Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3GTrzrpcwYR8DHxknFwJ3ozZyiqvg6cYMbAFWZte922d/0/3139312e3234302e3133362e302f32312d3234203d3e20323633363537.roa
File: 3139312e3234302e3133362e302f32312d3234203d3e20323633363537.roa (raw, json)
Hash identifier: lRTC10FMO5HKQSLKEcX37A2DpZ5Qhn/VjeMqME7E0v0=
Subject key identifier: F1:54:E2:E5:41:81:5B:BC:97:F6:52:C8:38:F5:91:47:8C:12:AF:52
Certificate issuer: /CN=C99A36FE9D1F41CA87AD5F722E3868F0401B3664
Certificate serial: 2C04B44EB1FAAA416C1A10FCA46F9E40A9681C8C
Authority key identifier: C9:9A:36:FE:9D:1F:41:CA:87:AD:5F:72:2E:38:68:F0:40:1B:36:64
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C99A36FE9D1F41CA87AD5F722E3868F0401B3664.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3GTrzrpcwYR8DHxknFwJ3ozZyiqvg6cYMbAFWZte922d/0/3139312e3234302e3133362e302f32312d3234203d3e20323633363537.roa
Signing time: Mon 01 Jan 2024 16:32:27 +0000
ROA not before: Mon 01 Jan 2024 16:27:27 +0000
ROA not after: Mon 30 Dec 2024 16:32:27 +0000
asID: 263657
IP address blocks: 191.240.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:04:b4:4e:b1:fa:aa:41:6c:1a:10:fc:a4:6f:9e:40:a9:68:1c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C99A36FE9D1F41CA87AD5F722E3868F0401B3664
Validity
Not Before: Jan 1 16:27:27 2024 GMT
Not After : Dec 30 16:32:27 2024 GMT
Subject: CN=F154E2E541815BBC97F652C838F591478C12AF52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:22:b6:ed:24:44:9e:20:7e:ff:69:42:bf:
72:56:8f:8d:32:eb:ac:aa:30:b4:f8:4a:5b:17:13:
35:0a:8d:ee:6a:b3:81:62:70:f7:ee:15:42:14:2b:
20:aa:33:35:3a:83:87:1d:be:47:b6:4d:11:e8:5c:
4c:9c:91:40:a2:e2:1d:67:0f:15:ce:c5:cd:53:a4:
07:18:32:91:c3:cd:22:b8:2f:27:17:f3:ec:08:14:
66:b6:88:1b:96:b8:e8:84:5b:cd:26:1a:b6:4e:a1:
7a:6f:ba:5e:78:be:4d:ed:7a:10:87:08:9e:98:b4:
33:9e:5b:3c:cf:bb:ba:e3:5c:fa:c0:1f:9a:e9:82:
c1:af:44:10:20:d4:bb:44:55:e4:13:54:11:83:34:
f8:ee:1a:b6:65:b9:d4:39:9e:c1:62:88:d2:16:31:
4b:9a:9f:8e:ed:e6:52:b3:d8:85:7c:7b:ad:e5:8c:
36:ce:46:dd:cf:0f:97:34:61:5e:f2:4c:df:e6:b9:
89:82:6b:9d:7d:68:c8:cb:79:cf:f8:f3:97:18:27:
35:11:57:d6:20:24:17:3e:86:8b:6f:10:1d:05:56:
ff:36:75:5b:a0:cd:58:af:1d:56:2c:9d:dd:82:40:
f5:90:cd:8b:5b:be:6b:e4:72:4b:7d:a8:81:3d:27:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:54:E2:E5:41:81:5B:BC:97:F6:52:C8:38:F5:91:47:8C:12:AF:52
X509v3 Authority Key Identifier:
keyid:C9:9A:36:FE:9D:1F:41:CA:87:AD:5F:72:2E:38:68:F0:40:1B:36:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3GTrzrpcwYR8DHxknFwJ3ozZyiqvg6cYMbAFWZte922d/0/C99A36FE9D1F41CA87AD5F722E3868F0401B3664.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C99A36FE9D1F41CA87AD5F722E3868F0401B3664.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3GTrzrpcwYR8DHxknFwJ3ozZyiqvg6cYMbAFWZte922d/0/3139312e3234302e3133362e302f32312d3234203d3e20323633363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.240.136.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:3d:6f:3b:8b:a6:be:41:cc:41:47:0a:dc:58:b0:a0:0d:59:
38:fb:9f:93:3a:a9:ae:72:40:bf:ac:27:17:b2:91:7b:5e:04:
56:79:ce:49:70:39:b4:ca:80:e3:3d:03:c4:c4:d4:96:62:f7:
62:25:c3:10:e5:e0:90:45:f2:64:af:14:0a:dc:0e:7f:e4:3a:
43:73:cd:74:97:e7:25:5b:c4:16:ca:6e:5d:76:b4:69:bc:27:
47:8a:58:11:a2:f9:9b:a3:ab:09:0d:c0:f9:6c:25:17:17:e7:
2e:f0:bc:8d:35:bd:65:7c:93:80:cc:64:e6:98:76:0b:93:a7:
5a:c8:ed:dc:bb:d6:fd:c8:6b:15:7b:c3:0a:79:22:e5:09:09:
0e:7f:56:5c:a3:ce:9b:c1:ac:fd:aa:12:2c:75:b2:ec:35:bc:
e2:f8:21:ac:b3:4c:bd:02:d4:b8:07:79:1e:26:dd:cf:b4:eb:
05:99:63:5d:fe:89:e3:9e:2d:31:5d:50:84:30:ea:86:72:c0:
b3:21:e1:bc:7d:93:9e:11:d5:8c:d6:ed:44:c2:e0:ce:6a:b0:
cd:dd:97:7f:83:80:ad:40:4f:70:5d:ab:46:1b:3b:f2:b7:ce:
b7:8c:ad:10:9a:7f:3e:be:82:3e:cb:7d:2b:4a:b7:7d:38:d4:
5e:7a:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org