Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e31302e302f32332d3233203d3e203631393030.roa
File: 3139312e3234332e31302e302f32332d3233203d3e203631393030.roa (raw, json)
Hash identifier: WgDKFApgnjenJjUrXQM9dLBrM+f3r4G4qpHbD/7C0ro=
Subject key identifier: 6D:D7:5E:37:84:3F:6C:AB:8D:AD:51:B3:02:15:19:70:1B:45:F8:55
Certificate issuer: /CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Certificate serial: 05828F2A3613D59EC7085ADC184B9FB704F108C0
Authority key identifier: 70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e31302e302f32332d3233203d3e203631393030.roa
Signing time: Tue 17 Dec 2024 17:08:39 +0000
ROA not before: Tue 17 Dec 2024 17:03:39 +0000
ROA not after: Tue 16 Dec 2025 17:08:39 +0000
asID: 61900
IP address blocks: 191.243.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:82:8f:2a:36:13:d5:9e:c7:08:5a:dc:18:4b:9f:b7:04:f1:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Validity
Not Before: Dec 17 17:03:39 2024 GMT
Not After : Dec 16 17:08:39 2025 GMT
Subject: CN=6DD75E37843F6CAB8DAD51B3021519701B45F855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:33:2f:99:21:b8:b0:2b:2e:73:a9:82:2e:
b1:59:3a:df:0d:6b:c4:2b:00:6f:25:4b:63:ff:bc:
e9:5c:64:6a:6c:38:d9:7d:ab:1a:59:47:9e:ce:86:
4a:82:8b:53:50:43:8a:d1:68:42:b9:bc:32:77:d6:
a2:bc:8e:9a:7d:08:81:97:b1:07:2f:7d:30:fe:01:
9e:38:9a:fe:1d:9c:69:46:0d:3e:d3:57:69:89:7d:
aa:de:ad:bf:e2:37:ce:14:69:46:d0:60:ab:6d:10:
db:08:18:92:3b:92:26:cd:40:64:06:2d:c0:96:be:
96:32:d2:46:1e:e1:a6:9a:48:0a:9d:eb:63:cd:a7:
14:68:02:1e:42:d4:fb:f7:c4:a1:79:a7:c0:21:c8:
1e:48:d9:b4:0b:e6:0a:69:9f:91:ab:87:96:f9:4a:
cd:11:66:96:80:2c:52:24:a7:a8:f0:48:e4:c5:77:
91:9a:ab:01:26:60:31:56:ee:db:cd:6c:f3:0d:52:
b1:bc:0a:36:6f:24:a4:0c:11:6b:b0:c6:00:fb:2e:
4d:4b:70:11:df:d9:26:cf:69:12:e8:c9:35:ef:cc:
e1:82:0a:c5:0f:22:d6:b7:05:c9:a7:de:28:d6:a8:
41:a0:2d:69:e0:a5:61:25:c1:17:c3:cb:fe:35:af:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D7:5E:37:84:3F:6C:AB:8D:AD:51:B3:02:15:19:70:1B:45:F8:55
X509v3 Authority Key Identifier:
keyid:70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/7032365C782465DB62283945DC9E72F6BAA6BF0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e31302e302f32332d3233203d3e203631393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.10.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:c4:21:5c:cb:51:62:42:9e:37:90:dc:a3:73:75:6a:95:9d:
6f:f2:10:02:4c:15:b9:1d:ce:e5:d5:e4:40:fe:e3:cf:fb:a5:
88:6f:89:c0:da:bf:40:dd:59:3b:c9:2d:82:b7:ac:09:35:3d:
5b:ba:60:eb:b1:83:45:fc:1e:29:72:a6:75:0a:96:90:1d:0e:
9e:3e:31:73:d1:db:1e:f7:5e:d4:06:3b:0a:1a:bd:6d:a5:76:
bb:de:da:34:aa:1c:6c:2b:2d:2e:cf:a3:ca:b1:c0:df:8d:c0:
20:bf:c3:53:2f:98:46:85:f3:66:91:47:c6:28:40:0e:b4:f7:
74:51:1d:ad:b9:72:50:e3:dc:f7:d1:f5:f7:5f:0b:48:dc:04:
11:7b:98:4e:86:54:a8:89:a3:98:a8:1d:26:e1:58:a2:50:85:
32:c8:04:56:2b:3f:09:e2:4f:4d:92:42:de:14:ff:99:77:7d:
64:b7:28:ea:54:1c:43:2e:d7:72:cc:a4:77:5d:40:94:23:51:
b3:84:8a:04:af:ad:38:1f:97:4a:80:a4:62:bb:3e:59:a0:26:
96:ce:71:49:a8:e4:69:19:33:9f:ad:c6:2c:23:b9:a1:22:86:
9f:8b:31:d6:a7:64:81:4e:36:2f:fd:3c:86:88:3f:47:7b:78:
c0:52:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:29:25 2025 by rpki-client