Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32372e302f32342d3234203d3e203238323230.roa
File: 3138392e34352e32372e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: yUT5kG0Y8p+K6O4SqTNTb5O179UMO8QnbPrxrw3uLaM=
Subject key identifier: 82:99:D0:E0:39:86:09:76:DA:71:6D:3F:5C:FE:8F:39:F9:0D:DB:AE
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 1B274F02804CC9D0CBED74869B9B5BFA342DD482
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32372e302f32342d3234203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:27 +0000
ROA not before: Mon 08 Apr 2024 20:00:27 +0000
ROA not after: Mon 07 Apr 2025 20:05:27 +0000
asID: 28220
IP address blocks: 189.45.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:27:4f:02:80:4c:c9:d0:cb:ed:74:86:9b:9b:5b:fa:34:2d:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:27 2024 GMT
Not After : Apr 7 20:05:27 2025 GMT
Subject: CN=8299D0E039860976DA716D3F5CFE8F39F90DDBAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9f:e3:41:1d:4a:e3:0e:a6:00:70:0d:bc:47:
96:39:a9:40:d6:ed:c9:82:74:ed:fe:49:59:76:35:
b7:48:5b:4d:74:6d:5a:c6:44:c0:03:ba:89:ac:30:
b5:2d:0d:ff:0f:ca:d9:92:b8:34:68:65:4d:49:d8:
a0:85:ee:fb:f3:8c:30:9d:79:57:37:b4:bc:2c:89:
96:83:24:a2:a2:53:25:f2:08:13:af:96:2d:b3:4c:
72:a1:8b:04:38:2f:60:65:f1:17:c5:92:33:7e:c2:
83:7c:0f:83:b3:17:82:37:dc:e8:13:07:04:55:8d:
85:3f:3b:0c:a5:51:14:65:75:56:c5:44:3b:fd:bc:
85:e2:0a:13:f4:33:ba:35:7e:28:ed:fb:1b:d9:1d:
79:d7:4d:6d:c8:83:f0:8a:cd:11:c5:d8:71:74:c0:
1a:f1:00:5a:43:85:58:9b:75:f1:97:cf:ff:6d:e0:
34:1a:bd:fe:7a:8e:43:c9:0c:e6:d0:57:02:36:57:
82:87:d2:9b:a6:be:89:7f:6e:94:54:1c:34:64:26:
24:c4:71:5d:c8:52:29:2c:f4:ab:cb:b2:5a:4a:74:
9e:eb:89:30:16:7c:bb:71:ca:9f:c9:27:b9:ba:c6:
81:6f:42:46:da:67:65:fc:d9:8c:0a:4f:53:42:92:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:99:D0:E0:39:86:09:76:DA:71:6D:3F:5C:FE:8F:39:F9:0D:DB:AE
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e32372e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.27.0/24
Signature Algorithm: sha256WithRSAEncryption
65:85:a1:45:9c:37:10:e2:0b:9e:fe:87:ce:31:7f:5d:21:32:
58:09:91:7a:e8:ed:94:f7:8a:2b:da:7b:ed:cb:8f:22:7f:c1:
91:8a:5b:d7:6d:d5:00:75:19:bd:6e:34:83:3f:15:c2:0a:af:
20:98:69:d3:92:7f:23:1b:e1:fd:97:e5:9c:74:64:06:a1:ea:
bb:95:d1:48:20:e8:a8:fc:ab:3f:2c:e5:41:2e:05:3c:5e:ed:
71:63:99:9a:04:41:f1:90:d7:4f:b1:e7:03:1d:f1:ba:56:ce:
a4:46:1a:9e:71:c4:42:76:9d:67:db:ec:26:d6:04:31:c5:19:
c8:cc:a9:dd:d9:a7:04:a9:f0:b6:62:fb:0d:c1:09:1f:dd:6d:
8b:62:24:51:15:1e:7a:da:45:0f:e2:30:6c:8d:a3:8b:78:a0:
df:93:fb:94:31:32:ad:58:42:dc:77:1a:4d:a8:23:89:8b:23:
1a:bb:b1:a1:e1:cc:13:e7:f9:b9:41:5a:80:95:6c:d1:b6:6e:
1a:3d:6a:25:20:aa:7c:72:d7:92:37:6e:cc:ab:9e:0a:20:76:
21:3c:79:38:bd:fe:8b:b8:b1:19:d0:c3:89:9c:52:34:96:d0:
6a:bd:9a:d9:26:2e:6d:01:47:e3:49:10:70:96:5a:97:10:5e:
84:18:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:27:19 2025 by rpki-client