:F5:54:1E:5B:46:5B:6F:E6:A8:56:4E:F4:00:C9:B9:B6:2E
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 111142E4744AB61AC2A50944132E85FE7E3500B2
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137392e3138392e39362e302f32302d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:32:04 +0000
ROA not before: Wed 10 Apr 2024 12:27:04 +0000
ROA not after: Wed 09 Apr 2025 12:32:04 +0000
asID: 28201
IP address blocks: 179.189.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:11:42:e4:74:4a:b6:1a:c2:a5:09:44:13:2e:85:fe:7e:35:00:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:27:04 2024 GMT
Not After : Apr 9 12:32:04 2025 GMT
Subject: CN=A4960FF5541E5B465B6FE6A8564EF400C9B9B62E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:3e:90:e1:c1:83:4a:98:34:0c:80:f5:8b:
a6:8a:62:c2:5b:e2:7c:1f:5a:b7:c3:8b:5b:15:c8:
20:80:f1:1d:47:e1:22:50:96:7e:39:d2:b4:91:57:
bf:0e:59:aa:9c:fe:23:67:70:9d:8d:60:f0:5a:5a:
29:59:17:0d:08:4f:80:22:b7:a1:c5:34:14:99:c0:
17:e8:d7:da:f4:a1:04:90:57:dd:c0:ef:2a:f6:6e:
d9:6b:9f:5c:4b:9e:76:f5:34:09:0d:5d:65:b1:d5:
e9:b5:d6:ec:98:bd:01:3b:a6:5a:f3:d3:0d:3d:c8:
65:3a:43:33:ae:ed:e9:a4:37:9f:9c:21:62:67:de:
57:1b:f3:c2:7b:6e:e0:59:38:71:14:bd:3c:73:b1:
ea:85:dd:fa:2e:45:d6:fa:5c:7b:37:40:b5:cf:54:
22:db:bb:f1:ab:2c:ee:63:ed:72:68:3c:c2:c7:f1:
6d:92:f7:fd:51:a5:a1:32:31:2c:89:4e:c1:f7:6f:
7a:3a:32:5f:37:d0:a9:cb:36:f4:3d:a4:a8:e7:68:
50:63:ae:c8:40:a8:ba:e4:7d:8d:12:aa:50:b9:29:
92:68:71:70:d5:35:2b:51:8d:ad:29:f1:7a:a7:83:
7e:96:8c:22:66:e7:d4:75:6d:bf:cc:04:a5:7f:b2:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:96:0F:F5:54:1E:5B:46:5B:6F:E6:A8:56:4E:F4:00:C9:B9:B6:2E
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137392e3138392e39362e302f32302d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.189.96.0/20
Signature Algorithm: sha256WithRSAEncryption
87:b4:e2:d0:5d:c2:27:21:46:db:08:5a:ae:91:0d:3a:e8:41:
e6:f0:3b:12:31:d4:93:a2:28:b9:02:96:b4:c2:d6:30:d7:45:
b7:fd:e2:56:4f:6e:26:f0:5f:77:87:a6:29:b6:b5:d2:0d:77:
04:46:13:15:21:b6:37:56:87:c5:b9:d2:cd:07:c1:c5:2b:5f:
41:36:b2:0b:93:83:b3:1c:77:06:4d:e4:c6:f2:c2:5c:e1:ca:
5e:d4:3f:f7:0c:f1:46:4e:57:c5:9e:9b:c1:79:36:e0:29:ff:
ab:3a:13:fd:32:f7:be:08:83:dd:6f:6f:3e:64:3e:c9:47:d3:
71:96:7b:d5:f4:7c:4f:53:88:48:bf:50:bc:49:07:0a:c2:56:
f8:98:48:62:42:60:e2:6e:b0:af:e2:a4:d8:97:24:3b:6e:b9:
56:74:69:dc:ee:2d:39:47:2f:53:5f:6d:36:81:1b:f3:1c:f3:
cc:b7:11:0d:6f:77:d0:f5:36:17:de:8e:49:69:b2:7c:57:fa:
0d:ab:88:e2:53:a5:6e:83:63:80:4f:8e:35:9f:24:c9:c0:2b:
16:7d:b1:88:86:6a:7d:09:23:d4:04:94:03:d8:cc:c2:03:88:
fd:c1:5b:a6:e2:44:f2:9e:e4:cf:33:f0:b5:38:82:01:f7:e4:
60:4c:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:33 2025 by rpki-client