Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32332d3233203d3e203238323334.roa
File: 3138392e3132372e3139322e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier: d3ua1nDyogzMNg0j7r2/26pgekASE23AFlBYe/ne3Fc=
Subject key identifier: 40:DC:5D:5A:DF:55:78:04:1E:77:5B:05:3E:96:8E:67:01:29:89:05
Certificate issuer: /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial: 1C820A6CE676F1AE6F28385B13E32654AA0F1C38
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32332d3233203d3e203238323334.roa
Signing time: Wed 20 Dec 2023 20:00:01 +0000
ROA not before: Wed 20 Dec 2023 19:55:01 +0000
ROA not after: Wed 18 Dec 2024 20:00:01 +0000
asID: 28234
IP address blocks: 189.127.192.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:82:0a:6c:e6:76:f1:ae:6f:28:38:5b:13:e3:26:54:aa:0f:1c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Validity
Not Before: Dec 20 19:55:01 2023 GMT
Not After : Dec 18 20:00:01 2024 GMT
Subject: CN=40DC5D5ADF5578041E775B053E968E6701298905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:0d:af:a9:a2:58:19:4f:ba:a0:6f:34:c6:
4c:19:1f:48:28:b6:f7:b5:1c:bd:3f:9e:1c:3a:b7:
f8:86:b8:b8:2e:8c:00:ac:88:43:03:41:a2:31:2e:
67:cd:8c:f2:18:df:f3:ea:97:f3:6a:3a:18:3f:2b:
2f:46:9a:3a:9f:ad:70:2a:88:9e:a9:94:47:ff:fe:
cc:fc:ab:67:03:76:a1:73:39:40:dd:54:bf:67:e6:
a2:73:e7:99:b1:61:48:76:41:4e:f2:5f:f3:e0:6e:
a2:ed:f6:aa:51:83:c4:15:84:db:0e:89:8c:3c:6c:
88:3b:88:38:64:36:93:24:27:c0:ac:0d:19:c0:63:
d8:fe:1c:0c:ef:2d:5b:38:fb:a2:3b:70:fc:73:a8:
13:34:2d:96:9e:05:35:49:b5:0c:25:a8:70:26:37:
0c:76:2a:78:c6:ee:f5:28:f3:7a:01:6c:75:2a:c4:
90:51:11:6b:17:33:25:c3:a4:aa:37:a5:26:a3:e6:
c2:78:f2:c8:db:54:01:b2:14:cb:d2:ba:55:0d:18:
c9:80:95:23:eb:56:d8:2f:c9:6b:fe:85:2f:93:5a:
27:97:a5:01:b6:cb:e2:ea:53:dc:bb:c9:b6:80:20:
c0:c6:55:13:7e:21:49:4b:82:65:23:2a:01:5a:22:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DC:5D:5A:DF:55:78:04:1E:77:5B:05:3E:96:8E:67:01:29:89:05
X509v3 Authority Key Identifier:
keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32332d3233203d3e203238323334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.192.0/23
Signature Algorithm: sha256WithRSAEncryption
20:26:0f:23:95:70:55:da:f9:95:da:70:96:b4:1b:2f:11:25:
a0:9c:4e:bc:2f:c9:2a:bf:87:05:6c:07:10:52:c0:97:ee:f1:
0d:a9:00:b9:c3:b4:1b:db:5b:78:aa:94:29:07:28:78:04:25:
29:32:8d:73:cf:1d:e8:7c:f8:c0:7f:18:51:18:a6:dc:8f:7d:
ae:1b:dc:54:37:c1:2d:70:02:3d:8d:bf:54:bd:89:75:b9:a7:
cd:84:99:9d:82:0b:14:8c:54:37:9f:31:05:fc:37:ad:de:61:
63:a5:d9:53:f4:80:9a:6f:ea:e4:e4:6e:ac:8a:59:84:78:44:
16:c8:72:0b:38:47:b3:7a:3c:03:fb:17:82:f3:41:94:8d:d4:
fe:09:3d:cf:6f:42:53:2d:90:98:1c:50:5b:d8:dc:1e:80:de:
e6:c4:d8:e2:b1:0c:8e:77:69:b1:ed:a6:d0:67:cd:e2:10:e8:
ff:41:cc:2f:d6:25:0c:33:5c:ce:33:5b:5e:9b:f9:31:0f:f6:
6c:50:be:45:18:eb:40:7c:e9:6b:b0:9a:af:a7:e2:14:6a:25:
05:09:4e:0b:19:aa:3d:90:d8:83:cb:e8:f4:6c:ef:cf:c8:aa:
f8:8b:a0:25:15:b6:4d:bb:5d:d4:22:d4:73:83:2b:cc:21:15:
76:08:01:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:15 2025 by rpki-client