Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33382e302f32332d3233203d3e20323633333437.roa
File: 3139312e33372e33382e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier: 5rt0cIr0LwA3g+Oa0lK1aX4azcvJ59/gPUUSisj8du4=
Subject key identifier: 4D:70:92:3D:A1:C6:41:4C:7B:41:AD:93:6F:BD:87:C3:57:86:AA:F2
Certificate issuer: /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial: 70F5292202A8A776F40651B62CD45638C393FFA9
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33382e302f32332d3233203d3e20323633333437.roa
Signing time: Thu 04 Apr 2024 17:40:28 +0000
ROA not before: Thu 04 Apr 2024 17:35:28 +0000
ROA not after: Thu 03 Apr 2025 17:40:28 +0000
asID: 263347
IP address blocks: 191.37.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f5:29:22:02:a8:a7:76:f4:06:51:b6:2c:d4:56:38:c3:93:ff:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Validity
Not Before: Apr 4 17:35:28 2024 GMT
Not After : Apr 3 17:40:28 2025 GMT
Subject: CN=4D70923DA1C6414C7B41AD936FBD87C35786AAF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:56:85:f0:2f:37:d1:32:04:e7:9b:4a:4d:
0f:de:77:85:02:4f:67:5a:9a:5e:5b:c2:3a:93:2b:
92:b9:2b:f3:58:71:cf:df:74:4c:4f:02:27:db:1b:
0e:2f:cc:df:38:f7:90:d2:64:78:1d:20:66:15:f1:
cd:5e:61:5a:ac:b1:09:2d:bb:44:49:c9:ee:3b:f6:
ed:91:93:81:97:f0:f2:0d:88:62:46:23:5b:bb:fa:
6b:09:ca:56:48:f5:43:f7:d9:8c:77:ad:b4:47:23:
26:d3:ef:90:83:5a:3d:d9:e9:f0:4d:35:61:b0:1b:
1e:fc:42:05:c2:df:37:54:64:04:5e:61:ff:34:a9:
98:27:fc:c0:3f:b4:42:62:30:76:64:0e:fd:34:75:
7e:e0:30:fa:dd:2b:84:36:a6:e3:f4:a6:b5:95:8c:
f4:51:c8:60:fb:c1:0d:e7:73:b9:f6:ce:6c:dd:f6:
ec:c3:18:c0:40:d4:72:52:33:ed:56:79:97:8d:48:
1f:eb:dc:09:d5:b8:53:1d:51:2d:73:09:af:67:db:
3a:2a:4f:2d:8c:19:36:c3:39:cf:79:8b:2d:54:9d:
01:ba:28:63:43:4e:50:ec:79:c6:cd:f6:3d:c3:44:
c8:5f:3f:0f:31:82:ab:fd:fc:40:f5:e2:03:ef:3e:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:70:92:3D:A1:C6:41:4C:7B:41:AD:93:6F:BD:87:C3:57:86:AA:F2
X509v3 Authority Key Identifier:
keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33382e302f32332d3233203d3e20323633333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.38.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:b2:f6:43:23:5e:e4:ce:0e:fa:54:07:ae:48:09:60:9d:cf:
03:f5:a5:ee:5f:a2:ba:88:a9:9b:fa:60:9b:8e:81:4a:77:6d:
30:ca:b6:5c:13:b1:85:f7:e1:a9:54:15:b8:f6:44:46:2e:75:
92:09:be:8d:cb:2a:b9:eb:3e:bb:28:e0:95:52:d0:7e:4f:42:
6f:0f:db:5f:91:77:7c:4b:69:a1:1b:74:5f:94:c2:e6:42:94:
37:63:b7:cc:bb:a0:68:78:3a:95:95:57:40:42:22:49:0c:cd:
2d:ce:ac:d2:b2:18:3f:fc:9d:88:ba:40:25:77:37:92:08:e3:
d5:b1:bb:5e:bd:92:ed:7b:01:28:12:e3:45:75:ba:38:4d:34:
7e:e8:59:a3:7f:61:a5:99:9a:a8:e5:32:69:04:ab:66:44:99:
0a:10:c8:3c:e5:f3:ca:ef:5e:a4:a1:69:ae:fa:d4:54:e6:29:
cf:5d:fc:c1:dc:4a:27:bb:ed:29:ac:b3:c0:3b:e6:8e:64:9b:
aa:8f:15:8f:36:2c:db:7d:18:8e:97:1e:cd:27:01:09:47:75:
05:96:af:4c:52:df:c6:79:b6:05:93:9c:d8:83:6a:7b:0e:62:
e5:87:51:8e:44:f1:62:db:1b:4a:e5:01:54:11:bd:4a:43:56:
6b:90:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:19:29 2025 by rpki-client