Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137372e3132352e38382e302f32312d3234203d3e203238323031.roa
File: 3137372e3132352e38382e302f32312d3234203d3e203238323031.roa (raw, json)
Hash identifier: eDj8BW62kcagmn2pusHYqVLz4He/icnojLuXTPEj3PU=
Subject key identifier: 30:58:AB:2A:EA:7B:68:59:25:D0:42:32:6C:D6:C1:08:14:05:F1:2E
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: D5F8CBC0BF1208E2B33932A633D5DA4F0F1CFA
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137372e3132352e38382e302f32312d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:40:55 +0000
ROA not before: Wed 10 Apr 2024 12:35:55 +0000
ROA not after: Wed 09 Apr 2025 12:40:55 +0000
asID: 28201
IP address blocks: 177.125.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d5:f8:cb:c0:bf:12:08:e2:b3:39:32:a6:33:d5:da:4f:0f:1c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:35:55 2024 GMT
Not After : Apr 9 12:40:55 2025 GMT
Subject: CN=3058AB2AEA7B685925D042326CD6C1081405F12E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:1a:c7:98:f5:3c:3b:cc:ca:70:0b:24:65:
e9:4a:b0:51:4a:13:cd:85:17:bb:5e:09:0b:50:19:
dd:f4:23:93:4d:6d:aa:a6:03:ea:25:8c:05:5f:3c:
7e:a7:ee:6a:79:81:7f:7f:49:04:d9:70:b2:87:59:
a5:24:c3:4f:e3:16:2c:4c:e4:57:a3:d6:15:a6:26:
0d:d5:b2:ad:30:1e:d9:ca:27:de:91:de:b3:f6:00:
47:b7:ba:b3:04:43:ab:1c:88:a8:02:41:38:d2:11:
fc:df:7f:d4:d9:25:62:02:b3:60:53:64:92:90:ea:
d6:f1:4d:2d:d4:26:6e:16:e4:a4:3a:0b:22:dd:2c:
da:19:cd:d8:0c:4c:8d:f9:2a:96:05:b9:15:b9:9c:
b3:52:0c:b7:8d:de:0f:95:0d:be:84:73:34:f7:22:
2b:17:6a:fe:b8:3c:1e:bf:69:a2:81:ef:44:95:4a:
96:9b:94:d0:d7:4b:f8:c1:d3:5e:c8:85:fe:39:e4:
29:0f:38:da:1d:88:77:91:8e:a6:e7:ea:92:2a:1d:
9c:58:a8:0c:df:14:e0:af:8d:d6:c2:9d:20:a9:db:
58:c4:5f:e7:e9:e7:31:68:4a:40:8f:25:ff:b7:5b:
9c:70:c4:67:1c:e6:c4:8b:d4:67:51:6b:04:67:19:
54:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:58:AB:2A:EA:7B:68:59:25:D0:42:32:6C:D6:C1:08:14:05:F1:2E
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137372e3132352e38382e302f32312d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.88.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:40:11:b2:7b:41:16:52:e6:76:87:7b:d8:38:51:a4:56:bd:
01:79:4c:90:81:c6:47:6c:8d:8a:55:c2:fa:7c:29:6f:8e:ad:
f2:1a:0c:f8:d3:56:6c:9d:03:64:b5:32:8f:41:ab:53:76:3c:
bd:e0:5c:9e:51:5c:55:9f:23:6c:da:01:e3:7c:da:48:88:e0:
33:66:ed:b7:d9:34:a6:93:c0:e1:d3:a6:1b:35:92:9e:fb:f1:
52:55:5f:45:a9:35:df:ad:de:2b:7b:9b:5d:81:26:70:02:c6:
51:00:6d:ce:15:30:b8:57:c7:60:dd:9a:da:0f:3b:b2:53:37:
7a:a7:2a:a5:10:26:76:e3:a9:f2:59:69:f7:bc:60:64:f8:20:
6e:9e:12:73:8d:91:89:70:c6:07:fa:f1:2a:a2:3e:a7:63:03:
be:e0:f8:80:f4:0d:0f:62:c9:df:df:12:d1:bd:48:b2:bd:e4:
28:16:49:88:9e:f2:6c:1d:e8:dd:61:14:3e:d8:fa:82:4e:33:
9b:7f:27:f7:08:2b:6c:9d:13:6b:f0:3d:e8:79:62:74:e0:a1:
3e:87:cc:c6:1c:91:ed:76:57:90:31:76:40:77:57:c7:1c:ef:
26:29:2f:3c:4d:13:b6:63:9f:b9:bd:36:53:c8:72:33:33:1e:
0b:9f:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:08 2024 by rpki-client on console.sobornost.net