Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230302e302f32312d3231203d3e203238323334.roa
File: 3138392e3132372e3230302e302f32312d3231203d3e203238323334.roa (raw, json)
Hash identifier: KzUbpcho1ckV/UT48MuIu4lo5WnTLdeeFQQK2ga49MI=
Subject key identifier: F3:0F:B9:49:7D:16:D9:1B:CC:FC:C6:37:DA:29:50:C4:91:3F:06:F7
Certificate issuer: /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial: 5FF5FB399DF729058522CEFA83F7642505E1C8A9
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230302e302f32312d3231203d3e203238323334.roa
Signing time: Wed 20 Dec 2023 20:00:01 +0000
ROA not before: Wed 20 Dec 2023 19:55:01 +0000
ROA not after: Wed 18 Dec 2024 20:00:01 +0000
asID: 28234
IP address blocks: 189.127.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f5:fb:39:9d:f7:29:05:85:22:ce:fa:83:f7:64:25:05:e1:c8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Validity
Not Before: Dec 20 19:55:01 2023 GMT
Not After : Dec 18 20:00:01 2024 GMT
Subject: CN=F30FB9497D16D91BCCFCC637DA2950C4913F06F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:44:ad:af:be:91:60:ba:fe:7e:00:5a:eb:
c2:84:a7:ab:a1:23:d3:03:a8:ea:22:8d:b1:3c:9f:
1a:8f:ad:97:a2:8d:22:34:74:49:c1:c6:a8:91:e6:
3a:fb:14:6d:70:34:49:ed:ae:e4:51:28:aa:5d:3e:
a0:19:39:9c:34:e4:ed:a5:2a:9f:3a:46:df:3e:33:
a6:43:33:54:a5:b3:02:60:7a:a4:aa:7c:c5:31:43:
3d:a3:eb:8d:f7:a8:54:ea:13:99:b4:fe:02:cc:81:
db:e8:53:18:30:2e:a0:cc:91:23:fb:4b:87:9c:97:
19:b0:3b:52:51:42:c4:dd:b8:fb:28:18:51:a8:57:
45:17:22:a6:9a:33:9a:2e:c8:bf:af:75:33:aa:bb:
dc:19:de:9f:69:ad:61:b9:f0:3f:f0:9b:ac:75:9b:
72:20:28:9c:6c:b7:36:14:81:ec:77:7a:a8:79:84:
1d:d1:13:cc:e7:49:de:69:16:0d:56:37:70:a7:10:
ef:52:fe:f4:7b:18:75:e7:5d:a3:2c:91:04:74:f5:
d1:eb:0c:16:b0:e9:ac:d4:ac:4d:f2:72:a1:93:b8:
9a:72:d0:5b:19:64:67:04:84:c4:1a:cf:fc:cb:41:
89:cf:19:af:86:88:d0:2f:ad:89:b7:17:3b:e5:69:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0F:B9:49:7D:16:D9:1B:CC:FC:C6:37:DA:29:50:C4:91:3F:06:F7
X509v3 Authority Key Identifier:
keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230302e302f32312d3231203d3e203238323334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.200.0/21
Signature Algorithm: sha256WithRSAEncryption
57:5b:c1:c2:4f:7b:4a:59:05:45:69:55:4f:05:c5:4c:76:21:
cd:94:6c:85:42:6d:df:69:53:e4:03:f0:72:cd:61:dd:01:07:
e4:82:11:35:ab:48:d5:a6:1f:ff:7d:02:13:da:37:ad:c3:4d:
7f:32:f7:6e:5d:7f:c5:a8:de:d3:0e:4e:45:78:aa:eb:58:62:
76:2b:5d:1f:d7:43:c7:e3:14:a5:89:d0:07:da:54:8a:c1:a4:
d3:f7:e0:54:a4:10:3f:71:29:09:80:b5:0b:5f:de:b5:c7:da:
f6:8b:a0:35:be:ec:6e:7c:45:35:a5:54:9c:ec:21:b9:0f:77:
68:ac:e6:5e:09:b4:e6:df:bf:50:a8:d5:74:18:88:b7:39:1f:
c3:41:fd:89:17:e5:d3:2a:85:92:88:90:ab:b0:52:b6:e5:41:
ac:e6:f7:6a:ac:13:c8:b4:e2:66:86:46:6d:a4:c5:28:09:95:
47:64:e3:23:f8:38:ef:00:d1:61:a1:ac:f5:f7:a1:0f:9c:48:
65:e1:e2:f0:ed:b0:1a:5c:aa:ac:b0:d5:eb:fa:3a:fb:77:09:
fa:32:0c:bf:5f:13:5d:c2:8e:04:71:5d:e7:cd:74:51:86:1b:
c0:d8:c7:3d:e8:dd:15:8d:00:4a:4d:31:84:3e:8d:d2:84:ba:
ac:7f:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:04 2025 by rpki-client