Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32352e302f32342d3234203d3e20323633353234.roa
File: 3139312e3235332e32352e302f32342d3234203d3e20323633353234.roa (raw, json)
Hash identifier: 4kwMMhNZth7gDe2jg30CAP3gsVCJsCLKNWW0Ezq8kI4=
Subject key identifier: 84:94:8B:A4:0A:C7:8F:44:BF:99:57:A3:7D:32:B5:BE:EF:AE:75:4D
Certificate issuer: /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial: 3158706C893A2FB045B2133C75397DAA80B6A846
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32352e302f32342d3234203d3e20323633353234.roa
Signing time: Thu 12 Jan 2023 11:36:25 +0000
ROA not before: Thu 12 Jan 2023 11:31:25 +0000
ROA not after: Thu 11 Jan 2024 11:36:25 +0000
asID: 263524
IP address blocks: 191.253.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:58:70:6c:89:3a:2f:b0:45:b2:13:3c:75:39:7d:aa:80:b6:a8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Validity
Not Before: Jan 12 11:31:25 2023 GMT
Not After : Jan 11 11:36:25 2024 GMT
Subject: CN=84948BA40AC78F44BF9957A37D32B5BEEFAE754D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:ee:4b:52:58:4c:d7:ea:99:22:03:1a:46:
a3:00:1f:27:9f:fe:57:bc:ad:b7:8e:b2:f9:b5:08:
0c:53:41:6a:8d:b9:84:44:e2:f7:41:18:d0:f4:11:
57:84:66:19:dc:4c:04:ae:26:43:1e:9f:a4:bc:c9:
dd:4f:2e:b2:78:bb:e2:ae:e8:1a:e3:39:82:d4:7b:
1c:9b:04:1d:5a:ab:c9:c8:c6:1d:22:74:ae:bb:7f:
3e:14:02:27:bb:37:d4:72:dd:78:2b:c4:53:20:ed:
a5:90:90:00:ee:ff:92:a5:91:e7:80:78:07:6d:7d:
0b:3a:4f:2f:b7:7f:c9:27:d6:88:dd:4a:86:67:23:
b5:dd:eb:d8:ff:04:ee:04:9b:0a:d2:9a:5c:17:64:
19:7d:fa:21:30:bd:c6:c7:73:a7:f3:85:64:3f:84:
ae:9b:4b:2e:21:b1:ac:24:c9:03:8c:3f:a5:e1:de:
f7:de:4b:ce:7b:fb:4a:e0:4e:42:77:13:2c:64:f6:
53:63:3b:b7:6a:21:8d:8f:76:ee:ac:bd:9b:fc:60:
72:83:44:38:bf:87:66:39:2d:bd:fd:01:29:8c:25:
31:8d:a3:a0:e8:5f:ca:14:fc:7f:2a:d6:69:3f:27:
f9:1a:34:e3:c2:12:fc:a0:40:75:e6:52:35:96:85:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:94:8B:A4:0A:C7:8F:44:BF:99:57:A3:7D:32:B5:BE:EF:AE:75:4D
X509v3 Authority Key Identifier:
keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32352e302f32342d3234203d3e20323633353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.253.25.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d5:70:92:37:3d:8a:c6:0b:da:52:53:4b:39:c5:f4:4b:05:
fd:bb:25:ab:01:c1:73:82:79:c1:30:04:f6:e4:93:12:2f:d9:
61:f8:c2:3f:ca:5e:96:8b:1b:8d:0b:f0:9a:2f:82:92:10:29:
4a:11:01:0c:6d:df:cf:e7:37:e4:96:0f:4f:f9:69:81:e2:b3:
82:2b:6c:38:42:35:e3:f7:3f:ca:ab:d0:f2:52:62:0a:97:bf:
4d:f9:6e:d1:7c:81:7a:a4:43:9a:f7:56:9f:cb:ce:22:dd:64:
ad:93:08:8d:5f:60:f2:c8:6a:9d:8d:ed:5f:1d:0b:8d:a1:80:
f8:32:fb:90:57:65:ca:9f:65:96:e9:37:d4:0d:1f:96:fe:26:
8b:c1:35:e1:72:8c:9d:e9:a0:26:17:6e:f3:fd:96:27:dd:f4:
24:90:ee:f0:ab:9a:d5:d9:65:38:ba:7d:4b:f9:43:82:43:a4:
3c:17:34:8e:ff:35:8d:17:9a:c6:f4:a2:dc:b6:ae:34:b0:58:
1d:bb:5d:25:7f:8c:0a:c0:d0:0f:3a:d9:c1:81:c5:d6:85:60:
a4:d5:a2:d8:ba:4b:72:a8:ba:af:37:11:af:c3:0f:4a:78:e9:
81:4d:81:29:ef:a8:8a:a5:94:f0:90:b1:3d:d2:98:94:04:2f:
69:7f:2b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org