Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31352e302f32342d3234203d3e203238313832.roa
File: 3138392e38392e31352e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier: ZRSPyhgwgUgc996JU1YCTkmWBf7SqgGyVh3qirVm4jg=
Subject key identifier: 27:96:66:88:A9:FA:21:B3:A5:60:CD:4A:5C:57:3E:39:AA:1F:64:AD
Certificate issuer: /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial: 3B4683477F9688AAE702980EF4E17836485F847A
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31352e302f32342d3234203d3e203238313832.roa
Signing time: Thu 30 Nov 2023 12:39:43 +0000
ROA not before: Thu 30 Nov 2023 12:34:43 +0000
ROA not after: Thu 28 Nov 2024 12:39:43 +0000
asID: 28182
IP address blocks: 189.89.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:46:83:47:7f:96:88:aa:e7:02:98:0e:f4:e1:78:36:48:5f:84:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Validity
Not Before: Nov 30 12:34:43 2023 GMT
Not After : Nov 28 12:39:43 2024 GMT
Subject: CN=27966688A9FA21B3A560CD4A5C573E39AA1F64AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:20:80:4f:68:4a:7c:0c:d7:de:65:f1:9e:
d0:5e:5f:bd:fd:44:e1:18:64:98:65:3b:28:4d:bf:
64:60:95:9b:ac:58:f9:78:37:2b:6d:a8:9c:58:b8:
cf:e4:20:60:30:1f:1e:d5:9f:97:7a:5c:6d:eb:cd:
92:ca:d4:0e:89:2e:43:d8:ed:d3:c9:64:4f:d4:38:
8e:02:7c:07:ce:ef:d9:54:fb:46:00:71:a2:d7:8a:
88:8c:b4:3b:c2:f0:85:bf:0c:3d:e8:1d:a0:8a:ed:
57:8c:1b:a8:50:a3:1d:69:29:2e:52:50:34:12:3d:
83:6b:7e:35:46:40:00:ca:f1:c3:ed:b0:46:e2:c9:
5a:6d:99:70:4a:27:89:ef:38:ce:90:62:b9:25:74:
91:ce:63:63:3b:8a:9b:e2:4c:a7:29:7e:87:93:41:
82:95:02:bd:6c:07:bc:3e:b1:34:1b:db:77:a4:06:
70:19:e0:3f:11:41:37:29:33:19:36:bd:60:86:e6:
23:f6:3f:be:ad:80:6a:86:4c:cb:8b:3d:48:14:e5:
3e:5d:59:32:eb:92:d3:0e:04:71:31:b4:98:bf:c9:
40:1a:a3:7c:f1:6b:9c:e6:7b:05:b1:83:dd:d5:b2:
ef:6d:8a:d4:4d:8d:40:f7:61:c3:c8:e8:ca:3e:04:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:96:66:88:A9:FA:21:B3:A5:60:CD:4A:5C:57:3E:39:AA:1F:64:AD
X509v3 Authority Key Identifier:
keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31352e302f32342d3234203d3e203238313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.15.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0b:2c:d5:d6:65:67:62:e0:d3:c8:53:f2:b8:aa:27:44:78:
45:71:85:fd:aa:0d:33:03:21:7f:26:b9:4b:2f:e9:ef:c7:5e:
44:61:52:bd:ac:63:e5:4d:70:dc:82:ab:19:91:02:dd:7c:55:
bd:21:cc:4d:a2:69:1a:7c:65:14:9b:0c:7d:19:fe:9c:ae:0b:
e6:ce:e0:79:89:48:c2:89:79:7e:75:a8:05:7b:f0:f5:d0:14:
df:32:cc:41:ee:69:f4:03:b4:3f:ca:09:67:a0:e7:dd:4c:bb:
eb:ad:66:06:7c:5a:cc:31:f6:f3:f0:93:ec:50:73:0f:90:84:
c8:bd:5c:7d:76:ad:b5:2f:5c:f3:dc:ac:93:ce:d4:d9:fb:e2:
79:91:56:d2:c5:ba:ca:e6:7a:5f:2c:cc:d8:35:ba:0f:da:07:
83:01:e8:d3:60:3a:3b:38:4e:5c:76:90:3d:0b:b7:ce:7f:9b:
ae:d2:93:4b:5c:f8:9f:1e:7d:d7:c8:e7:5e:b8:4e:65:f3:6d:
98:41:85:39:68:e2:ce:81:1d:f6:66:04:59:63:85:58:52:94:
87:77:e0:a8:75:4a:8c:a7:59:ad:fa:54:57:03:78:f5:91:20:
27:7d:9b:c0:0e:e2:73:95:fd:11:8d:1b:e5:e3:d5:2b:89:56:
61:c1:31:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net