Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31342e302f32342d3234203d3e203238313832.roa
File: 3138392e38392e31342e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier: ULQeu4W5zr+bx1zVD4bIuOPYqvJTf7/qqXmZ5lfF9y8=
Subject key identifier: D6:8B:D8:8E:77:03:52:68:16:4C:2C:55:90:12:AC:C4:9B:11:54:4E
Certificate issuer: /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial: 7005A33B66EE77ED7A51817EE2B9726E4EB4EF72
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31342e302f32342d3234203d3e203238313832.roa
Signing time: Fri 05 Apr 2024 01:05:14 +0000
ROA not before: Fri 05 Apr 2024 01:00:14 +0000
ROA not after: Fri 04 Apr 2025 01:05:14 +0000
asID: 28182
IP address blocks: 189.89.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:05:a3:3b:66:ee:77:ed:7a:51:81:7e:e2:b9:72:6e:4e:b4:ef:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
Validity
Not Before: Apr 5 01:00:14 2024 GMT
Not After : Apr 4 01:05:14 2025 GMT
Subject: CN=D68BD88E77035268164C2C559012ACC49B11544E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:19:a2:2a:48:38:36:67:c2:39:8e:db:ec:
98:1e:3d:6f:75:37:ee:2c:42:ca:4a:c4:61:67:e2:
0d:52:99:d1:c5:d3:eb:99:d6:d5:82:c5:2f:35:f8:
a2:b7:f8:aa:00:df:59:5b:72:21:43:0b:c1:98:4c:
c0:09:41:0f:58:c0:5f:c8:97:e4:fc:aa:5c:78:2e:
53:7a:86:97:3c:9e:4f:c5:28:6b:63:e8:28:81:03:
2d:52:22:ef:5f:31:59:7d:6a:f7:bf:fc:6e:0c:eb:
40:9b:47:6c:d8:cf:36:cc:67:3e:a3:b3:c5:6f:f0:
82:05:0f:02:b3:a0:44:fa:07:27:db:93:1b:4e:64:
12:b2:a5:61:de:8d:c8:5b:62:b9:46:55:7a:7e:77:
77:3c:59:b4:ba:a0:21:7e:9e:e9:80:71:30:b0:b0:
3f:4a:12:23:2f:33:11:00:c6:9b:30:a8:0b:4a:6f:
42:11:e0:f9:c4:23:1e:93:58:70:fa:c6:74:a5:b5:
59:4a:2b:f1:8b:e5:8b:52:6f:ef:59:41:98:bd:40:
29:fe:63:7d:85:d7:3c:d1:27:cc:d8:e9:05:98:7a:
95:39:17:d7:cd:9a:99:a0:81:9a:22:4e:3f:51:a7:
8d:e7:24:50:ec:a7:88:0f:8a:5d:e9:a7:fd:19:e7:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8B:D8:8E:77:03:52:68:16:4C:2C:55:90:12:AC:C4:9B:11:54:4E
X509v3 Authority Key Identifier:
keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31342e302f32342d3234203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.14.0/24
Signature Algorithm: sha256WithRSAEncryption
67:92:da:a1:d0:ae:8f:32:e9:5e:b3:23:0f:d9:f2:04:c3:21:
86:f7:81:17:7d:e1:b6:06:c6:71:07:3e:a8:98:3a:4a:30:75:
3d:f2:6f:bb:73:3f:71:c1:ff:aa:48:b7:db:b0:e8:92:39:be:
fb:d3:6b:46:96:66:38:1b:a0:94:e5:c3:b6:2d:54:0c:7d:18:
73:f8:b0:c4:99:9a:94:88:0a:ea:a0:98:b5:fd:6d:1b:e6:e0:
3f:1d:ea:cf:6e:f9:85:2a:5b:cb:ea:7a:7f:7e:ff:38:59:0e:
fe:7c:72:60:56:a9:4e:53:64:a8:e9:c9:56:c8:da:6f:84:88:
8b:e0:d5:6e:05:89:0d:15:0d:5e:b4:57:f1:bf:19:d3:82:36:
af:43:27:e5:5c:a3:7f:0c:94:0f:b3:00:f9:89:52:6a:a7:9e:
30:2e:b1:9e:c6:98:3e:cb:d1:99:77:c5:6a:39:53:3f:eb:e6:
5d:be:f3:21:0c:dd:7b:a4:9a:91:f1:03:d2:75:4d:3b:74:4a:
c5:9f:34:5c:f2:2f:51:50:c5:e2:46:68:03:74:08:c2:95:ab:
98:01:96:f3:a5:06:34:60:f3:72:d6:bc:59:1f:ff:2a:73:f8:
d8:39:a8:ee:4d:e4:60:9f:d7:2a:0c:40:f8:95:8d:5e:90:4d:
cd:2c:e5:a7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUcAWjO2bud+16UYF+4rlybk6073IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCOUM1ODI3MzBDMjhCMjk3OTU3NjEyNTMzRTcwN0Uy
QTZFNjk5MDAeFw0yNDA0MDUwMTAwMTRaFw0yNTA0MDQwMTA1MTRaMDMxMTAvBgNV
BAMTKEQ2OEJEODhFNzcwMzUyNjgxNjRDMkM1NTkwMTJBQ0M0OUIxMTU0NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgzhmiKkg4NmfCOY7b7JgePW91
N+4sQspKxGFn4g1SmdHF0+uZ1tWCxS81+KK3+KoA31lbciFDC8GYTMAJQQ9YwF/I
l+T8qlx4LlN6hpc8nk/FKGtj6CiBAy1SIu9fMVl9ave//G4M60CbR2zYzzbMZz6j
s8Vv8IIFDwKzoET6ByfbkxtOZBKypWHejchbYrlGVXp+d3c8WbS6oCF+numAcTCw
sD9KEiMvMxEAxpswqAtKb0IR4PnEIx6TWHD6xnSltVlKK/GL5YtSb+9ZQZi9QCn+
Y32F1zzRJ8zY6QWYepU5F9fNmpmggZoiTj9Rp43nJFDsp4gPil3pp/0Z56SpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU1ovYjncDUmgWTCxVkBKsxJsRVE4wHwYDVR0j
BBgwFoAUFrnFgnMMKLKXlXYSUz5wfipuaZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMS8xNkI5QzU4MjczMEMyOEIyOTc5NTc2MTI1MzNFNzA3RTJBNkU2OTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2QjlDNTgyNzMwQzI4QjI5
Nzk1NzYxMjUzM0U3MDdFMkE2RTY5OTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzEv
MzEzODM5MmUzODM5MmUzMTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1ZDjANBgkqhkiG9w0BAQsFAAOCAQEAZ5LaodCujzLp
XrMjD9nyBMMhhveBF33htgbGcQc+qJg6SjB1PfJvu3M/ccH/qki327Dokjm++9Nr
RpZmOBuglOXDti1UDH0Yc/iwxJmalIgK6qCYtf1tG+bgPx3qz275hSpby+p6f37/
OFkO/nxyYFapTlNkqOnJVsjab4SIi+DVbgWJDRUNXrRX8b8Z04I2r0Mn5VyjfwyU
D7MA+YlSaqeeMC6xnsaYPsvRmXfFajlTP+vmXb7zIQzde6SakfED0nVNO3RKxZ80
XPIvUVDF4kZoA3QIwpWrmAGW86UGNGDzcta8WR//KnP42Dmo7k3kYJ/XKgxA+JWN
XpBNzSzlpw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org