Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39342e302f32342d3234203d3e20323632373439.roa
File: 3138392e38392e39342e302f32342d3234203d3e20323632373439.roa (raw, json)
Hash identifier: KqWqUryIJHUWCOZtx+NIDr3Nuh6Pkyo7QorswsPCNNM=
Subject key identifier: E6:30:8C:4A:77:DD:60:FE:F7:08:61:67:30:47:34:37:24:0B:1D:31
Certificate issuer: /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial: 420F9549B1F5D88B24C0180F3B58E919704FF68E
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39342e302f32342d3234203d3e20323632373439.roa
Signing time: Thu 04 Apr 2024 06:00:27 +0000
ROA not before: Thu 04 Apr 2024 05:55:27 +0000
ROA not after: Thu 03 Apr 2025 06:00:27 +0000
asID: 262749
IP address blocks: 189.89.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:0f:95:49:b1:f5:d8:8b:24:c0:18:0f:3b:58:e9:19:70:4f:f6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
Validity
Not Before: Apr 4 05:55:27 2024 GMT
Not After : Apr 3 06:00:27 2025 GMT
Subject: CN=E6308C4A77DD60FEF708616730473437240B1D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:2b:55:af:e7:d3:89:41:c0:80:ee:9f:62:
e7:e0:5d:ea:05:2e:6a:a4:83:cf:82:d0:fc:6a:32:
42:c9:6f:e2:b8:34:22:a4:19:8b:44:a6:88:9b:46:
b3:a3:e3:09:18:66:bc:13:6d:74:b5:93:18:10:8c:
d5:ab:46:01:95:c5:7e:1d:3b:a3:f3:84:0a:c6:ab:
e3:6d:2d:06:2b:0e:19:d6:0a:d6:48:9f:46:d6:d1:
e0:b4:f6:44:e5:5f:e2:08:8f:39:2d:5a:a0:1d:f0:
f5:67:12:31:a3:98:ee:6f:98:e7:5d:2a:e2:99:a9:
a2:01:79:54:84:c0:42:a3:5f:0d:2d:e7:a9:9f:f4:
ba:2f:3c:b2:40:ee:3d:f7:35:ca:1e:a6:61:7e:66:
b5:af:df:dd:0c:8f:3f:bc:61:c5:2a:fb:0a:94:4d:
d7:10:64:6f:0e:76:1e:85:33:62:0c:c7:bc:ef:c4:
41:30:de:c4:cb:af:07:78:e2:87:a8:4a:7e:b0:f3:
d4:f5:9c:0f:ca:f4:0f:52:d9:9d:bf:ec:13:c2:c4:
00:3b:24:c8:9d:aa:e6:34:a8:ad:81:2d:d1:c9:2c:
af:a1:03:33:33:1c:54:aa:47:3d:f4:43:b9:a7:fb:
20:bc:84:8e:91:e5:7f:e0:a5:d4:1d:89:08:85:f4:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:8C:4A:77:DD:60:FE:F7:08:61:67:30:47:34:37:24:0B:1D:31
X509v3 Authority Key Identifier:
keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/3138392e38392e39342e302f32342d3234203d3e20323632373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:31:10:40:bf:08:e6:27:cf:49:ca:75:0d:8e:fb:85:45:c7:
af:33:c8:70:b3:21:77:be:42:c5:41:bc:d3:c1:45:fa:7d:1c:
4b:be:cb:b4:f2:a6:0d:c3:12:ab:b7:a9:45:af:f2:9d:52:03:
64:41:55:67:e0:82:bd:3f:e1:3d:0e:14:ab:dc:8f:ab:8c:78:
a3:8e:d8:f9:a0:52:9d:a2:1c:50:90:f9:72:26:e1:1d:c5:05:
01:5e:f5:34:97:b2:e5:29:5c:2c:dd:52:53:00:02:f3:9d:1b:
fc:a7:26:fb:61:9d:ab:56:50:21:9d:5f:4c:cc:10:e7:b4:98:
f3:17:e5:24:0c:d8:6c:93:ab:88:5e:eb:8f:d5:a3:10:51:83:
ba:56:19:7b:c0:d8:c5:e6:a5:f8:61:07:59:c6:c7:85:69:39:
7f:8f:7b:d3:7c:3f:ba:b7:98:fb:26:84:c5:de:ce:59:54:78:
fc:7a:a6:eb:80:44:48:b1:38:a9:1f:62:4b:34:7c:99:82:82:
e4:a0:85:2d:90:de:b8:46:d2:84:3e:af:46:8a:04:49:8e:06:
fe:bf:d8:40:5a:ac:2a:46:5d:c1:7d:89:09:a4:a5:21:3f:05:
11:04:8e:15:08:5c:bb:b0:fd:f3:15:e1:01:cd:e7:0c:26:84:
4d:9a:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:44:12 2025 by rpki-client