Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131332e302f32342d3234203d3e203238333638.roa
File: 3138392e38342e3131332e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier: w/PGSY+FrXpPMnM/D9q8vzdEV48ItthrFD1ZCLifvz8=
Subject key identifier: D4:0B:C2:FB:CD:D8:6B:75:0A:B7:07:50:76:82:50:26:31:D1:9E:E6
Certificate issuer: /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial: 535BE538EA97154528682835AA36522711885173
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131332e302f32342d3234203d3e203238333638.roa
Signing time: Thu 04 Apr 2024 02:26:14 +0000
ROA not before: Thu 04 Apr 2024 02:21:14 +0000
ROA not after: Thu 03 Apr 2025 02:26:14 +0000
asID: 28368
IP address blocks: 189.84.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:5b:e5:38:ea:97:15:45:28:68:28:35:aa:36:52:27:11:88:51:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Validity
Not Before: Apr 4 02:21:14 2024 GMT
Not After : Apr 3 02:26:14 2025 GMT
Subject: CN=D40BC2FBCDD86B750AB707507682502631D19EE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:fa:3f:19:64:b5:a5:ba:35:c7:63:7e:ba:
06:70:f8:39:3a:15:31:03:a9:9b:16:72:5c:cd:e4:
37:8c:b3:da:85:1a:e4:38:59:50:84:84:7c:f4:04:
67:70:9b:4c:9f:b7:ee:c8:d7:6a:13:5c:05:83:87:
84:e6:61:0c:14:c1:19:55:19:29:32:26:43:c6:e7:
f2:57:26:d3:be:26:17:37:e3:53:57:52:d9:50:e8:
22:9f:e6:4e:09:b1:24:6c:b7:a7:8d:2b:a6:87:d6:
97:bd:1a:d5:de:d7:be:2b:2e:17:5d:21:b7:fa:11:
02:0a:2a:35:5c:03:03:d7:98:63:6b:56:a4:f5:15:
f5:ca:4b:40:57:08:d3:d8:08:83:a2:f6:00:1f:a1:
25:87:69:db:75:46:7a:48:b8:e6:38:25:c7:d4:f4:
03:7a:ef:38:a5:12:6c:64:3e:c1:ae:45:54:75:e2:
cf:da:27:bd:4f:f6:4a:11:e6:97:d5:3f:3b:7d:e2:
5e:e9:f3:62:34:fe:49:0a:39:86:42:b5:e0:d4:43:
e3:61:b2:14:2e:70:91:25:bc:3f:06:ce:ec:d3:4e:
34:ad:0e:ce:36:1e:de:96:e9:35:c5:e6:0e:63:f4:
9d:f6:ca:aa:80:6f:18:bc:09:25:f5:3e:07:43:93:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0B:C2:FB:CD:D8:6B:75:0A:B7:07:50:76:82:50:26:31:D1:9E:E6
X509v3 Authority Key Identifier:
keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131332e302f32342d3234203d3e203238333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.84.113.0/24
Signature Algorithm: sha256WithRSAEncryption
94:97:78:3b:58:55:33:fe:9e:8c:68:3d:c7:68:f4:2f:2f:54:
38:bc:ca:ef:a7:7e:6b:e1:a2:21:7a:0e:a8:a8:ad:78:36:dd:
f6:36:26:c9:1f:4d:d7:37:ac:e1:69:3b:83:3a:0a:cd:bb:df:
0a:4a:4c:d7:f4:54:51:a1:d9:d7:9e:65:93:32:2e:8a:6b:52:
87:2d:28:a1:ce:95:d5:9f:1d:ba:4b:88:44:21:93:16:36:1b:
f8:ad:bd:a2:64:ca:31:13:38:33:3e:ee:2c:8b:e0:f8:b8:65:
b5:94:f7:a3:ee:11:35:83:37:42:28:ae:64:d2:ef:4d:76:b1:
75:5a:3a:bf:07:34:38:9f:50:19:f4:b2:f7:84:4f:6c:7f:6b:
de:cf:58:0b:20:cb:9b:e2:72:5a:97:e1:c0:b2:ce:b2:f1:f5:
06:25:f8:16:f8:71:ce:9e:38:71:81:c7:3f:21:d6:ed:f5:6f:
d0:63:2f:3d:9e:3b:01:d9:0f:eb:ce:75:29:80:7f:42:de:a8:
9c:56:ba:41:4e:f0:1c:c8:db:52:5e:ed:2d:a9:1c:43:53:e4:
9b:02:2d:78:b6:8d:f9:54:60:8c:99:18:65:33:48:ba:08:ce:
5c:00:3c:bc:11:c9:82:a8:6d:ec:56:91:81:51:0e:95:29:b4:
bb:8e:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:07 2025 by rpki-client