Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e38382e302f32322d3232203d3e20323632373439.roa
File: 3138392e38392e38382e302f32322d3232203d3e20323632373439.roa (raw, json)
Hash identifier: wKU2jYgOJRC7p8sibH+hSREqG8SYd9tU8bh1ae6bQLQ=
Subject key identifier: 48:BA:FE:6E:B9:80:8E:78:10:D8:27:98:76:B9:9C:00:38:BD:EF:FA
Certificate issuer: /CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
Certificate serial: 272CD9D578A437DE1D8C797E6D6F9C1771B81C0E
Authority key identifier: 03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e38382e302f32322d3232203d3e20323632373439.roa
Signing time: Tue 27 Feb 2024 01:00:32 +0000
ROA not before: Tue 27 Feb 2024 00:55:32 +0000
ROA not after: Tue 25 Feb 2025 01:00:32 +0000
asID: 262749
IP address blocks: 189.89.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:2c:d9:d5:78:a4:37:de:1d:8c:79:7e:6d:6f:9c:17:71:b8:1c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
Validity
Not Before: Feb 27 00:55:32 2024 GMT
Not After : Feb 25 01:00:32 2025 GMT
Subject: CN=48BAFE6EB9808E7810D8279876B99C0038BDEFFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:98:c5:c5:6c:0a:0e:ba:7a:d5:70:48:0e:
94:0e:15:af:0a:27:ae:07:f5:77:42:ef:9c:37:88:
63:54:00:4c:46:b8:0a:f6:be:4f:26:03:38:aa:c1:
a2:d3:b6:93:46:d6:9a:8e:41:2c:fd:bd:e3:69:47:
ca:b3:7d:32:0f:7b:41:63:a8:d2:75:b5:3a:cc:4b:
3b:d3:cb:c2:d5:d6:1f:2e:33:27:44:f6:63:f6:6b:
3a:52:86:9a:d7:18:ea:09:46:1c:64:2d:26:6d:2b:
0d:f5:e1:58:26:65:e2:46:71:bd:4c:68:3c:aa:a8:
ba:89:8c:4e:e0:3e:04:ab:cb:20:dc:c2:5a:9a:15:
40:db:13:30:59:6e:4b:f1:c7:90:bc:50:54:a7:a1:
ea:cf:39:f8:81:62:d5:26:d9:5f:83:17:f2:42:b8:
8f:e4:ee:24:54:a0:9d:21:a1:b8:03:f0:2b:93:74:
6e:0c:72:63:58:60:8c:b0:b2:ce:59:bc:da:f0:da:
5f:3c:46:e7:e5:cb:76:bd:4a:ca:3e:5a:25:9f:1e:
64:f6:23:68:69:b7:ba:ca:9f:b8:82:be:c5:1c:dd:
e6:c9:d2:69:55:cc:0b:87:1d:51:12:17:89:67:6a:
eb:18:f6:61:01:1e:a8:7f:ba:ce:af:94:c3:0e:4a:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BA:FE:6E:B9:80:8E:78:10:D8:27:98:76:B9:9C:00:38:BD:EF:FA
X509v3 Authority Key Identifier:
keyid:03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/3138392e38392e38382e302f32322d3232203d3e20323632373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.88.0/22
Signature Algorithm: sha256WithRSAEncryption
32:e7:fb:bf:e2:f4:93:6e:7e:4e:7b:f6:5a:36:ff:09:ab:4c:
c5:9a:fb:cd:36:24:26:78:db:73:50:88:73:12:24:7b:31:10:
f3:1e:95:99:38:3e:68:1c:0f:15:fb:f4:67:60:ef:70:6f:16:
92:9a:29:73:70:7a:86:6d:5b:b1:0e:23:16:0f:32:dd:91:8d:
cb:f8:1b:e8:cd:7f:6b:c3:82:3a:2d:41:3a:59:c4:48:03:0a:
0c:03:24:ca:ba:56:2b:1e:df:af:05:4d:ad:43:f2:8e:6f:39:
83:30:81:14:b5:ea:9e:b9:4d:17:c9:45:fd:0f:21:0f:28:bc:
eb:ee:9b:c3:32:b5:ae:00:47:b7:a9:34:bc:88:60:03:7b:22:
b6:a8:e9:50:74:64:7e:e9:23:ac:2a:30:1e:8f:e3:6a:28:c4:
0c:bb:ec:c7:90:bb:a4:ef:14:7f:7d:23:03:55:2d:e4:98:74:
6a:12:53:1a:4c:f9:64:79:32:9e:6c:82:d1:12:bc:d4:c5:b9:
93:e7:3f:59:f3:d3:43:9b:50:64:7b:ed:f2:04:78:7a:d8:88:
0c:3d:81:f4:e2:13:e5:1d:94:b1:09:74:83:60:6d:22:6e:9c:
00:5e:ae:2a:a7:99:20:a9:14:14:97:61:4a:02:55:33:23:16:
c9:67:9a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:21 2025 by rpki-client