Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39312e302f32342d3234203d3e20323632373439.roa
File: 3138392e38392e39312e302f32342d3234203d3e20323632373439.roa (raw, json)
Hash identifier: LcLhuRM4fQH0vnEWSHWUmh8lwIhSU4Qqm7kq/CG/vMc=
Subject key identifier: 39:1D:C1:CF:CC:77:06:A9:CD:AC:70:C0:7F:20:EA:95:EC:F2:96:70
Certificate issuer: /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial: 0B52ECD6522F74057674D3E6F538F0DE1411B24D
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39312e302f32342d3234203d3e20323632373439.roa
Signing time: Thu 04 Apr 2024 06:00:25 +0000
ROA not before: Thu 04 Apr 2024 05:55:25 +0000
ROA not after: Thu 03 Apr 2025 06:00:25 +0000
asID: 262749
IP address blocks: 189.89.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:52:ec:d6:52:2f:74:05:76:74:d3:e6:f5:38:f0:de:14:11:b2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
Validity
Not Before: Apr 4 05:55:25 2024 GMT
Not After : Apr 3 06:00:25 2025 GMT
Subject: CN=391DC1CFCC7706A9CDAC70C07F20EA95ECF29670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:55:61:06:44:d1:00:a7:19:bf:f8:95:15:
84:3c:bd:e0:ee:bb:80:46:ff:1c:82:cc:4c:91:58:
a5:07:67:9a:d0:63:53:5a:05:37:c9:92:16:87:1f:
45:e8:a1:c9:2b:ac:3b:66:bc:18:df:c0:2c:8f:69:
b2:61:7b:c6:fe:bd:34:18:fb:a2:9e:a6:f7:85:85:
74:3f:8f:e2:b4:7a:c7:be:9a:5f:f9:67:88:06:c2:
91:b5:71:44:72:b7:2e:75:ff:f9:80:dc:8d:b1:d7:
f4:47:02:ab:26:2d:fc:e7:bd:d6:0f:54:47:9a:68:
10:97:a2:d0:0b:67:57:08:18:22:0a:66:22:3e:f1:
87:ac:4c:c6:c0:ab:53:70:9a:fb:b9:cc:d7:02:de:
54:7d:c7:48:30:af:ae:cc:bf:9b:51:31:23:aa:44:
82:73:96:a1:fb:17:bb:4c:44:08:bf:3f:6a:1e:1f:
0b:a1:d3:d0:9e:05:82:e5:e2:a7:4a:1e:4a:f4:89:
51:d5:a9:56:80:4f:8c:5d:18:71:80:45:c5:b6:5a:
99:99:1b:3f:4b:09:4c:ea:10:4f:31:47:33:03:da:
1e:ce:b5:af:de:8e:9b:bd:6a:4f:70:43:38:a6:9f:
d7:7b:58:1b:d1:59:b3:9f:df:c7:dd:97:9b:50:99:
a4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:C1:CF:CC:77:06:A9:CD:AC:70:C0:7F:20:EA:95:EC:F2:96:70
X509v3 Authority Key Identifier:
keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39312e302f32342d3234203d3e20323632373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.91.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e5:a0:28:9d:63:88:f8:1c:60:b3:69:29:b0:f1:5e:70:8c:
4d:59:69:dd:19:8e:50:ac:8d:ec:57:59:17:51:a6:3c:bf:e6:
0f:27:95:76:45:0b:0f:68:5a:e5:b2:c9:b9:7c:8b:ab:c9:e5:
ff:85:30:79:48:45:95:2a:66:50:7e:c1:be:ce:01:43:db:23:
5a:54:eb:ce:f2:48:0d:32:c1:be:97:fa:af:84:91:a6:12:be:
ea:81:84:b0:9a:c7:9c:b9:0d:72:12:9a:9f:91:4e:7e:f5:f7:
44:8e:84:5c:ba:53:59:8e:33:2c:7d:a4:52:63:e9:3b:f4:42:
48:e6:e3:fe:41:f2:0a:9e:19:93:27:29:77:5a:5d:b5:d6:33:
53:14:13:bb:42:a7:2e:23:b1:ae:5f:ad:0c:1d:83:b8:4d:c5:
2b:4b:9d:25:b0:b4:02:60:f6:c4:30:78:29:7a:9f:ed:fd:75:
fd:cf:1c:e2:c1:c1:64:06:bc:ca:55:0f:81:81:a9:07:d7:ff:
d8:1a:84:ed:93:7f:1d:b1:58:fa:79:92:cf:7b:94:bf:0a:97:
92:47:6c:d2:79:3d:99:21:c9:23:3d:d4:40:ed:9e:95:5f:1b:
47:04:14:ef:59:13:fd:24:5c:36:d9:33:55:1b:83:24:66:99:
66:b1:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:49:33 2025 by rpki-client