Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3234312e302f32342d3330203d3e203238313838.roa
File: 3138392e38392e3234312e302f32342d3330203d3e203238313838.roa (raw, json)
Hash identifier: Lt1iz2nYwWWmqiQExxD/sJrypWQUbHgV9+xJ6RNpUAU=
Subject key identifier: 6B:FA:D2:2E:5A:DE:28:47:56:26:57:A3:FD:E6:67:2C:AD:B8:90:62
Certificate issuer: /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial: 4BE11045C72E3C4978AAEAC5C8992A95F19C9C66
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3234312e302f32342d3330203d3e203238313838.roa
Signing time: Wed 05 Feb 2025 22:58:57 +0000
ROA not before: Wed 05 Feb 2025 22:53:57 +0000
ROA not after: Wed 04 Feb 2026 22:58:57 +0000
asID: 28188
IP address blocks: 189.89.241.0/24 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:e1:10:45:c7:2e:3c:49:78:aa:ea:c5:c8:99:2a:95:f1:9c:9c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Validity
Not Before: Feb 5 22:53:57 2025 GMT
Not After : Feb 4 22:58:57 2026 GMT
Subject: CN=6BFAD22E5ADE2847562657A3FDE6672CADB89062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:48:b9:23:08:b6:9d:1f:bb:1e:59:fc:ff:
5b:8c:6a:dc:84:15:43:34:e2:7b:99:a4:ac:d6:14:
91:e5:d4:37:c6:87:0f:23:eb:9c:cf:71:c5:22:c1:
36:a5:00:1c:5e:95:7b:ff:d8:07:fd:6c:a5:da:e0:
b5:d4:26:f4:31:d7:0f:5d:ed:3f:f2:2f:dc:18:ca:
6f:18:04:87:b1:34:42:c4:20:17:11:70:e9:86:2b:
4d:e8:16:27:e5:69:a9:6f:fd:52:18:22:88:6c:ec:
92:c0:12:5b:63:01:9c:bb:cd:20:23:7b:ce:90:da:
ba:35:09:73:be:5c:b3:45:ac:86:d0:83:c8:16:31:
38:73:5e:67:b5:13:30:61:eb:4c:ea:ab:9d:02:8f:
c8:af:56:27:66:00:34:a0:b7:18:a9:3d:e7:e2:59:
0f:18:a1:9e:df:73:e1:a9:34:21:9d:07:81:ce:6f:
be:5f:b1:a5:66:9c:32:75:fc:9f:a4:f4:72:ae:f4:
b4:e0:19:da:8b:d9:0b:be:18:c9:58:5a:f0:62:d9:
c7:76:49:1c:30:76:10:74:b1:3d:1a:32:b3:58:ae:
87:98:2c:8c:94:88:65:b9:d9:55:f1:1a:8b:5f:c3:
ef:33:59:2e:95:1d:ca:5e:16:86:0e:2d:73:44:20:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FA:D2:2E:5A:DE:28:47:56:26:57:A3:FD:E6:67:2C:AD:B8:90:62
X509v3 Authority Key Identifier:
keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3234312e302f32342d3330203d3e203238313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.241.0/24
Signature Algorithm: sha256WithRSAEncryption
79:59:c7:eb:f5:b5:a0:22:d9:06:f0:1e:64:c3:c1:65:f6:9c:
3c:55:2c:ab:78:32:eb:73:fc:7f:97:63:d5:7e:4e:2f:9f:8f:
8d:f7:5f:e1:a5:3a:b8:e0:e0:c6:48:7b:a4:08:f4:3c:39:fe:
f2:88:25:12:4b:91:78:f0:b2:30:2f:50:60:1e:b7:06:24:93:
fc:b5:cd:93:37:26:f8:de:63:82:37:9c:9e:49:9e:49:ca:d5:
5e:e3:df:94:78:23:72:26:c0:f5:62:81:57:17:53:ba:d1:bd:
71:40:67:6b:8d:fc:80:0b:aa:92:18:9f:a1:43:5b:72:6c:54:
d4:13:05:58:78:66:b7:fb:e0:5a:6d:03:39:03:07:17:50:de:
ec:1a:c4:94:84:ce:35:1e:e3:82:63:32:1c:cf:9b:db:d2:72:
9b:0d:5c:2c:2e:f0:a8:9c:86:2c:ca:55:59:48:e6:35:86:92:
8c:ec:3b:2b:8d:ad:f9:1d:9e:73:38:72:81:93:74:1e:5e:37:
7b:6a:c7:50:cf:d2:0d:da:dc:87:99:39:83:a0:7f:ba:55:57:
d2:91:8a:f5:4d:70:00:e1:29:f2:ae:ed:8b:30:e9:92:d8:4c:
66:c7:31:97:73:13:c1:44:77:5f:57:61:d4:e2:4e:34:30:86:
b9:41:9d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:11:33 2025 by rpki-client