Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/3138312e3138392e382e302f32322d3234203d3e20323731333830.roa
File: 3138312e3138392e382e302f32322d3234203d3e20323731333830.roa (raw, json)
Hash identifier: Y7s2ZuHRoyA2vWGGf90vCVVXH+1XMCHHBF2pLQhYcG8=
Subject key identifier: 90:99:83:34:E5:C1:DA:CC:CD:D6:9F:83:C0:5D:63:A5:F4:75:14:19
Certificate issuer: /CN=CED693561B18E1F15DE112114489E7324E327A34
Certificate serial: 595C2160D3AA19F1D72FE4A0CE876DFBBB8B77C8
Authority key identifier: CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer
Subject info access: rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/3138312e3138392e382e302f32322d3234203d3e20323731333830.roa
Signing time: Tue 28 Nov 2023 19:41:43 +0000
ROA not before: Tue 28 Nov 2023 19:36:43 +0000
ROA not after: Tue 26 Nov 2024 19:41:43 +0000
asID: 271380
IP address blocks: 181.189.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5c:21:60:d3:aa:19:f1:d7:2f:e4:a0:ce:87:6d:fb:bb:8b:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CED693561B18E1F15DE112114489E7324E327A34
Validity
Not Before: Nov 28 19:36:43 2023 GMT
Not After : Nov 26 19:41:43 2024 GMT
Subject: CN=90998334E5C1DACCCDD69F83C05D63A5F4751419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:6a:e9:2e:b2:16:3f:2e:05:19:02:91:ec:
9a:09:07:2d:fc:a4:59:b3:cc:d6:6c:42:89:38:9d:
6f:a9:83:d4:4c:95:10:5a:94:1d:5e:c4:3f:46:e7:
34:4a:d0:29:ab:76:4b:18:23:d6:dc:3c:7c:c0:da:
f3:2f:1b:6a:61:0f:90:db:3c:0a:d2:98:f5:45:07:
82:73:04:9d:ed:d2:1c:a4:48:f6:50:b8:32:25:fc:
63:1c:8a:5c:1b:17:15:c1:e8:d5:d1:7f:62:f5:c8:
41:42:7e:37:2e:46:32:f9:06:15:0c:93:90:7c:00:
8e:1a:5b:c9:2f:f3:29:2e:5d:e6:22:d5:38:07:de:
67:0e:86:f9:14:2c:7a:d8:47:86:d4:51:db:94:50:
4d:fe:f5:01:af:31:8e:07:c9:a1:af:fc:40:25:40:
c6:c8:27:15:55:59:cc:3b:8a:f6:47:04:45:d0:d6:
07:dd:f8:8d:f3:45:46:e5:0c:20:1c:9d:aa:09:b1:
29:4e:98:83:55:9d:e3:ff:e0:40:d7:ab:44:61:a0:
b4:55:90:60:1d:93:c2:ea:c6:e9:a4:5d:7b:a1:21:
35:8a:05:7f:cf:71:c4:65:df:0e:68:43:3d:71:9d:
78:dd:8f:93:8f:f7:cf:69:65:7a:35:38:f4:f0:4b:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:83:34:E5:C1:DA:CC:CD:D6:9F:83:C0:5D:63:A5:F4:75:14:19
X509v3 Authority Key Identifier:
keyid:CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/CED693561B18E1F15DE112114489E7324E327A34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/3138312e3138392e382e302f32322d3234203d3e20323731333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.8.0/22
Signature Algorithm: sha256WithRSAEncryption
91:f5:f7:a8:97:79:cb:87:f3:fd:63:e8:8d:03:f1:04:41:44:
d1:41:07:5d:2b:b5:05:89:f2:eb:a0:a1:23:80:45:a8:36:e9:
4a:82:a6:be:99:ad:0c:70:bb:2e:87:49:81:8e:44:0b:6f:ba:
7e:9f:5a:59:7e:bf:be:26:49:19:9f:cb:05:81:de:ab:5b:fc:
cf:fa:c5:31:07:69:2f:0e:1e:e2:4d:54:a4:0b:3a:db:14:1c:
b9:2c:04:56:6c:64:8f:92:1c:45:a1:66:80:37:1c:02:61:82:
e4:ca:e5:87:25:a9:8b:38:08:c8:a7:04:33:c5:c7:dc:3a:80:
53:17:9d:66:a8:b8:e3:81:14:20:00:3f:08:7a:19:21:71:f5:
47:d0:b1:74:a1:27:27:d9:0d:09:f0:a5:50:68:67:ec:a5:db:
d1:c9:40:37:a8:e5:5a:95:fc:e9:dc:84:98:7e:45:39:66:84:
0d:b9:73:b1:80:76:3c:d1:53:5e:5e:5d:07:4a:8c:16:6e:e4:
ff:79:50:db:87:79:b4:d2:4f:e7:0f:d7:b2:bd:40:1e:13:00:
04:3e:d9:77:0a:06:5c:5a:ab:af:c2:1b:44:a5:9e:10:ae:23:
0a:17:98:8b:10:4a:dd:16:9c:2b:82:62:fa:2e:cd:98:ad:9f:
63:58:95:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:53 2025 by rpki-client