Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e302e302f32342d3234203d3e20323733343331.roa
File: 3139312e372e302e302f32342d3234203d3e20323733343331.roa (raw, json)
Hash identifier: 0Ts1D6+3rNUk2cQ882r3Tc1BWvbPxmYH+5vLRSqhVTE=
Subject key identifier: E0:BF:F5:FB:2E:07:1E:4D:08:7F:37:CD:62:12:21:62:B5:82:D2:0D
Certificate issuer: /CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
Certificate serial: 3B1F918F6DC7B4C2F1E34C64FD2A7C09F9131B92
Authority key identifier: 8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e302e302f32342d3234203d3e20323733343331.roa
Signing time: Wed 17 Apr 2024 11:37:11 +0000
ROA not before: Wed 17 Apr 2024 11:32:11 +0000
ROA not after: Wed 16 Apr 2025 11:37:11 +0000
asID: 273431
IP address blocks: 191.7.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1f:91:8f:6d:c7:b4:c2:f1:e3:4c:64:fd:2a:7c:09:f9:13:1b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
Validity
Not Before: Apr 17 11:32:11 2024 GMT
Not After : Apr 16 11:37:11 2025 GMT
Subject: CN=E0BFF5FB2E071E4D087F37CD62122162B582D20D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:f7:21:21:ab:44:bc:cd:7d:33:a2:d4:06:
4d:d8:9d:c3:e5:b7:c6:71:aa:26:d4:e5:53:5a:77:
3a:be:19:79:f4:01:94:6d:cb:c1:17:e8:8c:6d:9e:
ac:f2:fb:2b:34:f3:77:82:9a:ab:50:5b:d2:9d:c9:
37:64:fc:96:ec:35:db:0f:02:04:48:b8:1d:d3:c0:
6d:81:f7:e6:ab:7a:cb:40:b7:86:29:d8:51:d6:2d:
98:50:c6:11:8b:71:02:be:71:3b:c8:e6:8a:42:57:
41:e8:ab:10:f3:19:54:2b:76:57:49:05:9a:bc:42:
f6:cf:dd:b8:7d:9f:41:31:0c:9e:53:5b:d9:66:79:
8c:d0:70:e1:2e:93:63:f1:6b:c1:60:3c:13:79:3e:
d2:75:ac:15:52:f8:96:5f:38:ff:ef:e1:8c:bc:1d:
d3:2e:52:66:f1:4d:8d:78:15:5b:b2:30:cc:9c:cc:
41:05:09:7f:12:ff:d0:5e:40:aa:d4:7d:a3:f8:1d:
42:ee:35:72:11:a5:ea:7b:07:69:1a:00:ac:40:e5:
6b:ff:b7:13:e2:97:c6:99:f4:49:40:f4:9e:a6:01:
d8:dd:de:23:25:1c:9e:c9:85:26:68:e3:fd:c4:71:
18:1e:93:e8:ba:f7:d2:78:4d:9a:39:9d:68:75:57:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BF:F5:FB:2E:07:1E:4D:08:7F:37:CD:62:12:21:62:B5:82:D2:0D
X509v3 Authority Key Identifier:
keyid:8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e302e302f32342d3234203d3e20323733343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.7.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:21:53:39:b8:1e:b0:f5:de:a8:19:78:90:fc:fe:f4:25:77:
8f:05:fc:d7:c5:0a:6c:e0:af:02:7e:0e:67:80:06:a7:a0:29:
f2:4c:ba:28:01:fc:72:51:7f:09:7b:27:cd:68:a5:35:05:0f:
29:bd:29:6e:d9:32:a6:9e:09:c5:f9:aa:a2:2e:c5:f2:e4:3c:
48:f2:d0:47:e8:00:c9:15:8d:db:1b:0f:a4:67:b1:d6:f5:71:
fe:fc:c1:ba:21:73:df:d2:8f:6d:e4:0e:59:59:43:c2:99:c0:
69:28:5a:2a:78:64:47:52:73:3a:79:ef:c1:1b:cc:56:ae:dd:
2b:8f:9b:0a:b7:4c:94:5b:94:d7:9a:1b:55:2a:98:ee:2b:a9:
3a:9d:6b:0c:58:1e:94:9b:9b:c9:b8:e2:7f:fb:39:00:08:05:
06:21:31:f0:16:5a:03:97:91:b6:4d:d8:bd:a2:5b:2b:76:07:
91:60:27:fb:76:f3:c9:c5:b4:98:ff:53:4d:56:92:4d:6b:c7:
cc:65:db:dd:d5:43:00:0b:64:02:12:08:d5:f4:63:23:80:e8:
e0:77:81:ed:30:1b:bc:0a:dd:57:05:14:69:92:2e:24:76:62:
2e:77:3a:33:e8:ef:97:57:e4:e6:e5:73:5e:33:c9:c4:43:d0:
68:b4:4f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:51 2025 by rpki-client