Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37362e302f32322d3232203d3e203238323235.roa
File: 3138392e3132362e37362e302f32322d3232203d3e203238323235.roa (raw, json)
Hash identifier: P61JHD0M/RyzVfT4kQYmaOJzXNMIDptDPwBpt1rVWek=
Subject key identifier: AB:6D:D0:8C:E0:34:F2:76:DE:0C:80:95:AD:80:13:48:31:5B:B2:BF
Certificate issuer: /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial: 2822A000DD7F807F60E479109E85E3DE1C0E7837
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37362e302f32322d3232203d3e203238323235.roa
Signing time: Tue 09 Jan 2024 12:56:15 +0000
ROA not before: Tue 09 Jan 2024 12:51:15 +0000
ROA not after: Tue 07 Jan 2025 12:56:15 +0000
asID: 28225
IP address blocks: 189.126.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:22:a0:00:dd:7f:80:7f:60:e4:79:10:9e:85:e3:de:1c:0e:78:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
Validity
Not Before: Jan 9 12:51:15 2024 GMT
Not After : Jan 7 12:56:15 2025 GMT
Subject: CN=AB6DD08CE034F276DE0C8095AD801348315BB2BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:9d:1f:05:cb:fc:b3:28:79:e3:c9:96:50:
78:4a:6f:58:7e:1a:0a:8e:5f:4c:33:c5:d6:10:2f:
b3:65:38:9f:fc:19:a2:c1:d5:b1:77:30:7b:c4:ad:
62:08:c3:90:c1:d7:63:f6:46:96:1d:9d:3a:d0:0a:
e5:51:ee:6e:27:f1:4f:25:84:1e:a7:bd:a5:ba:42:
e7:81:66:83:e7:73:dc:3c:7d:a2:b2:ef:38:de:7a:
16:db:03:4a:28:6c:8e:c0:d0:89:03:5e:67:75:b9:
9f:37:13:3b:b9:d8:4f:c0:08:d6:e3:6a:c9:4b:64:
ed:b0:62:20:6e:24:ea:f1:16:c3:03:91:54:f2:6b:
d4:79:7f:fd:d0:1c:1c:36:d7:e2:7e:65:a7:62:ab:
5a:fe:2c:7c:84:bf:12:6a:9e:ba:78:c1:cf:20:88:
27:1e:1f:e3:0a:06:ac:fb:88:6d:d9:90:48:c7:65:
78:d9:7c:34:a9:3e:b7:1d:de:94:1b:8c:df:6d:3b:
14:32:45:9e:68:9e:0b:20:2a:3f:fd:d8:27:1e:b9:
a5:cb:a5:b8:c8:1c:ae:09:b1:47:14:9a:89:44:ea:
f3:f9:ba:7e:12:10:07:92:0c:90:7e:e6:96:f0:65:
a9:a5:10:f9:e1:3c:cc:2f:7d:91:f7:f5:e1:a4:b5:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6D:D0:8C:E0:34:F2:76:DE:0C:80:95:AD:80:13:48:31:5B:B2:BF
X509v3 Authority Key Identifier:
keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/3138392e3132362e37362e302f32322d3232203d3e203238323235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.76.0/22
Signature Algorithm: sha256WithRSAEncryption
60:64:b6:49:16:a1:6f:9f:03:43:1d:9d:08:43:13:f9:09:8f:
8d:67:5a:ed:8f:01:db:2f:23:4f:68:14:93:a3:58:30:89:b5:
62:65:89:8d:a9:ff:b9:9b:2d:ff:95:14:11:b8:0e:72:29:96:
df:5f:b4:aa:80:59:2a:fc:89:3f:a1:01:25:f7:ef:55:dc:eb:
6d:15:71:da:7f:81:1e:85:62:b2:29:4a:09:ed:8f:34:82:a0:
c1:e8:07:42:1f:55:9e:54:73:ca:39:f7:90:96:a1:3f:42:60:
15:c6:7b:81:93:11:60:8d:57:a4:83:61:00:23:f6:e2:22:f0:
78:15:72:fb:33:1f:d6:a7:15:2c:89:47:4e:83:90:5f:a8:98:
cb:7f:09:57:e7:5b:30:60:65:2a:f0:38:56:5f:65:6b:32:01:
21:ac:a9:33:02:3e:af:14:49:dc:ef:7e:0a:f6:65:4c:5c:c4:
7c:93:80:8b:29:5b:e3:0b:04:72:f1:38:b5:ba:7b:b4:9e:9e:
68:50:f0:d0:27:b2:e9:56:79:e6:2d:bb:5b:19:8f:96:c4:95:
dd:d9:a2:8f:f2:76:95:a2:bf:50:b8:f4:14:90:cd:55:7d:b0:
8a:22:18:b1:9e:6c:a2:11:21:04:90:20:9e:6a:a8:a9:5a:df:
0d:42:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org