Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3139312e3234312e34302e302f32312d3231203d3e203238323230.roa
File: 3139312e3234312e34302e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier: pVlJQEUkBdbJVb6d2tpqu2CYlpqYpAMICKoI2ROqCxQ=
Subject key identifier: BA:FD:5A:76:6B:73:47:56:16:F7:2E:23:78:9D:00:8E:A4:6F:72:5E
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 612C688922CF996AAC9EC9B894834A738099D1E0
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3139312e3234312e34302e302f32312d3231203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:18 +0000
ROA not before: Tue 12 Mar 2024 19:46:18 +0000
ROA not after: Tue 11 Mar 2025 19:51:18 +0000
asID: 28220
IP address blocks: 191.241.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:2c:68:89:22:cf:99:6a:ac:9e:c9:b8:94:83:4a:73:80:99:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:18 2024 GMT
Not After : Mar 11 19:51:18 2025 GMT
Subject: CN=BAFD5A766B73475616F72E23789D008EA46F725E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:0c:2f:6c:e9:72:07:22:d5:17:0d:ea:c5:
4d:a4:2d:f8:79:c3:b2:fd:8e:8e:19:92:d7:d1:d5:
4c:e0:29:42:59:cc:f3:3e:1f:ea:f0:09:6d:df:54:
97:78:e3:89:f2:8a:41:96:16:53:ff:1c:10:51:ce:
d9:40:b0:eb:8a:1b:29:f6:1f:92:42:55:7c:c3:9e:
2b:7f:40:ff:92:14:a5:6d:9a:20:c7:cd:6b:dd:ec:
d4:5d:22:1c:9f:c5:6d:72:96:0e:b6:28:4f:f5:ef:
d4:89:ce:a3:ad:8f:8d:27:09:b2:96:ec:ad:18:88:
cd:88:c1:68:cc:5e:a7:7d:2e:ab:89:30:cd:b6:80:
22:3d:49:86:ea:67:52:72:a5:bb:f9:2d:17:3e:18:
74:12:94:a7:d9:12:c3:8f:cf:4f:f8:e6:77:99:48:
9f:4f:18:66:98:df:cc:d7:72:ea:8b:aa:47:d7:39:
c3:2f:32:c5:d8:d4:73:38:76:a2:ad:36:30:28:31:
bc:7f:02:21:36:70:da:fc:25:86:ee:c9:58:58:76:
30:b0:e8:a2:e1:77:df:a7:80:cf:35:59:2a:1e:fd:
01:5e:39:36:ac:88:b3:62:08:7e:74:ff:65:93:fa:
25:44:e8:14:98:d2:29:e9:9d:6f:cf:dd:1a:79:9c:
a0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:5A:76:6B:73:47:56:16:F7:2E:23:78:9D:00:8E:A4:6F:72:5E
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3139312e3234312e34302e302f32312d3231203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.40.0/21
Signature Algorithm: sha256WithRSAEncryption
76:76:82:58:ff:5a:ba:75:2f:91:70:fa:9f:af:f9:64:5a:04:
cc:0d:1e:76:e7:24:7d:4f:7a:79:14:11:87:9f:23:28:cd:17:
b1:82:43:99:e8:9f:2b:4d:dc:cc:4c:18:60:4c:51:00:04:c5:
99:f7:e0:f5:d9:dd:4d:28:38:58:39:5f:d3:d9:00:3d:af:68:
35:8a:9e:13:44:69:7b:9f:c3:ca:a9:2b:a5:ce:3c:69:04:c5:
10:96:fd:7b:62:64:71:b9:e2:90:ed:f6:49:5e:00:dc:a0:2a:
3b:2c:5e:f0:6a:6d:a3:6d:95:d5:9b:e6:1c:dd:7c:19:ff:70:
7a:5f:ab:46:b1:56:ba:44:9f:fd:5d:5a:ba:92:fe:b2:1b:f0:
af:c5:7a:11:ec:73:a9:b8:27:1c:34:08:f8:44:54:ae:39:0e:
04:55:49:6f:b9:4b:67:f7:4c:2b:94:10:6a:e9:ef:82:99:dd:
8a:51:57:58:f0:9a:d1:da:88:2c:6c:47:74:35:eb:0d:e4:2b:
50:c9:2e:36:88:bf:42:36:39:30:7f:db:21:08:13:3d:55:4f:
09:8e:06:77:46:cf:6c:29:46:76:ad:b9:2e:b8:62:62:62:75:
7e:4e:7a:4f:e7:89:f5:71:2a:3e:88:e8:b2:60:7b:9c:fa:03:
a9:08:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org