Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231362e302f32312d3231203d3e203238333630.roa
File: 3138392e37362e3231362e302f32312d3231203d3e203238333630.roa (raw, json)
Hash identifier: cRyRUz0F4N3nx5RnhHdeir4yjt4osVpPm+okHG55qXg=
Subject key identifier: FF:44:08:46:57:94:62:60:9F:2C:62:F6:DA:F8:A7:20:67:BB:77:D5
Certificate issuer: /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial: 34D9EC3A480A64F9FB75ED2D4915BB43DCCDE859
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231362e302f32312d3231203d3e203238333630.roa
Signing time: Thu 17 Nov 2022 18:03:36 +0000
ROA not before: Thu 17 Nov 2022 17:58:36 +0000
ROA not after: Thu 16 Nov 2023 18:03:36 +0000
asID: 28360
IP address blocks: 189.76.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d9:ec:3a:48:0a:64:f9:fb:75:ed:2d:49:15:bb:43:dc:cd:e8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Validity
Not Before: Nov 17 17:58:36 2022 GMT
Not After : Nov 16 18:03:36 2023 GMT
Subject: CN=FF440846579462609F2C62F6DAF8A72067BB77D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:70:76:a8:96:d3:9f:1a:62:0b:71:b0:90:
78:7b:11:8e:59:1c:82:e2:7d:33:26:d1:27:49:ca:
ce:e6:be:68:f9:e5:45:e4:43:23:53:06:2c:fd:27:
4a:2d:5b:14:a5:a8:a8:6c:5d:aa:8b:ee:28:f6:86:
5f:b4:b9:5e:5a:de:74:13:a2:a9:2a:15:f4:08:d9:
bd:ff:f5:00:e3:2d:51:3c:44:2a:6c:94:4f:16:61:
07:e9:35:59:f4:a5:83:29:dd:ad:74:9b:83:ee:a9:
15:8c:3c:f9:58:fe:41:ed:1f:bc:62:7c:93:79:43:
86:54:ef:35:0b:0f:7c:1b:29:d4:5c:ff:02:04:0b:
da:8a:56:0e:2d:6d:ec:fd:1b:32:b9:4d:ac:21:5e:
77:e6:5f:3b:48:49:4a:e7:6c:94:9b:e6:3e:5e:47:
42:03:e2:73:39:95:ed:2e:0d:2a:9a:65:9c:21:92:
b5:36:fc:48:cf:53:f6:dc:43:4d:f9:95:65:ed:0e:
05:66:4a:94:1a:15:f4:9f:59:7f:0c:b4:2b:84:c8:
f1:5c:16:ba:08:28:7d:00:58:e0:62:9b:39:f8:46:
f1:ad:ef:71:00:d3:92:8d:6a:61:6d:74:97:19:98:
d5:75:aa:b4:2c:cb:7b:c5:33:2d:da:fa:c3:9d:7a:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:44:08:46:57:94:62:60:9F:2C:62:F6:DA:F8:A7:20:67:BB:77:D5
X509v3 Authority Key Identifier:
keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231362e302f32312d3231203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.76.216.0/21
Signature Algorithm: sha256WithRSAEncryption
83:ff:73:eb:c8:63:83:e6:6a:e1:e0:aa:e4:37:65:1e:1a:ac:
2e:52:92:3a:fc:72:f8:18:24:5d:ed:37:9d:25:8f:3d:6d:bf:
e7:9a:93:08:fb:84:88:52:cd:1a:d2:a9:eb:fa:3a:52:8d:8d:
89:aa:42:67:24:05:d5:cf:0b:13:95:54:58:4f:70:5e:23:8d:
ac:d3:f1:e2:02:ab:c1:83:4c:9d:98:c1:03:92:e9:37:3e:2f:
e8:e3:38:28:6d:8e:fd:6d:33:47:cf:a2:b5:6e:fc:de:08:f0:
67:a0:17:d2:b2:45:41:20:72:fd:c6:ab:85:fb:40:cf:0f:e7:
1d:bc:12:2d:e5:f1:ad:48:54:04:ab:4d:56:36:e3:2e:b9:a1:
a4:7b:c9:bf:b0:31:2e:40:49:e8:30:b0:e3:c2:50:a7:5b:35:
ba:57:47:6b:fe:71:8b:a3:ce:58:da:42:fe:c0:16:30:2c:d6:
ec:af:f9:1d:7c:94:23:6c:78:66:55:23:3c:7a:c4:29:14:cc:
e3:73:a8:42:9b:55:dc:00:f9:30:27:5d:23:46:e9:72:da:d7:
f9:b9:5e:c7:dc:0a:7d:b4:75:a2:fa:f3:8d:5a:41:b5:e0:e3:
10:b9:f1:da:bc:0d:07:22:32:67:ff:70:ce:92:5b:54:b6:d0:
cb:d6:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net