Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa
File: 3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa (raw, json)
Hash identifier: HCtVfxUGWKX/P37KryMpWD7YUyuPozAqIIArorHwkqU=
Subject key identifier: F6:DB:F6:75:86:A6:54:F4:D3:97:E0:CC:A7:02:A8:44:EE:BC:5B:99
Certificate issuer: /CN=42F1C78060CC641617C8788CC89AA356D71F344F
Certificate serial: 179C6A4546DB13239DFEA6B8BD4037675814CAF5
Authority key identifier: 42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa
Signing time: Wed 03 Apr 2024 21:57:12 +0000
ROA not before: Wed 03 Apr 2024 21:52:12 +0000
ROA not after: Wed 02 Apr 2025 21:57:12 +0000
asID: 270860
IP address blocks: 190.124.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:9c:6a:45:46:db:13:23:9d:fe:a6:b8:bd:40:37:67:58:14:ca:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42F1C78060CC641617C8788CC89AA356D71F344F
Validity
Not Before: Apr 3 21:52:12 2024 GMT
Not After : Apr 2 21:57:12 2025 GMT
Subject: CN=F6DBF67586A654F4D397E0CCA702A844EEBC5B99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:e7:60:a3:d2:47:4e:8d:2a:60:32:0d:15:
cb:1d:f2:03:45:d1:76:d3:55:fb:65:4a:75:e7:c2:
cd:5f:04:0f:b3:5b:c1:37:78:77:ba:7e:1e:7c:12:
70:df:21:f6:25:e4:fe:29:da:f4:d2:b3:c9:87:91:
ab:71:41:33:25:e3:47:21:da:bf:51:01:77:4a:03:
08:b1:4a:4a:a1:49:e4:5a:10:91:bf:c9:16:b6:fa:
d7:5f:61:03:ac:36:a9:2a:19:ba:96:fd:76:68:ca:
8f:0c:aa:f8:22:ef:71:0b:1e:eb:ec:42:d1:05:54:
59:4b:84:4c:6a:2a:5b:fb:41:0d:39:57:26:41:12:
7b:8e:30:af:de:ce:f0:d4:cb:e6:9e:7e:c4:18:a3:
03:74:39:03:d3:11:b8:6a:8e:ee:51:a3:c5:27:d9:
98:ec:ac:bf:2e:60:91:20:6c:3e:04:aa:23:47:da:
0d:68:a5:25:21:f4:7a:6d:91:6c:fb:ee:56:33:e1:
2a:36:30:22:2f:46:05:ee:9a:33:e7:97:92:0e:8f:
ca:38:95:58:22:bc:f5:a6:b0:b8:f2:2e:73:5c:3d:
03:63:0f:e9:be:d4:f6:58:38:22:8b:98:df:69:79:
9a:db:9e:9f:9c:a3:18:8e:39:db:b1:83:cd:76:85:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DB:F6:75:86:A6:54:F4:D3:97:E0:CC:A7:02:A8:44:EE:BC:5B:99
X509v3 Authority Key Identifier:
keyid:42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.244.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:9e:c4:a3:cd:13:1f:33:bb:55:ae:46:0b:19:a9:2b:1a:d1:
53:68:dd:53:7f:11:c8:69:28:11:a4:80:37:ed:8b:9c:6f:82:
2c:4a:ff:e5:ec:cf:ae:83:26:b6:be:01:e3:65:8f:4e:96:e1:
40:a1:c7:07:04:19:d3:14:76:0b:83:fe:48:42:ee:a1:a6:63:
74:3f:09:c4:d3:9b:60:ec:fd:9d:f0:46:f3:ba:e6:5e:d3:97:
26:95:47:a6:f8:73:46:15:45:cf:1d:fe:2d:2e:04:96:3c:f9:
a1:eb:3a:c2:5c:cb:09:4c:8d:fd:98:e9:24:6c:76:27:08:ad:
95:4b:89:10:99:03:3c:56:a3:b9:a6:75:40:0c:8d:5e:aa:78:
4a:d9:9b:a1:04:da:34:0d:fe:71:59:ed:59:bb:76:7e:fa:04:
64:66:c1:d3:bf:15:be:36:12:59:70:a6:e1:ce:c1:a6:13:91:
ee:9e:4c:24:ad:20:e1:e9:d3:3b:8d:39:bd:26:94:3b:e0:71:
ba:3c:f9:c8:cc:ff:38:52:6f:d7:4a:3d:6e:b8:8b:39:cd:62:
30:4a:35:83:6a:f8:85:e9:ea:64:c8:a4:eb:e2:6d:56:0f:ed:
ec:0e:14:37:be:98:b0:08:03:26:be:1d:42:ea:7d:74:c5:a2:
f5:37:7d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:19:04 2025 by rpki-client