Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/3138362e3235312e3138392e302f32342d3234203d3e20323633353638.roa
File: 3138362e3235312e3138392e302f32342d3234203d3e20323633353638.roa (raw, json)
Hash identifier: as7mLMPel557Zroo03aTe2poiSmEFx/MGR4s+AQ8lug=
Subject key identifier: 2E:D7:B5:24:F8:9C:06:7F:66:7A:7C:25:89:6A:3D:97:E9:74:7F:1C
Certificate issuer: /CN=F21FF21977D11ACE5D3F4C7A14D3EE36C3CA2EBD
Certificate serial: 0844D98D99B1B7E1CF7A072F7AF5B3F9742ADDB8
Authority key identifier: F2:1F:F2:19:77:D1:1A:CE:5D:3F:4C:7A:14:D3:EE:36:C3:CA:2E:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FF21977D11ACE5D3F4C7A14D3EE36C3CA2EBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/3138362e3235312e3138392e302f32342d3234203d3e20323633353638.roa
Signing time: Fri 12 Jan 2024 13:03:27 +0000
ROA not before: Fri 12 Jan 2024 12:58:27 +0000
ROA not after: Fri 10 Jan 2025 13:03:27 +0000
asID: 263568
IP address blocks: 186.251.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:44:d9:8d:99:b1:b7:e1:cf:7a:07:2f:7a:f5:b3:f9:74:2a:dd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F21FF21977D11ACE5D3F4C7A14D3EE36C3CA2EBD
Validity
Not Before: Jan 12 12:58:27 2024 GMT
Not After : Jan 10 13:03:27 2025 GMT
Subject: CN=2ED7B524F89C067F667A7C25896A3D97E9747F1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:af:93:40:bf:d0:cf:56:c5:34:31:ae:7e:
6b:8f:69:aa:f4:b9:ad:cf:32:7c:c8:74:2e:12:65:
be:d9:ed:18:b7:9d:34:bb:a2:1e:df:63:ae:c3:47:
63:c2:56:e0:43:0e:31:3a:1e:0a:d0:b2:2e:ed:9f:
bf:5d:34:5c:a8:2e:3b:3a:4e:8b:af:9d:41:39:f4:
36:17:ac:05:1c:ff:3a:ab:7e:39:ff:82:83:2e:a6:
39:1c:37:af:3d:5b:9d:55:73:68:e4:f6:e1:db:ed:
da:f4:2f:c6:0d:39:cd:e8:a5:1a:82:01:6a:55:5c:
2b:9c:ec:00:52:40:55:11:aa:71:9a:8f:da:0d:d4:
ad:b3:6d:3e:24:8c:b2:e2:87:15:a2:d3:97:aa:1f:
37:86:b1:d0:ac:8a:d7:23:a0:6b:2e:0c:2b:c1:de:
52:bb:ee:7d:9b:cb:f4:7a:07:32:ad:82:de:63:22:
a5:b4:c7:37:46:c2:ed:19:45:8e:0b:81:3a:0b:88:
e1:42:ed:cb:d3:b0:81:57:c5:c9:79:b1:77:2a:06:
70:20:a9:af:f6:ed:cf:60:66:9e:04:9b:35:96:c2:
1f:d0:41:fb:ed:35:44:ae:59:6c:c1:75:8f:8f:13:
d8:76:46:7b:0a:84:b4:0a:68:a7:c3:eb:6f:a1:d6:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D7:B5:24:F8:9C:06:7F:66:7A:7C:25:89:6A:3D:97:E9:74:7F:1C
X509v3 Authority Key Identifier:
keyid:F2:1F:F2:19:77:D1:1A:CE:5D:3F:4C:7A:14:D3:EE:36:C3:CA:2E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/F21FF21977D11ACE5D3F4C7A14D3EE36C3CA2EBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FF21977D11ACE5D3F4C7A14D3EE36C3CA2EBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/3138362e3235312e3138392e302f32342d3234203d3e20323633353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.251.189.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:83:4f:a0:e0:2b:ea:9d:f2:82:f4:8b:af:29:c5:d7:29:aa:
d5:97:ac:74:68:4f:4a:06:a2:ac:f5:f7:4b:19:2e:78:79:67:
91:5e:43:27:1e:8b:4b:8a:d3:c8:b9:23:67:23:e1:e2:43:08:
50:c2:33:fd:ad:1d:fb:a2:e6:6f:50:51:14:75:1a:9d:67:dd:
0a:eb:33:8c:63:de:fa:83:cf:f9:c8:7b:df:5b:3c:ed:90:a5:
f4:05:6c:9f:cf:d6:e1:83:f4:58:f2:42:23:14:ac:ab:20:7d:
5a:24:68:cc:20:9c:64:ba:63:c2:f2:11:08:82:f2:40:22:25:
96:ca:d9:80:ff:ff:7e:32:10:ad:cf:ed:8d:dd:9b:42:34:e4:
1f:5b:44:8a:32:35:3b:0a:58:95:95:89:65:47:cd:e6:c6:83:
35:69:7d:89:db:a1:4a:1e:b4:81:be:a4:56:9f:10:7f:62:a1:
cd:7a:a6:50:30:22:88:d1:de:0a:72:2a:8f:7b:1a:3f:0c:bb:
59:49:e6:38:d7:9f:2a:99:35:3d:3c:c3:5d:e6:55:9b:19:bc:
09:4b:a8:8e:25:bf:97:4d:ce:93:f3:ff:56:c7:5b:78:19:19:
aa:82:e8:91:de:d2:36:2e:b1:26:97:7e:7e:16:3c:43:1c:6a:
2d:f6:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:49 2024 by rpki-client on console.sobornost.net