Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33332e302f32342d3234203d3e203238333039.roa
File: 3138392e33382e33332e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier: DXlnOCU0R9iyzNM/9xvYXLkpzT7lqflAaxVGK6w/ohM=
Subject key identifier: 30:AA:60:CB:7A:DC:73:3C:9B:A8:06:D7:DF:EE:4A:4B:4C:84:EE:BB
Certificate issuer: /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial: 4E63BBCF43BD9FDB0B3D48CD28922123D0FD8452
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33332e302f32342d3234203d3e203238333039.roa
Signing time: Thu 14 Sep 2023 18:47:49 +0000
ROA not before: Thu 14 Sep 2023 18:42:49 +0000
ROA not after: Thu 12 Sep 2024 18:47:49 +0000
asID: 28309
IP address blocks: 189.38.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:63:bb:cf:43:bd:9f:db:0b:3d:48:cd:28:92:21:23:d0:fd:84:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Validity
Not Before: Sep 14 18:42:49 2023 GMT
Not After : Sep 12 18:47:49 2024 GMT
Subject: CN=30AA60CB7ADC733C9BA806D7DFEE4A4B4C84EEBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:fc:cd:c2:66:1a:cc:7f:4c:fe:f1:db:20:
77:82:f8:bb:72:f9:a2:3b:8e:41:59:1a:50:2a:be:
d6:0d:69:e8:af:4b:5e:da:e6:e9:ac:8e:23:5f:6a:
c6:b2:f2:95:dc:9f:63:58:2e:0d:13:1e:08:07:d2:
89:f3:ab:c5:9d:b4:23:9c:cb:b5:a7:31:75:fb:f8:
93:96:5b:a9:da:1a:d0:06:c4:b3:86:f7:ef:0d:5f:
56:16:98:ce:41:3f:5a:5d:a7:f6:25:b5:20:de:dd:
4e:92:22:ea:e9:18:46:eb:c6:15:cd:5c:27:7f:44:
69:58:43:96:45:c9:77:d9:74:fb:bd:ff:6b:1d:41:
a9:e2:35:29:51:d9:a9:87:c8:70:42:ce:0b:50:2a:
6a:77:8f:c8:fb:33:8f:a3:a7:7c:f7:c5:bd:f8:6f:
53:fb:18:ca:f5:9e:5d:90:30:f6:0d:07:54:ab:ef:
86:88:07:77:29:2d:e3:e2:b6:68:3f:86:58:4b:bd:
d9:f0:53:dc:66:b8:55:28:d9:59:45:f2:31:35:4e:
38:81:f6:00:9a:fb:a0:c7:7e:94:70:c6:a4:2d:42:
0f:d5:66:48:70:cb:d9:8d:63:fd:4c:67:6a:dc:dc:
aa:76:47:81:9f:58:ab:41:7d:f1:07:ea:e0:f2:a4:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AA:60:CB:7A:DC:73:3C:9B:A8:06:D7:DF:EE:4A:4B:4C:84:EE:BB
X509v3 Authority Key Identifier:
keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33332e302f32342d3234203d3e203238333039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.38.33.0/24
Signature Algorithm: sha256WithRSAEncryption
70:9d:d0:a8:97:dc:ac:ab:92:82:ae:36:0e:cb:2f:82:a7:fb:
25:23:23:18:d1:97:de:68:e7:f1:84:41:52:02:a0:8f:d8:cd:
3b:3a:80:c7:7d:b6:0d:f9:c9:eb:42:11:e3:94:e0:4a:f7:64:
b7:f1:46:91:23:e5:29:af:71:26:8a:ad:82:5f:6e:29:8d:f8:
fc:5a:fc:56:50:82:e3:0c:15:d1:7f:99:84:61:5a:9a:04:0f:
4b:41:c1:e9:1d:91:37:13:80:f5:6b:4c:cc:0e:2b:d7:1e:50:
d7:e2:6c:62:e6:22:40:52:af:a2:89:0e:5f:3d:04:5a:45:6f:
33:19:6d:59:31:95:da:1c:7b:f8:cd:01:e8:e4:bd:f0:e2:d7:
09:95:33:e5:92:fe:9f:93:57:32:45:87:02:2b:ff:97:cb:e5:
ed:5d:c5:a7:19:44:12:3e:0a:bb:a9:c9:2c:b3:0f:31:f2:01:
c8:7b:b5:ae:32:21:20:ba:ae:6c:3d:e2:70:b5:d8:5b:f8:71:
84:c0:ff:a0:30:3e:15:be:9a:2d:0d:9e:64:81:3f:c1:d4:6f:
88:b1:8e:b9:70:46:90:f8:b0:6c:be:d4:fe:bc:ba:d5:2f:ca:
3a:5f:cc:a4:a5:c9:3a:93:bf:ff:d5:14:2f:0e:6b:8b:00:d9:
61:ad:f2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org