Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e34352e3232342e302f32302d3234203d3e20323730383134.roa
File: 3138392e34352e3232342e302f32302d3234203d3e20323730383134.roa (raw, json)
Hash identifier: xwAhJslSZonyYM2XEVpcyJuPqnh1CGv/wtVhSkOWiwE=
Subject key identifier: D4:B6:40:69:C0:E2:B4:B4:5B:48:23:AD:A2:5D:FC:66:1B:0A:F9:F8
Certificate issuer: /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial: 323A46F08587A176469993FDDD64E95646E8B904
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e34352e3232342e302f32302d3234203d3e20323730383134.roa
Signing time: Mon 25 Nov 2024 16:53:03 +0000
ROA not before: Mon 25 Nov 2024 16:48:03 +0000
ROA not after: Mon 24 Nov 2025 16:53:03 +0000
asID: 270814
IP address blocks: 189.45.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3a:46:f0:85:87:a1:76:46:99:93:fd:dd:64:e9:56:46:e8:b9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
Validity
Not Before: Nov 25 16:48:03 2024 GMT
Not After : Nov 24 16:53:03 2025 GMT
Subject: CN=D4B64069C0E2B4B45B4823ADA25DFC661B0AF9F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:48:5e:d8:1c:b1:76:48:a2:7c:c1:81:51:
e3:7b:b5:86:43:e7:04:33:19:3f:27:40:cc:3f:d7:
d6:81:dd:49:3d:94:33:92:9f:e5:ba:c6:14:78:ce:
cd:58:7b:f1:f7:66:ee:5d:d7:37:a1:de:2e:47:84:
dc:78:7b:88:93:f3:15:23:fa:5d:07:60:cd:c4:77:
83:d2:14:0b:92:02:e5:54:9a:9d:b0:de:9e:3e:4b:
07:5e:c0:d7:ac:39:f7:bc:55:13:df:6c:83:5c:89:
0f:e5:6b:13:68:59:5a:61:91:0d:13:0e:5a:20:0a:
7e:ad:47:4d:f7:97:fa:1e:09:a5:9c:64:63:2a:16:
57:d2:ec:e5:86:81:36:fd:84:e9:e9:34:f5:b8:08:
c0:90:ff:03:c1:3a:53:3c:37:13:66:87:d3:56:b6:
22:48:58:c0:a2:6b:22:ad:d2:35:ec:7f:c6:ca:c1:
cb:ea:c3:f0:80:d6:67:f2:cc:58:24:f2:62:74:2a:
a8:89:a4:f0:02:13:b9:c1:d7:80:a8:e1:b5:56:8e:
0c:80:4a:63:a6:3d:a1:f8:39:d6:4f:46:54:82:2e:
7e:0a:fd:75:0c:c7:bc:cf:a2:87:b9:e2:eb:3f:af:
8f:21:c4:fb:17:24:eb:65:55:11:4f:e8:76:95:8b:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B6:40:69:C0:E2:B4:B4:5B:48:23:AD:A2:5D:FC:66:1B:0A:F9:F8
X509v3 Authority Key Identifier:
keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e34352e3232342e302f32302d3234203d3e20323730383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.224.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:25:fa:91:a1:84:24:99:a8:9a:8b:8e:b1:55:e3:36:e9:90:
66:b6:6b:58:fb:2b:e2:4b:a4:73:b5:9e:a6:60:4b:40:a2:63:
c0:d5:a6:89:6e:01:23:89:c7:43:7d:38:89:26:e5:7c:cb:75:
d6:c8:94:78:2f:9b:c4:9a:cd:cd:32:1e:b1:2b:43:c0:55:b3:
51:51:9a:86:d7:df:19:76:67:4b:1c:b0:0e:61:1b:62:93:3b:
f9:5e:20:1a:95:14:06:39:f1:3b:b7:f5:58:3e:b8:80:d8:94:
7a:99:2b:88:11:61:30:5b:a7:19:c9:91:e2:95:c8:f1:aa:29:
17:72:55:f8:42:4f:e2:d4:4f:5e:15:12:aa:80:33:43:ef:46:
b5:f9:e0:37:62:36:f9:24:a7:f9:5e:1a:d9:2e:78:f1:a7:6d:
42:39:a2:dc:cc:0c:f0:cf:47:38:8f:23:3d:9a:be:c2:cb:b7:
bb:c7:16:c0:74:33:06:5c:76:2d:0e:81:8c:90:3b:9d:55:73:
b3:fc:10:f0:fc:aa:76:2b:ae:7e:af:ff:20:85:b4:a3:f5:97:
20:ba:d3:e0:39:46:ce:3c:5e:3d:87:2d:e5:a6:06:61:f2:00:
78:8e:7f:7f:90:86:2f:82:98:88:d9:79:a8:d2:58:71:36:1b:
b2:b7:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:44 2025 by rpki-client