Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa
File: 3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa (raw, json)
Hash identifier: BME9n1BUGXotEq5M3188ns7ORE2HIQ/aGYIeSezd66k=
Subject key identifier: A3:16:C3:68:01:FA:36:28:7B:2E:97:40:16:BB:44:E6:7F:93:E4:86
Certificate issuer: /CN=42F1C78060CC641617C8788CC89AA356D71F344F
Certificate serial: 5754400578403A86B79B9864F98EE1ABCF52461F
Authority key identifier: 42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa
Signing time: Wed 03 Apr 2024 21:57:13 +0000
ROA not before: Wed 03 Apr 2024 21:52:13 +0000
ROA not after: Wed 02 Apr 2025 21:57:13 +0000
asID: 270860
IP address blocks: 190.124.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:54:40:05:78:40:3a:86:b7:9b:98:64:f9:8e:e1:ab:cf:52:46:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42F1C78060CC641617C8788CC89AA356D71F344F
Validity
Not Before: Apr 3 21:52:13 2024 GMT
Not After : Apr 2 21:57:13 2025 GMT
Subject: CN=A316C36801FA36287B2E974016BB44E67F93E486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:a3:f6:bb:04:73:13:1d:60:53:ba:48:7b:
79:dd:d9:be:81:d9:de:9e:20:e1:9f:76:52:5b:f9:
5b:9c:e0:76:43:05:eb:f1:ee:04:7d:d7:01:df:49:
13:79:95:d0:f7:0b:12:10:a6:f5:a8:5c:82:d6:2c:
75:bb:38:7c:f0:72:93:d7:73:0e:5a:90:78:90:b6:
f8:c2:93:f5:ef:bd:4e:c8:dd:18:94:04:af:6b:89:
68:e0:b2:a7:c8:64:12:f5:ee:77:98:00:fe:ac:dc:
4c:1b:fc:54:b6:44:ce:26:84:2c:01:2e:c4:15:2e:
90:a0:d1:76:b6:3c:fc:0c:bf:b8:0a:bb:e9:a4:6b:
e2:47:bf:b7:79:33:1d:0b:1a:0f:96:1b:46:52:f8:
ec:23:92:ba:36:30:b1:6d:88:dc:70:28:02:16:25:
c7:73:29:66:c8:c7:4c:d3:3b:e3:6d:61:ea:2a:20:
24:56:be:bd:1e:2d:b3:f8:b2:17:73:c3:48:8f:27:
2d:36:76:35:e3:10:6c:89:4f:a5:e7:85:42:1c:45:
50:f2:f0:4e:b0:8d:d6:0b:5e:94:e9:03:13:e2:03:
7e:d2:53:65:30:e6:7c:c8:25:78:c4:33:84:42:77:
21:66:9b:61:38:df:9c:1b:a6:f5:e1:6a:1b:87:8e:
c9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:16:C3:68:01:FA:36:28:7B:2E:97:40:16:BB:44:E6:7F:93:E4:86
X509v3 Authority Key Identifier:
keyid:42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.244.0/23
Signature Algorithm: sha256WithRSAEncryption
39:fb:a3:0c:29:04:6f:48:a8:be:ca:e0:fe:d4:3c:54:04:61:
3f:77:9c:8b:f1:41:99:70:c0:99:2a:68:bd:b6:20:1a:a2:06:
b0:bb:56:1b:4b:62:b9:e9:3e:19:94:96:c7:39:f0:44:13:aa:
f3:d2:55:d1:b8:62:c5:84:07:b1:93:39:93:a7:08:72:08:1f:
90:1f:8e:35:ca:aa:d8:83:91:10:ec:72:e7:8e:9e:ec:e5:d2:
be:85:94:73:82:0e:43:75:24:c8:4e:96:ce:30:88:af:09:85:
a9:62:14:98:69:a4:09:5f:40:87:f5:ff:64:d0:e2:33:51:c1:
5a:7c:8e:79:e6:2f:fb:7d:fc:15:2d:b5:ba:cd:d0:d9:a7:d5:
67:59:24:68:c8:52:43:6c:fe:fc:57:46:30:2d:4a:be:e4:39:
15:c1:8f:35:d9:bd:e1:da:68:88:19:8b:f9:f8:41:71:98:69:
eb:63:eb:19:da:d7:b6:7e:58:24:69:be:cf:12:3c:0a:af:49:
9f:6d:de:d1:d7:ba:12:ef:75:5b:fe:8f:e5:fa:2e:ba:13:20:
10:c9:ee:4d:33:c6:68:f4:4a:d2:12:95:5c:db:f8:29:24:19:
13:ba:f7:b1:50:1c:b9:e5:22:5b:11:16:a1:9c:94:d8:6d:60:
e1:ac:eb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:18:58 2025 by rpki-client