Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36342e302f32342d3234203d3e203238323235.roa
File: 3138392e3132362e36342e302f32342d3234203d3e203238323235.roa (raw, json)
Hash identifier: /so9wr6vDQzDJqS4HcXr9GzEiXOb6+Bx49OuvVNXQgs=
Subject key identifier: 48:28:5C:49:5A:18:F7:C3:30:48:34:BA:27:2E:75:FD:BC:A9:82:4C
Certificate issuer: /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial: 3A32BC97681D4E10E26B269F77C7DE8F3C3EBEF0
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36342e302f32342d3234203d3e203238323235.roa
Signing time: Tue 09 Jan 2024 12:56:20 +0000
ROA not before: Tue 09 Jan 2024 12:51:20 +0000
ROA not after: Tue 07 Jan 2025 12:56:20 +0000
asID: 28225
IP address blocks: 189.126.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:32:bc:97:68:1d:4e:10:e2:6b:26:9f:77:c7:de:8f:3c:3e:be:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
Validity
Not Before: Jan 9 12:51:20 2024 GMT
Not After : Jan 7 12:56:20 2025 GMT
Subject: CN=48285C495A18F7C3304834BA272E75FDBCA9824C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:fc:e9:21:55:43:75:5a:f5:7c:08:9c:dc:
26:47:3d:11:27:0b:cd:8a:5e:42:95:0f:05:ab:10:
01:6b:a5:b3:87:b4:a0:50:f2:fb:36:e2:3b:ee:dd:
55:27:23:4b:13:97:79:98:99:c5:dc:cc:a2:72:49:
28:da:0f:c7:13:25:7c:44:e7:4a:8e:3c:6a:7b:14:
3b:9e:7d:c9:fe:fe:88:e7:f0:40:47:cd:a5:53:c8:
5f:36:b6:2b:5c:6c:20:cd:3e:c5:a2:29:e6:4d:e4:
b5:fd:02:d7:86:19:1c:2c:ce:be:88:c3:b1:24:76:
05:b6:9f:fa:4b:17:8a:97:65:f9:8f:12:ef:c8:55:
19:78:ca:d5:87:3f:7d:48:ab:92:84:34:8f:93:5a:
3f:cc:49:2c:c8:b2:7a:a3:17:8a:2f:00:32:f5:a0:
d6:af:bb:e8:91:c8:a9:b1:aa:d8:27:2e:e1:af:bf:
96:49:ab:46:11:a4:65:72:b3:23:d6:4f:67:67:42:
f8:b1:91:01:df:a6:13:cf:cd:58:0e:0a:12:77:19:
df:bd:dc:41:73:c1:d3:34:0b:b7:46:f6:49:56:8f:
aa:09:48:2d:a4:56:ab:5c:15:50:43:3b:7f:60:92:
35:45:ec:b3:06:64:5c:27:da:92:8b:a0:a2:79:73:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:28:5C:49:5A:18:F7:C3:30:48:34:BA:27:2E:75:FD:BC:A9:82:4C
X509v3 Authority Key Identifier:
keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e36342e302f32342d3234203d3e203238323235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.64.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d3:46:dc:07:60:3d:c8:c1:48:72:e4:a4:6d:98:5c:d9:9a:
4f:69:03:fc:08:c3:1e:16:3f:1e:57:5a:d3:be:59:7a:b5:13:
a5:f6:3a:a0:fc:f7:3e:ca:38:9d:b4:1e:1c:92:33:eb:ea:09:
c0:47:a4:7d:43:04:bb:df:a7:d7:43:8a:1b:5e:02:eb:c6:22:
66:45:d4:35:0f:d4:d9:14:a9:d9:a8:50:4d:2c:7c:81:39:8b:
c7:d8:91:06:10:3f:9a:9c:5c:2a:6d:ce:f3:b7:19:c9:4e:57:
68:01:2d:f8:82:4b:1a:db:30:fe:cb:e7:02:07:fa:c8:70:97:
1e:e2:73:32:b4:df:a8:e4:c6:ee:04:43:cd:9f:f9:02:87:3d:
a5:e6:f4:24:b8:b9:75:74:d4:6d:b7:5c:94:fe:3f:2c:39:84:
fc:17:66:19:f6:ee:aa:67:fb:ca:3b:96:bc:f8:82:32:63:3a:
76:fd:98:90:ca:bb:3b:5e:43:66:bc:7c:1d:eb:48:f7:2c:2e:
37:4f:98:17:94:4c:2f:1a:24:b3:a8:cf:fc:1d:f7:05:31:c4:
de:82:c3:ab:0a:12:22:22:24:d5:b9:44:06:89:e6:c1:fb:5b:
5c:39:4b:33:b9:dd:78:cb:7b:5d:ae:1a:21:45:30:f7:71:6e:
85:c2:e6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org