Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa
File: 3139302e392e3130342e302f32332d3233203d3e20323731363037.roa (raw, json)
Hash identifier: 9gs2HpFB08QifH9DthSpAEvbwuNeAumaHMOI/4k5qXc=
Subject key identifier: 93:18:71:1C:25:B8:C9:A7:E3:56:D4:43:27:B0:DF:64:F4:8E:BE:AF
Certificate issuer: /CN=893D95ADA38B2A288C03DAA99290D5110510F8E7
Certificate serial: 1E74BD5279B4AD052129594CE6E7B8BF01611D15
Authority key identifier: 89:3D:95:AD:A3:8B:2A:28:8C:03:DA:A9:92:90:D5:11:05:10:F8:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa
Signing time: Wed 03 Apr 2024 20:23:10 +0000
ROA not before: Wed 03 Apr 2024 20:18:10 +0000
ROA not after: Wed 02 Apr 2025 20:23:10 +0000
asID: 271607
IP address blocks: 190.9.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:74:bd:52:79:b4:ad:05:21:29:59:4c:e6:e7:b8:bf:01:61:1d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893D95ADA38B2A288C03DAA99290D5110510F8E7
Validity
Not Before: Apr 3 20:18:10 2024 GMT
Not After : Apr 2 20:23:10 2025 GMT
Subject: CN=9318711C25B8C9A7E356D44327B0DF64F48EBEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:8e:48:e5:59:5e:3d:1f:be:ec:c3:db:ca:
e9:3d:ac:15:eb:bf:3c:ed:25:31:0b:10:5b:aa:bb:
86:c7:4a:10:d1:b3:6c:1c:e8:0d:8c:ad:55:8f:d8:
11:c0:d8:56:bd:68:7a:81:11:f4:91:85:81:e1:0a:
8f:fc:bb:ec:c8:10:6a:5a:d6:e7:28:e5:15:71:b9:
30:57:cf:8b:ad:b3:19:07:80:cd:90:a1:aa:f7:e6:
73:6a:6b:94:0a:d2:be:b1:42:c0:81:26:b3:76:a2:
2c:3b:d2:0b:3a:7c:28:ce:4f:2d:15:ad:e4:d7:bd:
50:f3:a5:ac:fb:80:00:80:93:8b:06:ac:98:71:20:
d7:5c:97:9c:c9:43:10:a7:ce:1e:0a:d7:75:60:7e:
c7:fa:b0:92:2b:91:0b:28:58:af:5a:f0:fa:c6:f5:
c9:49:90:49:e6:68:f9:91:be:a9:1b:38:36:1a:f9:
96:dc:59:7b:1c:4d:f0:df:3e:e9:07:44:b8:8e:4c:
9f:ff:70:da:79:c4:11:4b:c4:8e:11:b1:83:2b:86:
b2:65:8c:52:ea:ff:5d:42:7d:0f:37:93:b8:26:28:
f4:1c:b0:b0:8d:82:e2:3f:45:a1:01:5a:6b:fd:fe:
1f:3f:67:be:bf:88:c8:c3:a4:e4:4d:38:26:ef:3a:
29:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:18:71:1C:25:B8:C9:A7:E3:56:D4:43:27:B0:DF:64:F4:8E:BE:AF
X509v3 Authority Key Identifier:
keyid:89:3D:95:AD:A3:8B:2A:28:8C:03:DA:A9:92:90:D5:11:05:10:F8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.9.104.0/23
Signature Algorithm: sha256WithRSAEncryption
20:6e:db:74:e6:63:40:53:fc:26:2c:e1:4b:f1:bf:ce:cb:15:
18:27:a1:0b:0b:77:25:ea:99:b3:9e:75:98:5b:0c:ab:59:f2:
91:fd:5f:a8:ec:3d:54:b4:e2:57:40:b5:c4:3b:f4:0c:d8:9d:
e0:d2:49:db:2b:8d:8b:67:b2:9b:c0:30:a8:fa:60:bf:31:82:
90:ae:76:e2:a5:fe:95:e1:4a:6e:4f:b5:5a:ca:d2:4b:7d:0b:
5b:87:a6:db:9e:cc:c8:fe:de:ca:e7:df:e3:f4:c0:8c:ac:35:
de:cc:ee:af:0f:df:5e:2a:9e:72:f7:94:6e:95:29:d3:b7:f3:
d6:49:07:ed:5d:f3:cd:f0:69:6d:21:be:c5:18:97:3c:23:98:
74:4d:95:eb:82:9f:7c:66:d4:a2:b7:a6:d8:1c:81:67:9c:55:
20:32:8c:6f:66:e2:84:e3:d6:c3:44:1c:70:a8:6a:09:97:64:
c2:37:a6:5a:8b:2d:65:11:4e:6e:67:b6:8f:75:4f:aa:2b:f0:
06:f2:e7:8c:c4:fd:4a:dc:91:81:22:27:c1:0e:11:12:a2:6d:
64:86:b0:0b:02:ce:fb:66:82:0e:dd:47:a7:3e:10:d2:d1:d8:
64:4e:12:19:d6:6e:7e:a4:fc:1b:7e:35:2b:93:32:3c:ba:46:
13:b4:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:24:06 2025 by rpki-client