Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3139312e35332e35322e302f32342d3234203d3e203236353036.roa
File: 3139312e35332e35322e302f32342d3234203d3e203236353036.roa (raw, json)
Hash identifier: Bsklmyd0yMY/lU9PGkN8y3d68ftBU8t9/FQvlh9UB0g=
Subject key identifier: C8:30:CC:A9:C9:B9:48:EA:52:3B:E9:E3:9C:5F:EE:92:B8:23:14:90
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 1D79D411DCF1E62BAA1BC88940FF501A2E3478FE
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3139312e35332e35322e302f32342d3234203d3e203236353036.roa
Signing time: Fri 10 Jan 2025 14:19:32 +0000
ROA not before: Fri 10 Jan 2025 14:14:32 +0000
ROA not after: Fri 09 Jan 2026 14:19:32 +0000
asID: 26506
IP address blocks: 191.53.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:79:d4:11:dc:f1:e6:2b:aa:1b:c8:89:40:ff:50:1a:2e:34:78:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:32 2025 GMT
Not After : Jan 9 14:19:32 2026 GMT
Subject: CN=C830CCA9C9B948EA523BE9E39C5FEE92B8231490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:77:e1:b6:3a:db:e9:4d:1a:7d:af:c0:94:
8d:23:30:ad:49:1d:bc:f0:d8:cb:20:78:5d:66:a0:
f5:cb:74:de:e7:79:4d:12:c4:2a:02:d3:2a:92:cf:
5e:c8:a0:2b:db:7b:7f:db:0a:24:96:ff:68:c2:9c:
70:6e:d3:06:2d:5a:18:97:a5:58:db:56:26:a0:31:
82:b8:51:7c:6d:9c:76:3a:a8:b7:e5:c9:d6:7e:9f:
69:07:80:66:c1:87:63:15:86:fe:80:b5:e1:a3:53:
78:da:54:34:5c:51:5f:86:42:1f:9d:8a:af:c4:71:
18:16:92:1d:a6:bf:66:f9:52:0a:07:ad:09:9b:41:
17:7d:fc:99:9e:d2:39:14:41:9a:ad:83:83:4b:3d:
43:29:31:94:80:d6:9c:d2:69:18:6c:fb:dc:c8:b8:
a6:3f:fa:ff:ad:a3:eb:b9:27:13:2e:fa:f5:fa:fb:
51:60:9b:a9:cd:cb:c7:f4:e7:63:04:4d:c3:96:62:
46:f9:49:80:e5:da:90:c8:7e:32:99:ed:6f:11:c8:
92:17:e3:e8:d3:30:9c:0b:35:79:15:69:17:84:e8:
d5:1c:0e:51:1a:94:e0:b6:bd:78:01:e8:8d:08:fb:
f7:9f:3b:27:c0:d2:75:35:84:4c:6d:22:41:92:fe:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:30:CC:A9:C9:B9:48:EA:52:3B:E9:E3:9C:5F:EE:92:B8:23:14:90
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3139312e35332e35322e302f32342d3234203d3e203236353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.53.52.0/24
Signature Algorithm: sha256WithRSAEncryption
10:71:73:72:9e:c0:b8:a6:a1:56:83:fa:62:16:58:7f:71:30:
cf:41:e6:6f:a9:ec:56:43:7f:fd:95:da:b8:8e:ba:8e:f7:a5:
03:65:58:e9:51:7a:5d:1a:d9:84:3d:24:52:da:45:a1:bc:3b:
8d:28:3b:7a:c4:2b:6c:aa:fa:6c:b2:03:fa:0e:8e:b8:91:fa:
91:84:be:89:60:54:88:61:98:01:cf:03:81:77:ae:96:dc:e9:
0c:a1:59:99:14:be:51:b2:21:7f:ec:67:c9:37:53:c8:45:78:
cb:ab:6a:4e:aa:48:59:7d:3c:51:ee:9e:62:74:be:65:0a:89:
b7:0b:e5:3d:c6:33:d6:a8:aa:68:be:6c:36:e5:f4:50:5d:f6:
db:7c:fa:1f:ae:0e:8a:70:37:d7:4f:9f:6d:c3:49:ae:f3:be:
29:d8:d4:a0:05:78:51:e9:1e:8b:8b:b5:8d:85:7d:9e:8a:ce:
6f:88:c7:5d:d2:6f:ef:e6:c1:93:04:f1:12:71:a1:cd:29:10:
cb:90:35:3b:5e:0b:b2:44:4b:fa:59:40:59:8b:ed:e6:22:69:
ef:4d:18:d9:2d:11:bd:2c:c6:1d:50:56:90:65:f1:af:01:24:
b6:e4:18:8d:71:f4:9a:6f:9a:66:00:cf:8a:e0:3a:a1:66:25:
57:6e:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:12:01 2025 by rpki-client