Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3233203d3e203238323737.roa
File: 3138392e31342e38302e302f32302d3233203d3e203238323737.roa (raw, json)
Hash identifier: Rd/U5OTVXAsFuF+V88FKXaOE3pMKnwLAyx+Iu6v4OLA=
Subject key identifier: 45:99:94:D1:05:0D:9C:0D:21:FF:4B:F6:65:E3:6C:AD:68:74:B9:5F
Certificate issuer: /CN=B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF
Certificate serial: 2A91B43A87E665AA2DA203B6A0519D92FAD5739F
Authority key identifier: B9:2A:7D:29:F2:28:4F:4F:BC:E5:8E:9F:B1:88:3B:BD:15:BE:3D:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3233203d3e203238323737.roa
Signing time: Tue 31 Jan 2023 17:43:35 +0000
ROA not before: Tue 31 Jan 2023 17:38:35 +0000
ROA not after: Tue 30 Jan 2024 17:43:35 +0000
asID: 28277
IP address blocks: 189.14.80.0/20 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:91:b4:3a:87:e6:65:aa:2d:a2:03:b6:a0:51:9d:92:fa:d5:73:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF
Validity
Not Before: Jan 31 17:38:35 2023 GMT
Not After : Jan 30 17:43:35 2024 GMT
Subject: CN=459994D1050D9C0D21FF4BF665E36CAD6874B95F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:88:52:a8:50:4b:75:56:83:ad:74:5b:06:
18:6c:45:a5:f4:dd:f8:59:4b:0b:6a:b6:c7:a0:17:
7f:aa:a8:85:e4:c1:86:e6:51:e6:b4:e0:da:73:a9:
34:1b:98:ca:bf:76:13:c3:0e:da:d8:4e:ef:96:41:
a7:a8:d0:cc:99:ab:98:3b:af:e3:3d:10:af:e4:28:
1b:e3:ad:f6:b2:ac:a2:2d:8a:00:96:6a:c9:84:07:
28:2e:6f:36:df:dc:36:e7:46:b9:46:13:6a:62:17:
25:59:b3:c0:75:9a:9b:ee:83:fc:84:c3:42:cf:ec:
c9:7c:a9:02:32:db:c8:b6:59:91:7f:6f:63:6e:d1:
a4:4d:0e:6e:cc:07:22:57:9a:81:26:9b:06:1b:01:
90:58:cd:bb:67:3e:61:de:e8:38:c5:8c:53:b6:c7:
17:f6:5c:21:7b:35:52:fc:3d:1b:63:ad:d5:bc:45:
15:6b:49:bc:b2:70:40:e1:71:f0:5f:30:7c:39:2b:
33:d4:74:94:65:ea:23:95:fe:bb:35:2a:d4:94:49:
50:87:da:0f:9d:f6:96:5e:be:8f:05:48:d6:c2:8d:
70:7d:cc:54:31:dc:27:e1:58:b1:9b:3d:04:89:e5:
65:be:c8:59:69:47:1b:04:a5:cf:dd:5c:12:ab:ff:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:99:94:D1:05:0D:9C:0D:21:FF:4B:F6:65:E3:6C:AD:68:74:B9:5F
X509v3 Authority Key Identifier:
keyid:B9:2A:7D:29:F2:28:4F:4F:BC:E5:8E:9F:B1:88:3B:BD:15:BE:3D:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3233203d3e203238323737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.14.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:7f:18:c1:1d:23:b5:6b:f4:f3:b8:20:cf:65:f9:f8:29:d1:
65:71:b0:d5:b9:51:55:9b:d8:8f:f9:03:53:7d:a9:99:34:39:
fd:21:db:f4:c5:72:a9:59:2d:65:4b:f1:2e:0a:3f:12:1e:1e:
6c:7f:27:89:c6:b0:40:e9:a3:b8:fe:23:51:40:07:a0:4a:2d:
62:23:44:b5:74:c3:fc:ae:4c:a8:b1:cb:de:fd:1c:2f:06:45:
35:da:df:a7:50:cb:8e:a7:75:56:20:53:74:22:17:93:ce:9a:
1c:2d:d2:d4:50:09:7b:46:ab:5f:90:97:9d:30:eb:bf:96:ef:
85:37:d8:7f:28:d9:e5:ee:fc:7d:11:ba:51:ac:13:29:e0:7a:
cc:8d:0f:21:06:2a:f2:97:1e:a3:0f:29:f3:9a:09:1f:4d:ad:
8e:ec:ca:cb:51:39:80:74:a0:67:0c:31:74:c8:26:04:90:c0:
74:c7:83:a5:84:78:ac:05:57:73:63:d7:3b:b6:bd:cd:c1:51:
89:c7:d7:a8:e0:b1:23:d8:4d:b9:1f:77:4b:db:35:21:2c:5a:
0d:c7:5b:c7:40:e9:78:38:fa:42:bd:52:99:2d:4a:56:9d:29:
15:af:1a:3e:3c:27:46:7c:77:cd:29:11:ab:c8:0a:c9:55:86:
8d:c8:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:40 2025 by rpki-client