Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34302e302f32342d3234203d3e203238333039.roa
File: 3138392e33382e34302e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier: oHYVhEF7HV7okBBZhFDI0imAiKsuU2661/IieQliAl4=
Subject key identifier: 97:98:A3:E9:79:6F:6B:7D:9E:54:1C:DF:61:CF:5D:DA:DB:DC:E8:36
Certificate issuer: /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial: 3C76AAAA404DFDFC23D17CA017348D8B51A1A596
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34302e302f32342d3234203d3e203238333039.roa
Signing time: Thu 14 Sep 2023 18:47:47 +0000
ROA not before: Thu 14 Sep 2023 18:42:47 +0000
ROA not after: Thu 12 Sep 2024 18:47:47 +0000
asID: 28309
IP address blocks: 189.38.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:76:aa:aa:40:4d:fd:fc:23:d1:7c:a0:17:34:8d:8b:51:a1:a5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Validity
Not Before: Sep 14 18:42:47 2023 GMT
Not After : Sep 12 18:47:47 2024 GMT
Subject: CN=9798A3E9796F6B7D9E541CDF61CF5DDADBDCE836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:03:f0:b7:7b:cc:dd:de:6c:7a:ed:61:26:
ae:dc:7f:9c:8a:72:57:f9:38:c4:44:76:26:0e:b5:
ce:83:61:a1:2e:10:b3:e7:61:96:3c:9d:af:96:de:
9b:7b:20:e4:53:64:a2:7c:b1:d1:d5:57:ce:d8:24:
c0:df:ef:85:bf:db:b8:c2:ca:f8:2c:04:9e:41:16:
15:84:ac:65:0a:de:f4:36:c8:47:65:a0:92:f7:91:
92:43:af:c7:58:aa:3f:6f:e9:e9:33:db:8f:aa:5e:
0a:92:4e:3e:49:3d:c2:de:19:d5:18:13:6c:00:26:
8b:25:1e:60:a4:9e:60:1c:f6:5f:73:91:77:d3:53:
a3:ef:4e:ba:ca:fb:a8:8e:55:ff:9d:35:6f:af:e9:
99:76:35:94:41:54:80:37:a6:e6:af:22:09:ef:d0:
a1:e3:6f:d1:13:23:2d:bc:c1:8d:71:de:ed:d5:85:
fa:93:92:94:64:f3:31:ec:8e:2a:f5:ab:42:9a:6b:
92:6f:3d:7c:e2:29:cc:04:cf:42:3f:95:1d:8b:3b:
5d:80:5a:9d:0e:32:40:29:be:c4:87:5f:92:c9:e9:
8e:d9:e5:c0:ea:f4:f1:56:84:ef:67:c1:fc:c9:96:
c1:2b:fd:18:99:57:bb:e6:66:63:1d:89:c2:e9:16:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:A3:E9:79:6F:6B:7D:9E:54:1C:DF:61:CF:5D:DA:DB:DC:E8:36
X509v3 Authority Key Identifier:
keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34302e302f32342d3234203d3e203238333039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.38.40.0/24
Signature Algorithm: sha256WithRSAEncryption
14:22:2a:86:9e:45:c3:92:d9:b4:84:47:6e:07:f4:5c:4d:87:
42:10:03:0b:6d:14:fe:23:44:cb:6e:c4:3c:0b:ce:fa:50:c3:
cf:f8:1e:eb:16:f3:10:57:dc:aa:2e:5d:01:ea:be:50:1d:5d:
6c:07:21:87:db:7f:32:86:55:91:e3:bd:1c:92:6b:c5:3d:eb:
12:fc:bd:bf:0a:85:69:98:86:b2:8b:87:00:ee:ac:a0:81:aa:
e8:41:0f:af:13:06:f7:db:c4:ea:ec:6a:58:24:01:41:77:59:
ff:b1:ef:99:9b:01:75:3a:6a:0e:a4:6d:c8:44:cb:6c:e1:1e:
06:2e:78:e7:07:e9:d2:b6:bd:4c:32:c4:c7:ad:e5:fa:ee:a7:
86:97:b2:ab:b5:c7:2a:2d:c4:03:51:f6:5e:ed:82:8d:07:67:
9b:3f:ca:45:63:1e:bd:2f:19:7c:21:37:c7:5e:7d:b5:08:33:
da:b3:27:bf:6c:08:b8:5f:aa:b9:66:0a:d4:ff:f8:ea:9a:d5:
aa:d1:57:26:bb:61:b8:53:9a:e7:5c:8c:13:84:da:0a:40:28:
52:5a:e3:95:96:9c:39:85:e9:f3:bb:f3:fb:8f:bf:68:10:a3:
7f:95:ab:68:30:6e:dd:69:7b:07:9c:32:74:d6:d9:0a:8a:b7:
b7:a5:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org