Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38302e302f32332d3233203d3e20323632373439.roa
File: 3138392e38392e38302e302f32332d3233203d3e20323632373439.roa (raw, json)
Hash identifier: c0sPk2l1esJ/ncZCfh+SLlE/TlndE6RVzJoHM4v9IcI=
Subject key identifier: 58:73:6D:20:CC:B6:6B:44:E3:0B:2E:36:B7:FC:07:38:28:EF:4A:FF
Certificate issuer: /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial: 41F721F9D7E693422E3032726F97EAF0C9A62FE4
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38302e302f32332d3233203d3e20323632373439.roa
Signing time: Thu 04 Apr 2024 06:00:25 +0000
ROA not before: Thu 04 Apr 2024 05:55:25 +0000
ROA not after: Thu 03 Apr 2025 06:00:25 +0000
asID: 262749
IP address blocks: 189.89.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f7:21:f9:d7:e6:93:42:2e:30:32:72:6f:97:ea:f0:c9:a6:2f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
Validity
Not Before: Apr 4 05:55:25 2024 GMT
Not After : Apr 3 06:00:25 2025 GMT
Subject: CN=58736D20CCB66B44E30B2E36B7FC073828EF4AFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:f3:fc:1d:77:7b:9c:d6:b9:92:cd:74:3f:
6a:b4:00:b5:49:9b:48:97:f3:86:80:44:29:4c:7a:
25:5a:be:c2:35:d5:1e:94:4a:a2:07:49:e8:cb:64:
65:55:e7:d0:c7:e8:7b:b8:e6:4d:cc:cc:89:18:e3:
b7:d7:22:a7:91:b0:92:85:8c:72:97:53:ea:d3:3c:
23:e9:31:e9:f0:ef:38:d7:20:65:ae:c4:4b:f0:ad:
d7:1b:15:79:2f:bd:f1:24:f3:ef:0c:24:d6:fe:a1:
50:24:98:ff:74:3f:89:61:62:d1:fd:f8:e0:78:52:
b4:74:3a:47:14:1a:38:c3:8d:40:1a:59:fc:40:da:
53:ee:6e:e9:cd:78:b8:a0:81:69:c8:8a:40:c9:ba:
1b:df:fa:98:55:8b:46:5d:5c:75:07:f0:86:a8:ac:
9e:14:fe:30:35:73:b7:40:a6:93:1c:67:30:9f:eb:
88:a6:aa:55:2c:4b:82:f0:10:0c:67:6e:4c:b2:be:
27:bc:b3:bb:62:f4:63:90:18:fe:4e:45:5d:27:29:
ca:8a:1e:f4:74:5a:e0:f6:0c:b4:e8:1a:be:e0:97:
2c:c5:60:52:00:a4:cd:7d:a7:97:ec:5d:a5:6e:6b:
8d:b1:ac:ad:4d:f4:4e:8d:91:f4:77:36:51:68:5e:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:73:6D:20:CC:B6:6B:44:E3:0B:2E:36:B7:FC:07:38:28:EF:4A:FF
X509v3 Authority Key Identifier:
keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e38302e302f32332d3233203d3e20323632373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.80.0/23
Signature Algorithm: sha256WithRSAEncryption
18:14:f8:c2:b4:80:5a:48:9d:20:5d:26:48:60:5e:ed:a1:b4:
d2:f9:c0:e4:9e:b0:da:b8:ff:7c:8e:92:1e:c7:24:4f:1a:77:
b5:f7:f4:c6:b6:cc:dc:ac:34:dd:d5:dc:22:2b:98:59:9c:31:
d5:14:3d:dd:20:99:ce:e5:27:32:30:92:68:f8:1b:25:4b:45:
69:e0:d7:ec:c6:f5:c3:8d:ef:79:c8:80:a9:f0:31:e5:9a:a8:
7d:d6:99:35:bc:d1:ad:b5:7d:96:96:8a:6a:8f:6e:80:6d:da:
a4:a7:52:a4:a2:37:a2:84:01:a2:18:32:5c:66:f6:b2:da:52:
d8:cd:1a:76:20:4e:fb:3c:6a:1b:01:b9:e7:9b:d8:49:b9:ae:
7e:75:e0:45:6f:64:b1:54:0c:bc:85:ba:69:ee:23:dd:5f:65:
0b:8a:54:65:9d:ff:db:3e:9f:5d:97:4e:b7:a9:f7:89:18:2f:
5b:2d:42:e4:c8:a9:3a:53:44:5d:59:b3:37:f2:2e:6f:ce:17:
a6:b9:72:c3:ca:3c:02:76:59:74:31:ed:ff:85:da:5a:88:4b:
d5:69:46:3b:55:4e:f8:75:fd:58:d7:c9:4f:6a:c8:7c:3a:cb:
d6:1b:fa:26:5c:33:23:de:ab:75:44:af:a5:6d:97:76:68:71:
9f:3b:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:19:07 2025 by rpki-client