Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31302e302f32342d3234203d3e203238313832.roa
File: 3138392e38392e31302e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier: ke/NnPrEfWFGRO9F8F74ZDkUHv7idW/KSa9mj+8i29w=
Subject key identifier: D7:8C:E5:6C:0E:16:11:37:FD:A7:3B:4E:CA:10:3B:5F:04:B1:8C:B5
Certificate issuer: /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial: 30C042421073278AF4E4020F70E643446DD4F8F4
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31302e302f32342d3234203d3e203238313832.roa
Signing time: Thu 30 Nov 2023 12:45:40 +0000
ROA not before: Thu 30 Nov 2023 12:40:40 +0000
ROA not after: Thu 28 Nov 2024 12:45:40 +0000
asID: 28182
IP address blocks: 189.89.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c0:42:42:10:73:27:8a:f4:e4:02:0f:70:e6:43:44:6d:d4:f8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Validity
Not Before: Nov 30 12:40:40 2023 GMT
Not After : Nov 28 12:45:40 2024 GMT
Subject: CN=D78CE56C0E161137FDA73B4ECA103B5F04B18CB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:c5:69:30:c4:d7:86:a5:8b:08:38:ab:c0:
a2:92:af:0f:a2:4e:8f:23:59:51:6e:71:cc:06:1f:
63:30:ce:be:0b:52:4b:a2:99:02:98:c4:1f:44:a4:
35:2f:dc:e3:2c:8a:d2:86:8e:0c:d5:84:4f:69:b0:
db:d8:2e:a5:da:b4:af:d8:f7:0e:fc:32:0c:cf:b6:
27:3b:77:8d:e1:c7:10:3c:c0:8b:d9:ec:12:8a:1c:
24:d3:8e:38:30:93:fb:69:92:ec:b4:85:72:db:84:
cd:18:45:b3:c3:3e:a2:25:10:d6:2c:43:7f:7d:a8:
e2:cb:6a:17:bf:24:71:01:13:52:07:e3:9a:67:cd:
98:01:7c:0c:ad:eb:a9:40:53:84:a6:8a:8c:ab:3b:
d0:cf:73:d8:d8:d1:33:aa:b7:09:72:9f:f1:7c:2b:
ea:df:19:ae:ab:74:14:78:fe:d1:16:5e:78:97:e1:
79:10:b7:68:8d:ba:f1:eb:80:78:19:48:3e:b9:ec:
18:3b:f0:bd:af:7d:4a:34:79:8f:ba:dc:3e:05:cd:
bd:34:72:a8:20:38:b8:35:94:1b:54:13:bb:72:db:
f5:27:1c:ce:7a:02:b7:15:d6:0d:a2:3b:99:a4:4f:
84:bc:82:2b:32:45:f3:78:6a:1e:bc:56:93:5d:83:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8C:E5:6C:0E:16:11:37:FD:A7:3B:4E:CA:10:3B:5F:04:B1:8C:B5
X509v3 Authority Key Identifier:
keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31302e302f32342d3234203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.10.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c8:ce:ae:c0:c8:ba:f0:e5:0f:9e:5a:7c:9a:d4:bd:3f:13:
a2:4b:d4:8a:c9:23:af:07:e1:f4:17:6a:10:ba:02:25:b4:cd:
37:08:96:7b:1d:cd:fc:7b:ca:47:80:0e:e2:34:0b:5c:cb:df:
12:32:d3:6d:33:10:59:9b:1f:14:28:4e:0e:23:70:77:1e:7d:
da:6e:09:07:93:db:d8:3b:cc:77:0d:2b:e8:68:5b:aa:0c:37:
a9:42:41:02:d5:bf:e4:80:f3:28:d7:5b:d6:40:c2:1c:9d:7c:
a4:eb:23:58:78:f6:91:34:07:4a:d7:6f:a3:f8:4d:93:44:22:
00:c6:a3:14:c7:e8:5d:f6:d2:cb:4d:84:6f:05:1b:57:ec:ae:
52:48:c5:f5:7c:6f:ab:ba:43:c0:1f:2d:bc:59:c0:8e:c7:68:
a4:30:01:09:b4:35:f3:f7:d6:97:5b:86:d5:9c:cf:3b:c2:62:
f2:c7:d5:92:9d:0c:c1:80:c2:27:b5:37:17:74:2f:48:0c:fb:
9c:42:2f:31:31:65:a6:83:ef:62:32:0e:19:b9:e1:b9:87:94:
f1:6d:1c:18:e0:8c:09:25:83:13:08:74:0e:d8:0b:35:80:96:
8c:ae:ff:65:f4:19:41:74:2d:b1:7b:a2:04:9f:4f:3d:da:e0:
f1:80:79:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org