Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3139312e3234312e34302e302f32312d3231203d3e203238323230.roa
File: 3139312e3234312e34302e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier: yzJiFnGSxRkLqQCTnRQd0Ju9cjDKduKMF7qJQD7eZOE=
Subject key identifier: 2D:00:1F:D4:1D:7E:07:74:E5:BA:16:3D:74:05:4E:90:F4:DF:4E:34
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 225E294B8E6177E0F0AC711F57779649E020F20F
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3139312e3234312e34302e302f32312d3231203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:14 +0000
ROA not before: Mon 08 Apr 2024 20:00:14 +0000
ROA not after: Mon 07 Apr 2025 20:05:14 +0000
asID: 28220
IP address blocks: 191.241.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:5e:29:4b:8e:61:77:e0:f0:ac:71:1f:57:77:96:49:e0:20:f2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:14 2024 GMT
Not After : Apr 7 20:05:14 2025 GMT
Subject: CN=2D001FD41D7E0774E5BA163D74054E90F4DF4E34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:5b:5d:93:57:2b:87:59:7c:4f:33:7a:0c:
93:7f:f1:0b:3d:bb:f8:37:0d:a1:85:44:90:79:3c:
e1:91:c4:e2:fd:9e:26:a1:e9:e7:56:36:05:15:02:
fd:6d:fc:d0:5d:32:17:f4:77:c1:4e:cc:f9:35:54:
9a:df:6a:c7:c0:16:81:0d:40:22:72:15:df:8e:24:
34:43:d6:4b:76:b2:f2:07:8f:33:66:b0:99:09:83:
60:88:b9:8c:ee:36:79:7b:7b:70:b2:29:47:af:4e:
56:76:7e:98:a9:d3:65:6c:41:3d:b8:09:c7:d7:5a:
c7:b5:37:79:dc:e4:44:3e:fb:07:d5:a6:bf:50:99:
d2:31:b7:db:cd:24:59:6c:df:43:79:d3:dd:ea:4b:
72:c1:23:1d:2a:2c:c8:6a:60:24:a2:ef:34:17:c6:
dc:c7:29:b4:5e:65:83:91:35:5c:f1:c8:c7:96:1e:
52:52:ce:09:63:bf:85:f7:e1:e4:32:ab:d1:0d:21:
5e:7c:67:f4:23:35:55:af:70:d0:ac:a1:77:d2:0a:
09:27:69:c6:d4:35:9d:12:1f:8b:cc:f8:c7:1e:1c:
6f:5f:57:a8:cb:e8:e4:4c:33:ab:2d:7e:05:cf:15:
e6:fd:23:97:4c:28:dc:3a:f0:a2:d4:cf:a4:f5:c4:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:00:1F:D4:1D:7E:07:74:E5:BA:16:3D:74:05:4E:90:F4:DF:4E:34
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3139312e3234312e34302e302f32312d3231203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.40.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:bf:8a:c7:e1:31:9b:a1:26:fb:d4:41:50:b4:fe:66:ce:e6:
c9:cd:c6:48:02:e9:cd:30:37:0f:82:4e:9f:62:5c:25:44:ca:
98:5c:28:58:61:7b:fc:49:c1:33:ff:df:2a:63:ec:18:e8:0d:
9c:04:e6:95:82:6f:c0:b5:26:56:48:21:19:02:11:73:e4:d7:
8e:c8:ea:d3:88:65:86:3f:56:08:32:9d:6f:a3:dc:07:ce:84:
aa:27:44:6f:a2:bb:82:26:16:31:9e:f1:4c:77:db:1b:56:0b:
d4:b3:cd:83:f8:f8:34:71:3c:ea:cf:43:dc:66:80:c7:6c:70:
c7:6e:f3:2c:1f:ec:40:db:17:b0:9b:f8:d8:e1:e4:ea:19:dc:
9a:a4:11:14:ea:89:c3:9d:d2:82:31:4d:d4:fa:1d:60:98:5d:
02:d1:4a:ca:cb:69:cf:33:71:92:db:96:ea:87:d0:66:19:37:
dc:70:58:f9:75:cd:b6:ea:53:33:07:d3:63:31:7e:98:4d:bd:
2f:3e:c0:8b:7d:03:39:c4:e5:d3:d8:b2:a7:af:ff:d8:54:4b:
eb:ee:a0:65:1a:10:68:eb:02:57:34:b6:02:d6:b3:69:3a:2e:
e3:7b:28:7c:22:64:44:49:f8:af:06:37:28:7b:15:9d:65:a6:
81:42:4f:59
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIl4pS45hd+DwrHEfV3eWSeAg8g8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMTRaFw0yNTA0MDcyMDA1MTRaMDMxMTAvBgNV
BAMTKDJEMDAxRkQ0MUQ3RTA3NzRFNUJBMTYzRDc0MDU0RTkwRjRERjRFMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaFtdk1crh1l8TzN6DJN/8Qs9
u/g3DaGFRJB5POGRxOL9niah6edWNgUVAv1t/NBdMhf0d8FOzPk1VJrfasfAFoEN
QCJyFd+OJDRD1kt2svIHjzNmsJkJg2CIuYzuNnl7e3CyKUevTlZ2fpip02VsQT24
CcfXWse1N3nc5EQ++wfVpr9QmdIxt9vNJFls30N5093qS3LBIx0qLMhqYCSi7zQX
xtzHKbReZYORNVzxyMeWHlJSzgljv4X34eQyq9ENIV58Z/QjNVWvcNCsoXfSCgkn
acbUNZ0SH4vM+MceHG9fV6jL6ORMM6stfgXPFeb9I5dMKNw68KLUz6T1xOqNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULQAf1B1+B3TluhY9dAVOkPTfTjQwHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzOTMxMmUzMjM0MzEyZTM0MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDv/EoMA0GCSqGSIb3DQEBCwUAA4IBAQB/v4rH4TGb
oSb71EFQtP5mzubJzcZIAunNMDcPgk6fYlwlRMqYXChYYXv8ScEz/98qY+wY6A2c
BOaVgm/AtSZWSCEZAhFz5NeOyOrTiGWGP1YIMp1vo9wHzoSqJ0RvoruCJhYxnvFM
d9sbVgvUs82D+Pg0cTzqz0PcZoDHbHDHbvMsH+xA2xewm/jY4eTqGdyapBEU6onD
ndKCMU3U+h1gmF0C0UrKy2nPM3GS25bqh9BmGTfccFj5dc226lMzB9NjMX6YTb0v
PsCLfQM5xOXT2LKnr//YVEvr7qBlGhBo6wJXNLYC1rNpOi7jeyh8ImRESfivBjco
exWdZaaBQk9Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org