Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36342e302f32302d3230203d3e203238323235.roa
File: 3138392e3132362e36342e302f32302d3230203d3e203238323235.roa (raw, json)
Hash identifier: 8BNft/htlmO2ZIw+mQvuOPy5187G/s4OggF5UJ+vAoo=
Subject key identifier: 8E:A8:DF:3F:05:F9:1E:A3:B4:FE:0F:7A:41:AF:45:BB:B1:6A:1B:5E
Certificate issuer: /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial: 759E255FB6EA226E16F662AA4AC428A06DA8F8B0
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36342e302f32302d3230203d3e203238323235.roa
Signing time: Tue 09 Jan 2024 12:56:18 +0000
ROA not before: Tue 09 Jan 2024 12:51:18 +0000
ROA not after: Tue 07 Jan 2025 12:56:18 +0000
asID: 28225
IP address blocks: 189.126.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:9e:25:5f:b6:ea:22:6e:16:f6:62:aa:4a:c4:28:a0:6d:a8:f8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
Validity
Not Before: Jan 9 12:51:18 2024 GMT
Not After : Jan 7 12:56:18 2025 GMT
Subject: CN=8EA8DF3F05F91EA3B4FE0F7A41AF45BBB16A1B5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a2:64:7c:71:29:c8:8b:5b:f9:ca:7c:4b:1b:
67:02:7b:e3:53:ab:57:1a:c4:64:7f:e6:7b:1f:7b:
ea:bc:21:af:7c:73:b6:79:c4:e2:97:87:3c:b1:d3:
0a:07:33:35:02:76:b5:78:5d:08:95:98:50:aa:16:
a6:9f:e3:db:34:8d:c1:b3:5e:00:2e:d4:2b:20:0e:
13:65:07:7e:b6:77:ca:12:cb:d8:f0:d8:24:23:f2:
1d:d2:e0:ec:44:99:90:68:d3:d0:19:e3:7f:21:f5:
73:01:06:c8:f7:9f:51:47:10:16:28:07:b8:17:88:
0e:ef:b8:2e:a3:96:bb:98:dd:7b:3d:f8:0d:78:f1:
df:13:55:6d:8c:51:d8:2f:48:03:71:de:d2:e6:9f:
1a:c1:9d:9f:12:40:72:91:48:72:3b:dd:f7:e7:3c:
32:30:ce:04:9b:3e:cd:09:d5:00:44:6f:c0:bb:89:
89:02:4a:78:47:44:63:2b:bc:eb:56:6c:97:4c:d7:
d3:f3:75:77:0e:a6:0e:28:8e:f2:64:30:eb:a9:21:
32:2c:14:34:0c:02:79:64:6a:22:ff:c0:e1:56:47:
a5:f4:fa:14:92:c5:10:59:e6:86:4c:1e:66:65:28:
fa:ac:4d:d5:be:2a:44:58:78:9d:3e:ec:20:37:c7:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A8:DF:3F:05:F9:1E:A3:B4:FE:0F:7A:41:AF:45:BB:B1:6A:1B:5E
X509v3 Authority Key Identifier:
keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36342e302f32302d3230203d3e203238323235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.64.0/20
Signature Algorithm: sha256WithRSAEncryption
57:6b:93:86:3b:6e:8b:c3:17:69:e3:88:f5:62:13:e5:96:84:
57:43:bc:d7:af:ca:89:e0:d4:e7:a6:24:c2:60:45:67:09:4e:
6f:15:50:a5:6c:30:90:be:5b:a5:49:2c:af:3f:ad:df:e7:96:
c6:cd:d9:dc:39:00:c6:55:26:bb:bb:4b:e8:0d:49:ed:e5:ef:
f9:eb:a1:0e:fa:05:8a:7f:30:4b:57:07:a2:de:87:d7:1e:e3:
19:9c:6b:d7:36:0f:2d:6b:3c:49:67:d3:87:9f:5e:87:76:1c:
ad:59:ce:b0:4c:1d:9f:e5:6b:a4:af:1a:b9:81:01:8f:16:23:
89:67:3f:d4:da:89:54:7d:6c:ef:e5:90:45:19:a6:ec:f7:33:
d4:d2:1c:06:7e:c4:35:0f:46:86:77:cc:f9:a3:ef:ac:87:ff:
d5:a6:a0:f4:b6:f2:b9:74:a5:26:30:b0:ca:73:7b:b9:52:f1:
2b:11:5a:6d:cb:49:c2:60:2f:a0:2a:99:9d:7e:59:ed:44:01:
0f:8b:7d:4f:bf:96:e0:0a:60:cf:e4:02:a0:a6:cb:94:d5:bd:
11:03:93:c2:4f:ff:c7:36:d9:00:02:2d:3c:64:d8:09:13:20:
9b:a3:5e:7a:53:80:3b:a5:4e:f7:99:b8:44:9c:56:7e:a5:19:
f3:ea:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org