Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33322e302f32302d3230203d3e203238333039.roa
File: 3138392e33382e33322e302f32302d3230203d3e203238333039.roa (raw, json)
Hash identifier: isYWW3dTVYTgMJjxRsGIadMu58MnsKWHfl9Aiskjn74=
Subject key identifier: 85:F8:84:AF:42:8F:6A:B0:C4:76:F9:AD:C5:18:71:B5:6A:2A:BD:EE
Certificate issuer: /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial: 247F0796FBC8AC0480FFFC04727BACB9B8F11D01
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33322e302f32302d3230203d3e203238333039.roa
Signing time: Thu 14 Sep 2023 18:47:50 +0000
ROA not before: Thu 14 Sep 2023 18:42:50 +0000
ROA not after: Thu 12 Sep 2024 18:47:50 +0000
asID: 28309
IP address blocks: 189.38.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:7f:07:96:fb:c8:ac:04:80:ff:fc:04:72:7b:ac:b9:b8:f1:1d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Validity
Not Before: Sep 14 18:42:50 2023 GMT
Not After : Sep 12 18:47:50 2024 GMT
Subject: CN=85F884AF428F6AB0C476F9ADC51871B56A2ABDEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:96:95:be:df:b9:d4:77:35:17:fd:90:41:
73:92:49:76:a5:b2:e2:63:d6:ac:12:a5:bf:b0:56:
7b:41:6e:aa:82:47:21:a2:ef:4f:c8:8f:7c:3f:ae:
af:45:33:a1:22:bf:59:22:b3:ef:98:78:dc:c6:51:
3c:72:02:d5:8d:82:32:81:c1:9a:9c:ec:50:91:b8:
66:7a:93:74:77:ce:fe:d9:c4:0e:fc:5f:9a:d9:b2:
22:1a:29:38:ae:8a:1e:ec:b8:c5:1d:5a:e2:91:b2:
61:19:79:ac:c6:12:59:cd:77:2e:78:81:b9:dd:b7:
89:10:0e:f2:81:6a:35:cb:34:1f:5d:fd:46:5e:c6:
08:a1:8f:29:74:99:53:9f:68:56:a2:54:db:cf:f4:
b8:2f:84:d7:e5:76:58:84:f4:fc:b6:61:da:d4:ea:
42:35:93:79:ec:13:4c:d4:39:f0:45:72:48:2f:78:
d0:c0:87:82:06:22:ec:11:54:9e:df:dd:cb:01:99:
69:1b:c4:d1:a6:a5:7a:2a:c6:5d:9f:bd:95:d0:c5:
e9:6e:3b:db:97:88:16:3d:11:09:40:f1:8b:88:46:
fd:f1:61:2a:f7:8d:83:6d:a2:80:8a:f9:ad:f7:db:
68:ad:5f:9d:56:eb:22:52:26:25:77:fd:13:97:a5:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F8:84:AF:42:8F:6A:B0:C4:76:F9:AD:C5:18:71:B5:6A:2A:BD:EE
X509v3 Authority Key Identifier:
keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33322e302f32302d3230203d3e203238333039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.38.32.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:72:cb:62:66:23:4b:79:63:7a:8e:2e:67:ca:ac:67:ad:c6:
c8:83:26:c8:86:76:db:e2:25:ad:d5:12:76:12:fb:07:f5:e2:
81:7f:12:7d:0a:86:cb:39:dc:98:91:76:fe:25:1d:e1:79:8d:
82:4e:d8:18:55:59:b3:92:af:4a:49:b6:df:34:e4:be:53:f0:
6a:e0:9b:cb:84:ba:ae:70:3f:56:0e:83:b2:97:30:4e:42:ec:
83:c3:2e:51:a0:22:83:98:01:e1:29:36:c9:af:52:01:f7:48:
5b:7b:72:77:17:de:89:47:53:c4:bc:7f:f8:4d:57:43:5c:84:
98:19:e9:ab:cc:85:e1:64:6b:76:b2:04:c0:eb:ab:d6:60:25:
99:e6:db:63:4b:c4:aa:9a:32:a4:a1:41:ff:93:f8:a6:00:b2:
ac:99:8c:3c:a2:74:ac:5a:9b:e2:bf:46:d0:0a:02:ec:86:e3:
17:9f:f0:aa:ee:bd:8e:e4:61:52:0a:96:db:8b:b7:c8:53:d1:
5a:4e:6f:10:24:ca:e7:3f:86:d0:5c:75:ba:64:68:6a:88:7d:
00:89:28:62:4a:ff:ef:84:7a:f8:c9:08:63:bf:f9:56:a7:96:
a6:64:43:63:65:86:e4:2e:fd:77:42:2b:fb:f9:f8:0d:a7:b8:
59:6e:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:07 2025 by rpki-client