Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/3139312e372e3136382e302f32312d3234203d3e20323632383631.roa
File: 3139312e372e3136382e302f32312d3234203d3e20323632383631.roa (raw, json)
Hash identifier: Yl3nn6w0EjZldrxi9DWBLJ6o8Sb7nIzO9CckV/7FVHw=
Subject key identifier: FF:FD:B9:75:62:C4:18:34:4D:7C:D6:0A:67:62:5A:D2:A8:45:D5:CD
Certificate issuer: /CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Certificate serial: 27A2162EADCE664C859F88328E11D9ED938DD36E
Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/3139312e372e3136382e302f32312d3234203d3e20323632383631.roa
Signing time: Thu 04 Apr 2024 08:22:44 +0000
ROA not before: Thu 04 Apr 2024 08:17:44 +0000
ROA not after: Thu 03 Apr 2025 08:22:44 +0000
asID: 262861
IP address blocks: 191.7.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a2:16:2e:ad:ce:66:4c:85:9f:88:32:8e:11:d9:ed:93:8d:d3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Validity
Not Before: Apr 4 08:17:44 2024 GMT
Not After : Apr 3 08:22:44 2025 GMT
Subject: CN=FFFDB97562C418344D7CD60A67625AD2A845D5CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:de:a0:74:48:14:2f:53:ff:ff:8a:4e:a2:
18:67:a7:80:3a:70:b6:88:9d:ef:8f:c8:ad:28:34:
94:d6:26:c8:be:d2:59:f6:a9:8c:1b:55:4c:cf:b7:
59:8c:cf:16:13:0e:1a:41:9e:e1:0c:55:53:66:70:
47:5f:4e:44:c9:3e:e4:6a:2a:8e:f9:07:2a:41:85:
e2:da:c7:33:db:4a:50:1d:f7:8b:cc:17:a8:a9:03:
50:22:7f:fd:df:3f:8c:88:fa:f4:fc:d7:a2:5a:fd:
6e:12:21:e2:8a:47:8d:fd:24:b8:96:3e:bc:41:b9:
c4:b8:2d:ac:23:21:99:fc:0d:ab:23:38:35:74:28:
9c:2e:b8:9e:f6:2d:29:ca:e2:03:82:ba:ba:2e:8f:
a4:ef:60:19:72:e0:0d:87:97:33:f1:c4:76:57:b1:
6e:eb:0d:7a:e3:23:76:22:3c:ac:6e:d4:7a:38:15:
e6:f9:af:d5:26:7f:0d:4d:4b:1c:6b:f9:53:92:a8:
85:95:b9:6e:12:6b:1d:ef:d2:c1:9e:32:23:58:8c:
08:0d:6a:c8:77:e1:43:55:21:8d:13:cb:cd:a6:de:
03:82:c8:43:a4:db:1b:1b:8f:0b:07:e4:39:dc:4a:
77:59:3a:c6:bc:dd:3a:7f:59:da:4c:33:05:0d:13:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FD:B9:75:62:C4:18:34:4D:7C:D6:0A:67:62:5A:D2:A8:45:D5:CD
X509v3 Authority Key Identifier:
keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/3139312e372e3136382e302f32312d3234203d3e20323632383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.7.168.0/21
Signature Algorithm: sha256WithRSAEncryption
42:4b:c4:b4:c3:4d:bf:ba:b4:88:8b:bb:2b:02:ec:83:2c:a7:
bb:4e:5b:a9:98:d4:4f:da:27:a5:f5:a1:ee:40:d1:47:fd:8c:
28:55:f5:37:19:31:25:8a:91:89:a9:c4:0e:c2:61:9a:86:8e:
10:35:e9:c2:de:85:2a:bb:3c:eb:e7:d8:34:26:0e:df:68:e4:
b5:76:a7:d0:b5:f7:b0:11:3f:cc:72:26:b3:d6:4d:4d:ab:dc:
4f:be:1a:e7:7e:e0:62:c5:30:3e:2d:a6:d0:3a:5e:2d:a7:f7:
30:2b:31:b9:38:08:25:0c:cd:d1:dd:e1:e5:3e:49:b1:dd:27:
15:fb:8f:f5:5a:17:d8:72:14:e7:c3:03:cd:ee:40:70:11:56:
ef:5c:81:45:a9:01:4e:97:4a:8d:93:5b:21:4c:bf:c0:a5:fa:
1e:6f:ec:fb:03:89:3e:0f:8b:e0:0e:1f:04:fb:50:e9:fb:2d:
99:27:64:77:46:d3:ad:f9:2a:7d:d3:28:c5:c3:0d:0d:e3:4b:
ec:4a:f9:b3:d8:2e:dc:a1:41:95:7c:11:84:1a:cc:a1:fd:78:
60:67:b9:c5:82:71:aa:2d:3b:7d:9c:89:00:de:c7:60:63:57:
73:ed:13:bd:5b:88:45:52:72:dd:dc:8d:48:49:4c:a6:c2:ac:
d2:b1:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:42:55 2025 by rpki-client