Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3138392e39302e39362e302f32302d3234203d3e203238363334.roa
File: 3138392e39302e39362e302f32302d3234203d3e203238363334.roa (raw, json)
Hash identifier: 7az2B1HSoUlw91YxAx3aagWCZXWtJx7mQLDcEc3JeFY=
Subject key identifier: 96:A9:CD:D0:F1:DD:07:66:B5:C1:3C:34:27:1A:F3:35:8D:C8:26:98
Certificate issuer: /CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
Certificate serial: 31E1FA317BECBAD6CCEAF600E58CDA8534BDBACF
Authority key identifier: 2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3138392e39302e39362e302f32302d3234203d3e203238363334.roa
Signing time: Thu 09 Feb 2023 20:00:00 +0000
ROA not before: Thu 09 Feb 2023 19:55:00 +0000
ROA not after: Thu 08 Feb 2024 20:00:00 +0000
asID: 28634
IP address blocks: 189.90.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e1:fa:31:7b:ec:ba:d6:cc:ea:f6:00:e5:8c:da:85:34:bd:ba:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
Validity
Not Before: Feb 9 19:55:00 2023 GMT
Not After : Feb 8 20:00:00 2024 GMT
Subject: CN=96A9CDD0F1DD0766B5C13C34271AF3358DC82698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:02:eb:8e:94:85:37:49:88:0e:35:ea:89:
ce:98:e4:38:26:92:c9:a2:31:14:a9:3b:f1:99:86:
23:c5:4a:f4:b1:79:19:3c:20:d7:80:2c:10:af:50:
b5:84:9b:e6:3a:a5:c5:07:7c:19:da:4a:f8:cf:26:
2b:15:84:8a:45:ac:c9:61:6b:30:55:7c:0f:f3:70:
e0:26:b9:e8:c4:0c:20:b1:44:2e:0a:18:90:c4:3e:
88:80:e5:67:2a:97:37:3d:c0:b1:3a:a4:e2:8c:ec:
1f:76:8b:cf:da:b5:2f:76:f8:fa:a7:48:4c:9e:64:
55:2a:70:af:69:04:4a:d5:9f:a4:78:f8:91:8e:78:
35:df:13:98:8e:63:a6:f7:7e:5a:e7:c7:20:6e:29:
15:35:05:87:86:83:d1:8f:47:7d:f4:25:ec:2c:35:
df:e6:dc:a7:82:fa:46:d5:e3:28:c2:10:df:fe:be:
20:61:27:70:37:8c:f0:bf:1c:b7:5e:b0:e7:e2:ec:
48:2f:1f:9e:3c:54:fa:c1:f8:4f:65:e0:f8:67:0f:
48:06:40:50:88:e0:c1:f8:74:ee:1f:95:06:81:12:
ea:ef:bf:d6:8f:21:7e:cf:79:c9:a2:65:39:40:00:
0f:40:79:56:33:f8:ef:cc:c6:cb:61:7b:3f:76:38:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A9:CD:D0:F1:DD:07:66:B5:C1:3C:34:27:1A:F3:35:8D:C8:26:98
X509v3 Authority Key Identifier:
keyid:2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3138392e39302e39362e302f32302d3234203d3e203238363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.96.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:1e:17:65:c7:db:5f:bc:59:42:4c:ae:16:5d:40:e3:7b:10:
74:8e:81:11:9e:1a:f0:d3:03:c5:93:3f:96:f4:09:25:13:a5:
a9:eb:c0:04:fe:d6:c8:26:dd:8e:1b:8f:ec:13:a5:20:30:68:
c5:d1:0f:0f:b5:a9:ab:f5:10:c3:64:81:fb:d4:56:c8:8f:84:
74:b9:e0:2e:f1:fd:8a:13:bc:9b:47:79:ba:40:89:1e:b7:5a:
2b:1e:4a:57:8e:aa:4e:1e:da:64:cf:38:cc:18:df:c0:ed:ad:
f7:f1:d0:bd:93:ad:9c:60:71:a3:6a:56:ad:b4:5e:dd:9e:4a:
02:b8:fa:62:ce:ba:29:e2:4d:0b:c4:95:ce:cf:ed:f6:aa:6a:
25:af:79:54:2e:1c:5c:34:12:66:1e:c6:c5:5b:8c:80:9b:57:
e4:ec:78:f1:f2:0c:c9:47:e8:f5:83:ed:ed:70:9d:45:42:4c:
d9:34:fc:ae:77:66:7d:ef:a5:4d:26:8f:07:59:0e:7e:dd:d3:
80:29:02:8d:f2:8f:cb:9e:7f:88:ef:02:c8:7a:35:a7:ed:4c:
22:22:27:09:a2:55:b0:a5:71:9b:52:11:14:df:99:8f:f4:5b:
5f:29:70:e2:dd:17:f8:76:4f:07:84:17:6b:96:66:21:92:19:
53:9e:33:d8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMeH6MXvsutbM6vYA5YzahTS9us8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEzODEyNERBNDI1NUZFMzJCNzBCOTExQzdDMEFENDI5
MjFDRkNBQjAeFw0yMzAyMDkxOTU1MDBaFw0yNDAyMDgyMDAwMDBaMDMxMTAvBgNV
BAMTKDk2QTlDREQwRjFERDA3NjZCNUMxM0MzNDI3MUFGMzM1OERDODI2OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00ALrjpSFN0mIDjXqic6Y5Dgm
ksmiMRSpO/GZhiPFSvSxeRk8INeALBCvULWEm+Y6pcUHfBnaSvjPJisVhIpFrMlh
azBVfA/zcOAmuejEDCCxRC4KGJDEPoiA5Wcqlzc9wLE6pOKM7B92i8/atS92+Pqn
SEyeZFUqcK9pBErVn6R4+JGOeDXfE5iOY6b3flrnxyBuKRU1BYeGg9GPR330Jews
Nd/m3KeC+kbV4yjCEN/+viBhJ3A3jPC/HLdesOfi7EgvH548VPrB+E9l4PhnD0gG
QFCI4MH4dO4flQaBEurvv9aPIX7PecmiZTlAAA9AeVYz+O/Mxsthez92OMebAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUlqnN0PHdB2a1wTw0JxrzNY3IJpgwHwYDVR0j
BBgwFoAUKjgSTaQlX+MrcLkRx8CtQpIc/KswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRktRd1ZvQUR5RVA1S045NmZoemlxTkhBWlJYVGtEQnBBWTJXcWNIaE1a
NWcvMC8yQTM4MTI0REE0MjU1RkUzMkI3MEI5MTFDN0MwQUQ0MjkyMUNGQ0FCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJBMzgxMjREQTQyNTVGRTMy
QjcwQjkxMUM3QzBBRDQyOTIxQ0ZDQUIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZLUXdWb0FEeUVQNUtOOTZmaHppcU5IQVpSWFRrREJwQVkyV3FjSGhNWjVnLzAv
MzEzODM5MmUzOTMwMmUzOTM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM2
MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL1aYDANBgkqhkiG9w0BAQsFAAOCAQEApx4XZcfbX7xZ
QkyuFl1A43sQdI6BEZ4a8NMDxZM/lvQJJROlqevABP7WyCbdjhuP7BOlIDBoxdEP
D7Wpq/UQw2SB+9RWyI+EdLngLvH9ihO8m0d5ukCJHrdaKx5KV46qTh7aZM84zBjf
wO2t9/HQvZOtnGBxo2pWrbRe3Z5KArj6Ys66KeJNC8SVzs/t9qpqJa95VC4cXDQS
Zh7GxVuMgJtX5Ox48fIMyUfo9YPt7XCdRUJM2TT8rndmfe+lTSaPB1kOft3TgCkC
jfKPy55/iO8CyHo1p+1MIiInCaJVsKVxm1IRFN+Zj/RbXylw4t0X+HZPB4QXa5Zm
IZIZU54z2A==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:39 2023 by rpki-client on console.sobornost.net