Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/3139312e3234332e36342e302f32312d3332203d3e20323633343937.roa
File: 3139312e3234332e36342e302f32312d3332203d3e20323633343937.roa (raw, json)
Hash identifier: Cm1IROdEHMAz0VJ7PhfKO1nhTZ3fs/8V5WrZtodCmF8=
Subject key identifier: 3D:4B:E1:27:6C:D3:4A:67:31:D3:41:5C:47:D4:D3:EE:F3:62:CE:34
Certificate issuer: /CN=F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D
Certificate serial: 1AAE4B6DFAC94175546BD7920CB842B5C4CDE844
Authority key identifier: F5:E3:8B:02:74:44:0B:C8:66:16:FA:3A:AA:7B:E0:FA:8A:4D:EA:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/3139312e3234332e36342e302f32312d3332203d3e20323633343937.roa
Signing time: Thu 19 Dec 2024 23:20:41 +0000
ROA not before: Thu 19 Dec 2024 23:15:41 +0000
ROA not after: Thu 18 Dec 2025 23:20:41 +0000
asID: 263497
IP address blocks: 191.243.64.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ae:4b:6d:fa:c9:41:75:54:6b:d7:92:0c:b8:42:b5:c4:cd:e8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D
Validity
Not Before: Dec 19 23:15:41 2024 GMT
Not After : Dec 18 23:20:41 2025 GMT
Subject: CN=3D4BE1276CD34A6731D3415C47D4D3EEF362CE34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:ad:7b:c0:ea:04:59:c5:9e:3b:28:67:87:
bb:aa:fd:5b:01:ec:77:9b:b3:f3:a6:8e:d0:83:ca:
a0:65:60:71:d4:66:fc:7c:ed:3a:27:45:c3:c5:46:
1f:ee:1e:a1:d4:a6:cf:c6:f6:4c:3b:ef:eb:ca:8b:
49:10:de:b6:bc:25:ef:de:78:22:02:33:a5:00:a7:
92:2d:a6:f2:95:d3:be:bb:4d:29:f9:52:57:cc:38:
cb:d1:77:8a:f6:e5:d7:89:82:d1:5b:9a:f2:a9:0c:
7d:37:42:67:66:ac:44:bd:55:ca:80:0b:dc:99:26:
a8:cd:73:f0:a5:10:3a:b8:a1:9e:b1:da:0d:c2:57:
31:5b:88:f7:d1:05:1a:6e:d9:15:62:30:e1:c0:71:
8c:33:72:81:3a:7b:c6:70:fe:fa:19:37:b3:33:3e:
b1:ce:9b:58:28:e0:07:9f:61:6c:5e:4c:9f:c8:3d:
a9:12:51:40:53:0b:9b:66:a9:09:93:6c:5a:10:21:
2e:9f:09:b6:43:fc:46:70:2a:ca:56:b8:9c:b1:9b:
14:7e:a0:29:91:38:15:c0:35:29:e9:13:96:41:58:
89:47:0e:96:44:e0:7f:eb:53:01:c4:7c:38:68:5e:
dc:24:dc:dd:ce:01:7a:b6:00:99:40:a2:42:69:a4:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4B:E1:27:6C:D3:4A:67:31:D3:41:5C:47:D4:D3:EE:F3:62:CE:34
X509v3 Authority Key Identifier:
keyid:F5:E3:8B:02:74:44:0B:C8:66:16:FA:3A:AA:7B:E0:FA:8A:4D:EA:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/3139312e3234332e36342e302f32312d3332203d3e20323633343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.64.0/21
Signature Algorithm: sha256WithRSAEncryption
cc:20:64:e3:b9:b2:68:8c:17:c7:3d:82:cf:5c:4c:65:12:5f:
11:c1:23:f1:1d:02:d2:37:56:5c:36:f2:74:e2:f1:bc:7b:6e:
0f:50:d2:11:50:4a:df:68:63:fb:77:f5:dc:12:71:9c:e9:6d:
21:4e:df:c8:f7:22:d3:ab:65:8a:d6:10:d6:8c:a5:65:dc:bc:
36:7c:7b:53:9f:e3:e9:1c:7c:a3:3e:05:97:32:ff:d8:d1:0e:
d7:e1:f1:8b:48:c0:ca:91:48:c0:59:55:23:57:d3:7d:3c:4b:
1b:46:48:e9:d5:8f:d4:6f:e3:60:cd:d6:47:47:22:26:b9:4f:
11:89:f2:7d:dc:cf:50:32:6b:82:53:b1:91:66:6b:04:02:43:
6c:27:07:82:2d:66:25:30:8a:5f:53:ce:8b:fd:6e:f9:de:a6:
ae:77:f6:83:72:55:88:cc:4a:29:8e:b4:b5:d1:c9:34:0f:7a:
3e:ff:a5:b4:1e:07:68:c1:66:dc:1c:f7:77:16:f9:01:c3:e6:
64:55:b8:ce:30:33:92:8f:59:50:7e:b9:b6:d2:63:fe:35:a0:
1f:80:9a:02:48:74:da:c0:e8:6c:02:92:df:72:df:4a:1a:76:
ba:10:e4:cd:21:c1:75:a6:11:2b:1b:3d:9f:33:ef:3e:67:05:
02:d5:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:44:16 2025 by rpki-client