Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138392e39302e3234302e302f32302d3234203d3e203238323031.roa
File: 3138392e39302e3234302e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier: D//DQw42szS0aZVYYJOBZxy82dG0v2TFUqkzU/mTRT4=
Subject key identifier: EE:1E:9D:A3:92:5F:97:54:57:D2:54:E2:4B:44:9A:43:16:2B:9F:C0
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 589569AE12219ED9296DFEDA81522A6E6C5186E0
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138392e39302e3234302e302f32302d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:29:09 +0000
ROA not before: Wed 10 Apr 2024 12:24:09 +0000
ROA not after: Wed 09 Apr 2025 12:29:09 +0000
asID: 28201
IP address blocks: 189.90.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:95:69:ae:12:21:9e:d9:29:6d:fe:da:81:52:2a:6e:6c:51:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:24:09 2024 GMT
Not After : Apr 9 12:29:09 2025 GMT
Subject: CN=EE1E9DA3925F975457D254E24B449A43162B9FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:c2:e9:7e:25:3a:1f:11:d9:c6:3b:86:7b:
92:94:74:ca:23:3b:5a:8a:d8:63:24:09:3c:8a:69:
19:5e:c4:ec:37:17:d4:85:75:fd:dd:69:73:ce:05:
95:65:a4:44:29:92:73:f4:5b:94:5e:45:dd:58:ca:
62:47:e7:11:7f:a3:4d:1d:cd:c4:ae:52:69:62:98:
db:ae:85:9c:13:ec:a6:bf:6c:a4:dc:e2:22:de:07:
f5:bc:16:cf:74:dc:f0:ef:7b:b4:88:a1:6b:7b:09:
e0:bb:8b:2e:e6:c6:5f:48:5b:65:8e:7e:f0:07:2c:
28:04:06:91:5b:c0:96:f3:53:8d:dd:85:29:1b:90:
87:68:bf:a7:fe:a6:38:c3:01:5b:f3:50:4b:74:ef:
0c:1b:c4:25:d6:57:79:d3:83:af:23:9d:60:19:39:
1f:d1:6c:a8:0d:d1:fd:10:76:b2:eb:6c:6a:80:10:
b2:a8:63:8e:83:c9:00:c4:b3:15:43:e9:07:32:d0:
35:91:c3:18:02:3a:fa:7b:45:ee:b8:9b:de:2c:22:
56:24:5e:e5:fa:87:30:bc:0e:3c:c9:ae:45:40:b0:
99:86:71:4f:e5:25:93:07:1e:17:c6:dc:76:56:ae:
b0:4e:2e:be:4a:29:d8:08:ca:19:b6:04:d8:3c:0b:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1E:9D:A3:92:5F:97:54:57:D2:54:E2:4B:44:9A:43:16:2B:9F:C0
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138392e39302e3234302e302f32302d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.240.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:d8:b0:79:1e:4a:aa:5e:e4:c2:b5:aa:f9:42:58:30:28:24:
a0:4a:62:63:c2:71:ac:21:af:e5:0f:11:e1:b6:fe:3f:03:8d:
3c:aa:3a:dd:0c:4b:7f:40:a6:18:09:54:8b:33:2e:4e:f1:a8:
66:52:5e:5f:30:bb:f2:50:b8:ee:c5:a7:47:29:4b:56:83:a2:
97:94:13:2e:66:38:0d:36:aa:eb:99:f7:de:5f:00:6a:ba:75:
62:b2:6b:2f:6f:46:a0:a6:74:43:5a:af:f8:f8:5b:7c:6f:44:
6c:d7:6f:d8:d9:d8:14:ad:e1:81:b0:65:4f:54:13:9e:3a:1e:
09:6a:48:9d:a3:16:7d:66:67:3e:c4:1f:75:5f:75:ba:a3:d7:
c2:ab:15:1e:f2:dc:5f:1f:6c:b7:e0:c2:31:3e:d5:3b:a5:8a:
3e:a4:d3:79:d7:9d:b0:a7:2f:4f:f6:48:58:b1:07:ff:47:b4:
69:c9:f5:93:9d:b1:e2:3e:98:2d:cc:34:30:ae:d6:df:5f:b3:
7c:3d:7a:54:68:25:3a:72:82:94:64:03:cd:e8:d6:5e:8e:b5:
0f:6d:8d:ca:97:df:e3:ec:8e:af:61:cc:7a:0b:71:75:d8:ce:
54:cb:41:3b:45:93:e7:81:21:90:0f:0f:27:5e:fc:49:7f:2c:
d0:57:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:40 2025 by rpki-client