Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3234342e302f32342d3330203d3e203238313838.roa
File: 3138392e38392e3234342e302f32342d3330203d3e203238313838.roa (raw, json)
Hash identifier: 0TUVoHzdO+E4qt569sbvCl0vT6aiMEZc8lcVQh8INow=
Subject key identifier: EA:A4:55:2F:C2:F5:9A:24:64:81:CB:8C:6F:05:C7:91:12:92:92:45
Certificate issuer: /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial: 21E2D74D9B84D7ED57D6DEDF8FDB6EF5885D16D4
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3234342e302f32342d3330203d3e203238313838.roa
Signing time: Wed 05 Feb 2025 22:59:19 +0000
ROA not before: Wed 05 Feb 2025 22:54:19 +0000
ROA not after: Wed 04 Feb 2026 22:59:19 +0000
asID: 28188
IP address blocks: 189.89.244.0/24 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e2:d7:4d:9b:84:d7:ed:57:d6:de:df:8f:db:6e:f5:88:5d:16:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Validity
Not Before: Feb 5 22:54:19 2025 GMT
Not After : Feb 4 22:59:19 2026 GMT
Subject: CN=EAA4552FC2F59A246481CB8C6F05C79112929245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:40:d1:28:2b:02:f7:2e:da:bf:2f:7b:60:
48:de:d4:3d:74:7c:dd:b0:a0:f5:8e:c2:d0:1e:35:
f9:1a:38:6d:29:b5:62:a6:11:ba:8d:39:c8:37:50:
31:ae:32:76:a3:c8:9d:16:7a:86:8b:1d:05:af:7c:
a6:41:37:1b:97:b6:4f:8a:94:32:fb:b2:59:3d:b7:
a5:9c:f9:8f:fc:72:2b:60:5f:fe:44:73:a1:eb:a9:
c2:b1:63:ce:73:a4:31:e5:a6:35:76:3d:db:ca:88:
fa:aa:8b:b1:fb:9e:f4:03:68:9b:4e:e8:cd:c0:a4:
b2:be:a3:92:41:d0:94:2e:9c:d9:cf:64:bb:43:af:
fe:dd:f5:1c:ee:37:d9:e5:2b:1c:70:60:d1:14:dd:
ca:56:26:6c:1f:5f:63:8d:6a:51:c1:ba:4e:95:c9:
11:ca:06:fc:ab:78:6a:ef:ec:4b:47:38:a2:43:8f:
c7:15:a9:37:ac:a9:7d:ee:f5:df:f1:1c:af:68:4e:
2a:92:d5:5f:83:72:d7:a2:d7:a9:3e:6e:88:80:f8:
63:a2:7c:b5:34:d2:55:d8:2b:91:62:46:f3:8e:da:
fc:d9:66:f1:94:63:9c:9a:c4:46:ae:cf:3d:81:06:
91:94:a1:58:be:db:b1:45:29:8e:8d:05:da:e9:f1:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A4:55:2F:C2:F5:9A:24:64:81:CB:8C:6F:05:C7:91:12:92:92:45
X509v3 Authority Key Identifier:
keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3138392e38392e3234342e302f32342d3330203d3e203238313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.244.0/24
Signature Algorithm: sha256WithRSAEncryption
39:3c:e6:29:d1:21:f0:f6:da:48:5d:f0:60:f9:d2:d4:73:3d:
b1:db:4c:56:51:e4:fa:bc:ba:a2:e5:e7:5c:cc:65:27:56:a8:
fd:5f:69:c1:13:97:73:eb:4b:8d:14:61:3b:5f:bf:d4:ee:54:
31:e5:e0:da:04:1e:6b:4c:f4:98:d3:09:09:76:69:41:7e:0a:
d8:4a:64:31:f6:02:ed:ad:bb:08:90:ec:59:9d:e6:28:3c:e2:
06:37:56:e7:44:01:82:04:88:9e:dd:90:a2:a5:ce:74:70:2b:
3c:82:fc:76:ef:c9:06:07:f1:f4:37:c7:75:17:e4:ee:64:87:
5b:0f:00:0b:ec:9a:29:00:ef:32:59:c7:43:07:6e:8b:ba:c8:
5a:78:d5:d7:49:79:7c:61:1e:43:62:47:e7:f3:73:c5:2c:55:
0d:5c:b8:be:d9:e1:01:0c:91:fd:fa:d5:45:cb:f0:dd:84:14:
6c:64:8f:c7:07:97:3d:3a:dc:07:9c:5c:fe:2e:eb:ed:db:ba:
02:31:3e:f0:da:e5:41:c0:db:ba:98:b1:a8:b4:ea:76:5d:04:
f5:75:b5:2f:c8:2d:96:ec:11:0f:89:38:57:66:c1:6e:92:9e:
46:1a:5a:90:f1:a9:1c:b6:74:9e:93:13:c6:a9:a2:da:c5:0a:
67:ec:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:39:12 2025 by rpki-client