Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa
File: 3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa (raw, json)
Hash identifier: KziogyOV/MWL4wuLPDZOvgJocTdi3i0NC94EHSaeW7o=
Subject key identifier: E8:66:D2:FB:E3:28:B7:11:DC:9F:A1:B3:DA:EA:C9:A8:53:5A:F6:47
Certificate issuer: /CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
Certificate serial: 24D9479C7E6FB927D9C974F0273B1B1FF37E0729
Authority key identifier: 35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa
Signing time: Thu 04 Apr 2024 09:56:23 +0000
ROA not before: Thu 04 Apr 2024 09:51:23 +0000
ROA not after: Thu 03 Apr 2025 09:56:23 +0000
asID: 263668
IP address blocks: 191.241.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d9:47:9c:7e:6f:b9:27:d9:c9:74:f0:27:3b:1b:1f:f3:7e:07:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
Validity
Not Before: Apr 4 09:51:23 2024 GMT
Not After : Apr 3 09:56:23 2025 GMT
Subject: CN=E866D2FBE328B711DC9FA1B3DAEAC9A8535AF647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:ad:51:88:75:57:11:7e:dd:3d:56:d6:d9:
d8:12:f5:97:2e:51:76:2d:c6:e4:4c:0d:41:74:90:
c9:f9:08:8e:47:a7:60:b3:dd:d3:6c:fa:63:32:03:
8d:b0:95:ec:bb:ea:21:fb:51:89:3f:64:2b:c3:4b:
bf:32:12:2d:d6:19:8e:a2:d7:dc:aa:4f:b7:45:19:
5a:66:96:2c:7c:b2:bc:ea:68:35:ce:f7:af:e7:f4:
05:54:76:98:d3:d1:59:79:88:af:13:8b:d1:c1:c0:
c6:34:a6:aa:69:ac:00:d5:5a:3d:52:d7:86:53:72:
bd:13:3d:0c:fe:94:b0:d4:83:c8:d5:ce:e3:bc:f8:
9e:65:2e:9f:fd:93:55:09:07:b8:89:b3:29:46:16:
5b:91:ea:ab:13:80:1c:88:72:98:ed:c5:a1:52:9a:
8e:94:80:b0:dd:bf:dc:b7:88:60:b6:e8:3c:f5:ec:
25:71:8f:8a:81:8c:95:aa:8c:c8:7a:02:40:c5:6b:
20:f5:4c:d6:a1:72:d3:80:44:0e:c5:7b:23:3b:5e:
16:1e:1a:cb:1f:3d:66:9d:50:b0:be:1f:b3:9e:38:
44:6a:01:f2:b6:2b:5a:11:74:c5:b3:b5:96:a1:8e:
d8:a4:21:55:cd:b7:7e:57:ff:94:d4:cc:87:c8:d8:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:66:D2:FB:E3:28:B7:11:DC:9F:A1:B3:DA:EA:C9:A8:53:5A:F6:47
X509v3 Authority Key Identifier:
keyid:35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.56.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:29:dd:9c:70:53:ca:f8:1d:a6:80:a5:7c:0c:2e:91:a6:0f:
ca:a1:50:44:da:a2:ea:ea:86:2a:a0:88:6e:ef:69:96:b9:3a:
48:6a:80:f4:b6:6b:a5:ae:19:d9:50:37:21:00:5a:4a:b5:67:
07:ab:5e:08:b1:12:cf:e1:a3:f3:95:14:36:b1:dc:c8:90:6c:
e7:ac:72:ef:d3:7b:42:c9:4d:ca:c3:3f:db:e1:f4:52:72:b8:
7a:01:93:02:13:a3:c5:c5:9f:30:1d:d1:8a:52:f3:63:9d:7c:
8e:0b:c0:ee:a8:ef:fa:45:17:fb:3c:a1:e9:0f:ea:e9:d6:5e:
6d:61:f3:8e:cf:9f:6c:44:60:41:2c:96:50:0b:a8:f2:2d:6a:
28:c0:bf:fa:2e:23:4d:b5:7d:8e:11:c6:b3:e9:cf:d8:58:9f:
e5:b5:79:93:97:fe:7e:b9:26:04:76:7e:b0:10:66:4c:6c:35:
1e:54:59:44:ed:dc:26:ec:7d:bf:34:c5:5d:9b:91:ce:e5:6d:
32:dd:4c:c3:64:bc:07:b3:4e:ee:91:ab:86:61:b2:4e:14:0f:
aa:d4:25:6e:70:f1:8a:07:b7:f4:a6:b5:4b:fb:15:3c:53:9e:
1d:5d:a1:76:73:b9:b8:5a:b7:9e:be:4f:ab:79:ad:f6:92:ec:
62:cd:ef:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:03:09 2025 by rpki-client