Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e382e302f32332d3233203d3e203631393030.roa
File: 3139312e3234332e382e302f32332d3233203d3e203631393030.roa (raw, json)
Hash identifier: CmgILyHM1fV9DoqYOThXgNOGQrgX8NF7gwVYbHiPKJM=
Subject key identifier: DB:6F:F1:2B:8B:DA:AD:30:8E:EC:C5:A0:7E:70:A4:88:30:41:0C:9C
Certificate issuer: /CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Certificate serial: 614A1F2FB3E90D98699ABAE4B8E30787DDD2EDF6
Authority key identifier: 70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e382e302f32332d3233203d3e203631393030.roa
Signing time: Tue 17 Dec 2024 17:07:26 +0000
ROA not before: Tue 17 Dec 2024 17:02:26 +0000
ROA not after: Tue 16 Dec 2025 17:07:26 +0000
asID: 61900
IP address blocks: 191.243.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4a:1f:2f:b3:e9:0d:98:69:9a:ba:e4:b8:e3:07:87:dd:d2:ed:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Validity
Not Before: Dec 17 17:02:26 2024 GMT
Not After : Dec 16 17:07:26 2025 GMT
Subject: CN=DB6FF12B8BDAAD308EECC5A07E70A48830410C9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:01:d7:3c:bc:1d:7b:cc:3e:b2:ca:9b:94:
38:e1:0d:f1:05:2c:e7:a1:86:b1:5e:dc:ef:38:af:
0f:e9:d8:66:3b:83:ac:d8:7b:f7:0e:f6:07:97:58:
75:e9:06:50:9e:c1:b9:fa:d8:3f:85:da:fb:c9:0d:
98:35:25:8f:d5:e1:e6:17:8d:49:7a:f2:59:14:26:
8c:23:2a:c7:70:b9:b9:58:c5:bd:ac:c8:93:c9:4e:
da:f7:61:00:f2:52:35:78:73:a0:d7:cc:5f:0b:c9:
8f:7d:73:c0:f9:ad:23:da:bf:ac:02:6a:3d:c8:01:
73:80:17:d2:04:b5:f6:16:8d:57:c9:b6:17:70:f7:
3e:37:dd:8f:fb:f6:53:c5:6a:0d:4b:2b:b4:70:db:
55:ef:29:b0:1f:97:3d:ab:67:99:7f:bc:8e:c6:66:
17:06:e0:b5:87:ad:03:c6:94:95:c0:b0:b2:ea:2b:
48:94:5e:1f:43:46:48:d8:05:f1:05:bd:6d:f8:64:
3d:25:0a:01:59:33:97:83:63:90:51:5c:bb:48:71:
d0:20:0a:91:c3:16:6f:09:18:a2:1b:0c:b5:bf:71:
c9:cb:d1:0a:35:00:69:5b:ba:04:d7:94:ed:91:36:
04:4a:17:89:c7:82:25:1b:5b:22:fd:52:93:79:b2:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6F:F1:2B:8B:DA:AD:30:8E:EC:C5:A0:7E:70:A4:88:30:41:0C:9C
X509v3 Authority Key Identifier:
keyid:70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/7032365C782465DB62283945DC9E72F6BAA6BF0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3139312e3234332e382e302f32332d3233203d3e203631393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:5f:e7:a7:02:3c:17:2f:f3:0d:cd:db:36:9a:0e:af:61:22:
28:94:06:db:38:15:dd:f6:60:29:6f:89:97:9a:f0:05:c0:17:
16:52:a7:ad:c6:f1:1b:5b:29:3a:6a:06:85:da:7e:ed:2d:ed:
9a:85:21:88:d4:95:c6:2d:a1:7b:58:ff:b2:97:d0:c6:ea:34:
72:d5:ef:eb:81:00:dd:16:5d:0c:eb:ec:67:cb:a1:77:7c:3e:
ce:38:96:2f:7c:21:e2:fe:dc:8a:32:b6:a0:6e:3a:11:3d:0e:
13:0d:a7:5a:24:1e:18:29:0f:91:86:99:f0:19:fc:b5:27:a2:
08:8d:15:51:d5:7b:3a:db:2f:e5:9d:fb:79:2f:69:46:6d:ce:
2d:8b:a4:80:40:3e:0f:a8:aa:e5:bb:f6:64:e1:3b:3a:dc:81:
c6:7a:3c:38:09:42:37:8e:43:53:d0:fa:ad:03:97:63:c2:5f:
1c:72:61:43:b0:33:58:ef:ec:65:97:88:48:1e:56:d5:1b:65:
ee:f8:68:7e:0d:86:24:6a:b1:03:16:ab:13:9f:d2:7d:02:aa:
11:c3:03:ec:12:07:98:6d:f5:1e:09:d6:59:3e:13:02:7f:a6:
b3:31:84:80:34:90:41:ac:44:58:28:a5:93:c7:1a:b6:07:31:
a3:aa:3d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:32:21 2025 by rpki-client