Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32332d3233203d3e203238313832.roa
File: 3138392e38392e31322e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier: gtth/cse+nVIA6ukLfGlrUFeJxnkPaK0hfXjoPezgP0=
Subject key identifier: D7:C2:68:D5:EB:E1:58:70:F8:A4:EB:0E:8A:4C:D8:76:B0:A7:F2:7D
Certificate issuer: /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial: 08D5C290C1D734DB7BED5CFFCDBE26BEC74F6D2E
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32332d3233203d3e203238313832.roa
Signing time: Thu 30 Nov 2023 12:39:47 +0000
ROA not before: Thu 30 Nov 2023 12:34:47 +0000
ROA not after: Thu 28 Nov 2024 12:39:47 +0000
asID: 28182
IP address blocks: 189.89.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d5:c2:90:c1:d7:34:db:7b:ed:5c:ff:cd:be:26:be:c7:4f:6d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Validity
Not Before: Nov 30 12:34:47 2023 GMT
Not After : Nov 28 12:39:47 2024 GMT
Subject: CN=D7C268D5EBE15870F8A4EB0E8A4CD876B0A7F27D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:a9:88:dc:b2:9f:06:5d:4b:0c:4d:a3:5a:
31:30:5e:0b:49:b1:09:37:ea:00:f2:21:33:84:10:
40:e6:6d:74:74:d5:e4:0e:2f:c0:41:f1:a3:9e:4e:
f4:8f:02:c5:36:41:e7:6e:dd:6e:63:4c:91:be:9c:
04:8b:76:be:6a:78:44:ca:43:26:76:08:0a:8c:70:
4c:dc:70:10:f2:11:33:59:0e:61:18:c9:44:b4:5a:
6f:ea:85:58:e4:e3:d6:f0:e5:c5:69:50:ce:16:dd:
66:46:39:12:fd:f6:c0:59:24:d8:50:b9:6b:b4:96:
4b:26:1f:bc:30:b1:94:59:88:e3:c4:83:a2:98:f4:
39:b8:ee:70:ec:ee:b8:f6:2f:0c:df:78:55:73:48:
fd:31:54:41:84:9c:9c:e5:49:0d:25:f6:3c:68:51:
8d:13:e9:2f:11:a2:8d:22:ca:1d:2c:d3:3a:4f:59:
a2:de:17:52:29:32:b1:3f:ea:b9:ea:88:b1:4c:57:
a6:43:7e:c9:a5:9e:c7:9b:54:1b:25:8b:20:70:89:
bd:04:9e:21:89:89:b7:a1:85:d5:2f:60:fa:a6:3e:
84:13:dd:a6:3e:c3:c3:32:6c:68:9f:c4:dd:87:d6:
d2:79:74:c2:cc:a5:c5:79:4a:e4:ad:71:7e:2d:21:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C2:68:D5:EB:E1:58:70:F8:A4:EB:0E:8A:4C:D8:76:B0:A7:F2:7D
X509v3 Authority Key Identifier:
keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32332d3233203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.12.0/23
Signature Algorithm: sha256WithRSAEncryption
48:1c:d0:83:19:e1:22:12:c0:42:8f:8e:b0:66:73:dc:8f:53:
81:3d:6e:a5:c8:ac:af:b0:bd:36:f9:38:46:c8:d9:01:82:2a:
58:4e:c0:d9:18:47:34:7c:10:77:1e:13:58:a3:00:33:78:76:
e6:03:ec:b6:c4:72:51:71:fc:c9:d3:22:98:4f:dd:e9:a8:30:
46:1d:d8:30:4d:23:47:6c:e8:fb:51:d6:56:b8:76:3e:17:53:
e7:ca:38:66:b0:66:d4:59:49:56:7c:64:c3:63:87:25:ed:22:
54:b3:d9:79:0a:cf:5f:80:18:8d:8e:da:ac:bc:87:52:61:a4:
82:97:8b:4b:fe:bb:03:55:fd:9a:7c:9c:c4:ff:bf:39:19:0d:
fc:c8:58:40:c3:ad:7e:2e:53:3f:d7:c5:5c:91:71:74:2b:4c:
43:ea:4e:85:40:10:52:54:b9:1a:e6:6a:18:28:8e:58:59:50:
68:83:0f:fa:8d:16:da:69:70:f7:d2:ad:4a:0c:b7:d7:10:7c:
ed:a7:42:db:c3:51:23:e5:9c:62:ff:a8:5d:17:e1:4e:7b:5f:
9b:34:5b:b7:02:00:d7:9e:0f:0f:08:3a:b1:78:60:79:67:17:
39:a5:10:81:88:63:6d:51:03:8a:e2:2d:8a:b2:c6:a4:4c:a8:
8e:a7:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net