Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e34352e36342e302f31382d3138203d3e203238323730.roa
File: 3138392e34352e36342e302f31382d3138203d3e203238323730.roa (raw, json)
Hash identifier: iHOdzUG0wleDqyiwxdoXn0VCnU+YGBpgV1H+PShIC7w=
Subject key identifier: 31:81:1B:52:69:3A:F6:C5:6A:C6:BC:E1:51:1F:06:46:FA:91:89:21
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 099433557FBD0A6F75323B6E5D7A791746B75CFA
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e34352e36342e302f31382d3138203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:51 +0000
ROA not before: Mon 14 Oct 2024 01:44:51 +0000
ROA not after: Mon 13 Oct 2025 01:49:51 +0000
asID: 28270
IP address blocks: 189.45.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:94:33:55:7f:bd:0a:6f:75:32:3b:6e:5d:7a:79:17:46:b7:5c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:51 2024 GMT
Not After : Oct 13 01:49:51 2025 GMT
Subject: CN=31811B52693AF6C56AC6BCE1511F0646FA918921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:80:58:fa:93:9b:17:6e:cf:32:65:52:b4:44:
08:ee:c7:78:89:5a:c9:6f:af:30:a1:03:31:2e:1a:
ab:df:3d:6e:7b:3c:8a:36:ba:2f:4b:c4:dc:ae:14:
2e:c6:b5:81:b4:7f:df:84:df:4e:67:a2:0a:1e:c8:
a1:d1:1a:57:db:2f:3d:c7:6c:4d:d7:02:f1:56:77:
89:6a:05:ee:5d:25:63:fd:50:5e:a8:4e:e2:7a:98:
8b:b6:fb:29:41:c1:4b:bd:5b:a7:c2:f3:8b:c7:5b:
cc:76:4b:6e:ca:71:47:d9:7c:89:fe:d8:f4:82:21:
dd:1e:05:f4:4c:c9:97:5a:54:d8:b9:d1:44:35:11:
35:df:18:f2:df:e9:6f:a1:61:1c:6f:a7:61:fd:94:
c7:ba:39:a4:b6:6d:f8:2f:a0:5f:96:07:47:73:77:
74:1c:95:04:8d:48:8f:76:66:81:c6:7c:16:8b:7f:
84:2f:b2:75:28:0a:8a:50:61:39:35:2a:dc:86:83:
b0:41:f6:1c:fd:32:10:24:f6:d5:1f:2b:6e:9a:ac:
60:5f:6b:ed:bf:dc:c4:04:5e:c6:9f:6d:c0:5c:7b:
ed:d9:6d:48:dd:eb:76:87:12:9e:1e:59:0c:f1:7e:
ab:a6:74:a1:75:a2:f4:98:6d:0b:1e:0b:c4:44:ac:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:81:1B:52:69:3A:F6:C5:6A:C6:BC:E1:51:1F:06:46:FA:91:89:21
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e34352e36342e302f31382d3138203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.64.0/18
Signature Algorithm: sha256WithRSAEncryption
26:c2:7f:14:f4:fe:3c:77:b6:bf:f9:92:32:fe:0b:b3:10:01:
e3:5d:c5:b4:ab:a8:5d:f8:03:5e:46:65:4a:d8:c8:d0:21:69:
04:bd:af:c2:18:e2:8f:c5:7f:0c:6c:7e:e1:ba:76:2e:fa:da:
15:c9:2a:17:2f:4a:df:73:3c:0a:d2:7c:7f:db:a9:2c:70:3b:
fb:fc:86:57:f9:16:6c:40:55:7e:3b:e9:28:97:ca:d7:db:e8:
20:a4:f4:be:64:00:bd:21:c1:67:bc:7c:1c:31:46:6d:c9:98:
31:c6:a5:e1:e0:e8:f2:55:8d:cb:55:c0:76:c6:f5:c1:8c:77:
6a:74:ce:1c:30:3c:98:8d:39:e3:1c:67:ad:bf:f5:a1:a3:59:
1a:51:30:1a:cb:76:24:fb:9c:78:50:36:1a:d0:0e:49:80:de:
3f:c6:2e:ef:0e:41:e9:c2:69:a2:ce:f9:f8:b1:29:11:da:3f:
2c:5d:e4:2a:96:a5:1a:06:c0:88:e3:d9:e7:a3:23:ec:ee:a1:
2c:a3:b8:83:95:2c:d7:0f:a7:01:93:78:82:e4:f9:3c:58:00:
31:f7:dc:a3:17:34:f7:1f:89:a8:a6:6e:2b:fd:81:ce:02:11:
a0:29:95:fc:ea:0f:2e:93:a8:5c:f7:d9:5e:c6:f2:7f:41:3c:
32:a1:28:e3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCZQzVX+9Cm91MjtuXXp5F0a3XPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ0NTFaFw0yNTEwMTMwMTQ5NTFaMDMxMTAvBgNV
BAMTKDMxODExQjUyNjkzQUY2QzU2QUM2QkNFMTUxMUYwNjQ2RkE5MTg5MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDigFj6k5sXbs8yZVK0RAjux3iJ
WslvrzChAzEuGqvfPW57PIo2ui9LxNyuFC7GtYG0f9+E305nogoeyKHRGlfbLz3H
bE3XAvFWd4lqBe5dJWP9UF6oTuJ6mIu2+ylBwUu9W6fC84vHW8x2S27KcUfZfIn+
2PSCId0eBfRMyZdaVNi50UQ1ETXfGPLf6W+hYRxvp2H9lMe6OaS2bfgvoF+WB0dz
d3QclQSNSI92ZoHGfBaLf4QvsnUoCopQYTk1KtyGg7BB9hz9MhAk9tUfK26arGBf
a+2/3MQEXsafbcBce+3ZbUjd63aHEp4eWQzxfqumdKF1ovSYbQseC8RErEGBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUMYEbUmk69sVqxrzhUR8GRvqRiSEwHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzODM5MmUzNDM1MmUzNjM0MmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzIzODMy
MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBr0tQDANBgkqhkiG9w0BAQsFAAOCAQEAJsJ/FPT+PHe2
v/mSMv4LsxAB413FtKuoXfgDXkZlStjI0CFpBL2vwhjij8V/DGx+4bp2LvraFckq
Fy9K33M8CtJ8f9upLHA7+/yGV/kWbEBVfjvpKJfK19voIKT0vmQAvSHBZ7x8HDFG
bcmYMcal4eDo8lWNy1XAdsb1wYx3anTOHDA8mI054xxnrb/1oaNZGlEwGst2JPuc
eFA2GtAOSYDeP8Yu7w5B6cJpos75+LEpEdo/LF3kKpalGgbAiOPZ56Mj7O6hLKO4
g5Us1w+nAZN4guT5PFgAMffcoxc09x+JqKZuK/2BzgIRoCmV/OoPLpOoXPfZXsby
f0E8MqEo4w==
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net