Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32312d3232203d3e20323633353135.roa
File: 3139312e3234332e3231362e302f32312d3232203d3e20323633353135.roa (raw, json)
Hash identifier: 9kBQmnPywY4dUTnA7vVAJNfFy9siv/GmgeflyD4g6e4=
Subject key identifier: 25:53:6B:75:33:CF:FD:6B:98:37:5C:C4:34:19:59:3C:33:A4:14:E7
Certificate issuer: /CN=C21134134C5B8ACCB13D5962CBA1413300788AE1
Certificate serial: 745FD8FDCDA80D3BBEC54B4FCA4558E3E00A3DA3
Authority key identifier: C2:11:34:13:4C:5B:8A:CC:B1:3D:59:62:CB:A1:41:33:00:78:8A:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C21134134C5B8ACCB13D5962CBA1413300788AE1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32312d3232203d3e20323633353135.roa
Signing time: Thu 29 Jun 2023 14:56:48 +0000
ROA not before: Thu 29 Jun 2023 14:51:48 +0000
ROA not after: Thu 27 Jun 2024 14:56:48 +0000
asID: 263515
IP address blocks: 191.243.216.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5f:d8:fd:cd:a8:0d:3b:be:c5:4b:4f:ca:45:58:e3:e0:0a:3d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C21134134C5B8ACCB13D5962CBA1413300788AE1
Validity
Not Before: Jun 29 14:51:48 2023 GMT
Not After : Jun 27 14:56:48 2024 GMT
Subject: CN=25536B7533CFFD6B98375CC43419593C33A414E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:4b:e6:70:07:fe:7c:bc:bb:03:d6:b8:d8:
7b:95:8d:ff:af:c5:9d:55:a0:30:13:80:94:ab:28:
7e:50:a1:8c:1c:ce:bf:9c:0c:2e:76:71:ed:0b:d8:
26:03:84:c9:a7:93:94:56:cf:a8:bc:fc:53:ed:23:
a4:c6:9b:f6:97:86:ae:93:49:14:db:de:3d:c0:cd:
a3:5f:6b:48:2e:cd:53:e6:3a:b8:4a:72:f1:c5:2e:
d6:89:2e:8d:6d:59:86:93:f1:21:b6:45:5f:e1:a4:
16:9e:54:c6:ba:2b:4b:33:d6:b0:12:4c:ca:0c:b1:
bf:b6:02:e2:84:96:91:4b:30:bf:30:a3:64:da:9d:
18:bd:05:3b:a6:33:4f:18:1c:9d:cd:67:30:4d:73:
75:67:6c:45:75:7f:35:eb:4a:f7:13:a4:5a:aa:4d:
7e:b8:10:68:28:8a:e7:12:dc:3b:10:5a:5f:99:c9:
78:68:91:cf:d7:6f:36:64:ec:47:1b:b3:83:5e:38:
14:5f:99:6d:b3:7f:e2:d0:4d:29:a3:9b:65:de:c6:
55:f9:5f:dc:bf:e6:09:a6:91:5d:f4:30:af:ae:aa:
e3:db:5e:c2:64:eb:18:01:ea:a2:22:6f:6c:26:d4:
c7:1c:df:2e:b6:73:fd:83:6f:3e:65:52:e0:9f:0d:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:53:6B:75:33:CF:FD:6B:98:37:5C:C4:34:19:59:3C:33:A4:14:E7
X509v3 Authority Key Identifier:
keyid:C2:11:34:13:4C:5B:8A:CC:B1:3D:59:62:CB:A1:41:33:00:78:8A:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C21134134C5B8ACCB13D5962CBA1413300788AE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C21134134C5B8ACCB13D5962CBA1413300788AE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32312d3232203d3e20323633353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.216.0/21
Signature Algorithm: sha256WithRSAEncryption
44:c6:21:0b:29:2d:7e:e9:82:44:8c:91:aa:09:0e:27:de:61:
5a:e2:d6:01:ab:18:01:81:08:da:9f:79:75:6a:b5:21:71:c3:
11:36:41:94:1c:7f:9f:05:df:ad:84:9d:fa:59:14:fb:1e:04:
50:13:4f:6e:40:17:c2:10:87:49:f7:52:52:a9:db:16:df:3a:
75:e4:6a:3d:79:8b:a1:46:71:69:2d:93:b2:7c:0a:e6:e8:3a:
de:84:ab:8e:cf:47:f1:a5:49:77:4b:36:57:9d:29:c9:ff:2f:
a3:8b:6a:de:72:0c:7c:b9:0f:8e:c9:93:2a:2b:a8:42:1b:be:
fc:6d:31:24:2d:20:fe:1e:cd:a3:63:46:03:98:dd:b7:4a:c5:
bb:39:bb:5d:d2:79:3e:4e:99:11:40:22:1d:6c:a8:28:b5:13:
0a:10:4a:ea:06:c9:96:27:71:73:7c:0f:16:bb:da:89:0f:86:
98:8a:29:7f:7b:63:42:91:ba:bc:8b:8a:33:47:1c:97:7e:2a:
9b:db:8b:d0:8c:30:d9:f9:c2:56:eb:73:a7:b4:cc:99:9e:58:
2d:98:59:b5:69:23:94:d5:68:43:a0:5d:ea:ca:80:9f:86:77:
bc:ba:ac:41:ba:56:e7:ec:ac:36:c9:d0:2f:bf:69:67:5e:cf:
8f:89:81:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org