Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230342e302f32322d3232203d3e203238323334.roa
File: 3138392e3132372e3230342e302f32322d3232203d3e203238323334.roa (raw, json)
Hash identifier: AdflPNYcm6h1MtznPOg8FoG7DN4oeUE77Os/Kmb+H0I=
Subject key identifier: BF:5C:F9:D3:AC:2A:B3:CD:F5:1C:C9:06:7A:B1:0A:A0:CF:D6:20:B8
Certificate issuer: /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial: 09E2B502994C3A066F36076D7FF92D3D9D923A18
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230342e302f32322d3232203d3e203238323334.roa
Signing time: Wed 20 Dec 2023 20:00:01 +0000
ROA not before: Wed 20 Dec 2023 19:55:01 +0000
ROA not after: Wed 18 Dec 2024 20:00:01 +0000
asID: 28234
IP address blocks: 189.127.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e2:b5:02:99:4c:3a:06:6f:36:07:6d:7f:f9:2d:3d:9d:92:3a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Validity
Not Before: Dec 20 19:55:01 2023 GMT
Not After : Dec 18 20:00:01 2024 GMT
Subject: CN=BF5CF9D3AC2AB3CDF51CC9067AB10AA0CFD620B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:39:1a:30:77:9f:d5:5e:84:dd:99:c2:8c:
d0:4a:8b:a0:07:14:4d:32:7f:10:5c:99:9d:57:e6:
00:49:8d:df:a3:e2:8a:f5:e7:13:d1:dd:dc:77:6a:
39:bb:eb:e7:2b:45:38:88:f9:9f:5d:ce:94:20:6b:
6b:73:f0:fe:7c:a1:85:a4:26:db:23:54:2c:5f:4d:
db:12:5e:72:c3:6f:f9:a2:c8:ca:49:c5:06:73:66:
7b:5b:cf:90:be:59:f2:3f:f3:91:54:cf:bb:7e:4a:
41:eb:b6:49:85:fc:2d:64:73:c7:2f:4b:89:e9:46:
b6:5c:9b:bc:d0:98:00:0b:b3:c6:26:05:30:7b:52:
92:03:51:fe:78:aa:ea:c7:c8:97:fd:9a:be:a7:2c:
b1:e8:06:48:b6:7e:a3:e8:8d:f4:aa:e5:f2:02:f9:
68:f1:f2:4a:4d:09:65:db:0e:32:2e:da:f4:c4:fa:
81:14:56:f5:bc:95:af:60:b8:20:2a:12:ed:01:ef:
94:5d:c3:15:5e:df:e1:32:9e:0e:31:49:92:bd:34:
b2:b0:e2:00:b4:f8:95:93:3c:ea:6d:91:41:49:a2:
24:4c:31:15:75:48:6d:ec:32:c9:25:3b:7d:76:38:
05:a8:85:d3:8b:32:5f:0c:eb:c2:9d:61:88:3e:af:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:F9:D3:AC:2A:B3:CD:F5:1C:C9:06:7A:B1:0A:A0:CF:D6:20:B8
X509v3 Authority Key Identifier:
keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230342e302f32322d3232203d3e203238323334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.204.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:81:70:06:bf:df:be:99:cc:98:87:bc:dd:8c:1c:6b:b0:54:
27:8c:5e:05:a8:ab:e1:66:89:4a:d8:99:80:2e:52:6f:2a:51:
91:46:ae:ef:a8:cd:7b:f9:ec:65:aa:98:be:0d:df:12:08:ed:
3f:03:10:e0:31:0c:87:d3:22:fb:79:ec:0a:1c:c4:2e:26:5e:
4c:25:1c:bf:53:8c:d0:e6:c7:67:51:c3:0b:04:59:68:00:b3:
72:c6:8e:86:8b:9b:cb:46:62:29:4f:c7:f5:43:5e:f2:b6:99:
0c:2e:95:dd:4f:3c:ef:c6:4c:d8:5b:05:23:2c:02:a0:24:b4:
f4:cc:39:0c:e8:3c:ac:c9:fa:16:35:0f:a3:56:26:82:8d:d2:
41:cc:25:81:bb:d8:e1:e6:1a:d0:38:07:05:89:16:a6:20:cd:
18:00:da:cd:22:48:bb:5b:1f:9a:be:33:12:2d:88:1b:c0:cf:
e5:79:12:fa:47:c9:1a:59:dd:0d:f2:c8:1b:b4:9d:e7:00:37:
75:ff:51:dd:f5:8f:c6:53:5b:b1:c5:b9:31:63:83:c4:bf:7e:
35:e1:8e:04:62:29:c1:1b:00:9f:bc:ee:9b:b8:ad:0b:5a:9b:
32:36:3d:de:cd:6f:41:7c:86:48:d0:f4:d0:4d:a7:8e:ee:5b:
12:32:c4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:02 2025 by rpki-client