Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32312d3231203d3e20323632393031.roa
File: 3139312e3234302e3137362e302f32312d3231203d3e20323632393031.roa (raw, json)
Hash identifier: ge8mOoksiycQUnCXrjhMURuPIPPzVHkIh969C/kDzAI=
Subject key identifier: D8:41:CB:14:70:1C:F9:ED:F3:8E:11:0A:CE:60:88:86:D1:C6:08:17
Certificate issuer: /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial: 494DE08FC8C43FE3EE3F8058B42894F131651077
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32312d3231203d3e20323632393031.roa
Signing time: Mon 04 Dec 2023 19:44:33 +0000
ROA not before: Mon 04 Dec 2023 19:39:33 +0000
ROA not after: Mon 02 Dec 2024 19:44:33 +0000
asID: 262901
IP address blocks: 191.240.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4d:e0:8f:c8:c4:3f:e3:ee:3f:80:58:b4:28:94:f1:31:65:10:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Validity
Not Before: Dec 4 19:39:33 2023 GMT
Not After : Dec 2 19:44:33 2024 GMT
Subject: CN=D841CB14701CF9EDF38E110ACE608886D1C60817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:f0:c5:a7:e8:32:d0:98:33:f8:41:0f:34:
67:d8:a1:5f:b8:ed:d3:d2:0c:83:2d:1a:ef:5c:cf:
a5:90:d0:b8:c2:66:a5:19:68:09:ac:01:7a:8d:6d:
a8:41:3a:a3:c5:88:34:c3:d2:98:fa:42:37:fa:41:
25:91:b7:ab:8a:a1:3e:ce:3a:23:0e:b7:60:38:4e:
dd:ed:a6:0d:82:5e:6b:6e:73:ab:65:61:63:04:a7:
02:7e:fb:9c:fe:21:4f:89:6a:c7:44:82:f3:32:b2:
3d:c9:84:35:88:af:97:db:61:15:3f:92:7a:30:2a:
d8:ff:ff:9a:1d:68:86:df:b0:d4:0e:49:23:98:a4:
13:17:77:86:7c:4f:6e:28:be:90:1b:b6:df:fb:7e:
e0:69:5a:b0:9f:dd:7d:86:87:95:f0:a3:91:1b:eb:
46:05:b9:51:21:53:19:20:20:5b:73:9e:72:f6:81:
4b:47:6a:09:17:71:26:36:63:eb:40:a6:80:a1:6e:
db:5d:38:72:22:9f:5e:ba:a0:21:6e:86:7c:d0:58:
35:da:00:ef:d0:73:c5:28:52:e9:ab:51:52:bd:18:
fc:c7:2e:54:92:48:13:d5:f5:a3:6a:c3:35:6c:1b:
d7:92:20:3b:80:f1:f9:49:a8:14:0b:bb:d9:a5:ef:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:41:CB:14:70:1C:F9:ED:F3:8E:11:0A:CE:60:88:86:D1:C6:08:17
X509v3 Authority Key Identifier:
keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32312d3231203d3e20323632393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.240.176.0/21
Signature Algorithm: sha256WithRSAEncryption
35:bf:31:63:aa:89:bd:d2:1f:49:6c:c9:6c:23:be:f5:57:2f:
61:e3:d7:36:df:52:36:87:d6:be:c1:cc:f1:94:20:2c:5e:4e:
53:0b:d4:71:80:12:f8:98:13:99:95:ee:6f:2f:c5:6c:f8:e9:
92:7a:28:9e:84:5e:c0:9f:fa:12:a8:c3:b1:c4:f6:f9:75:08:
8a:d4:75:e4:f3:f7:a1:51:cd:64:0b:49:eb:46:83:37:c3:6a:
51:d2:f0:9f:b7:94:6e:eb:14:06:89:d3:8b:36:66:ae:89:c6:
37:07:3b:8e:48:31:b1:26:1c:d5:b4:d5:73:b3:b1:a7:cf:af:
a6:4a:6e:ea:67:aa:5b:fb:36:8d:47:a5:d9:6f:47:33:e0:55:
9c:6f:62:e9:ac:03:75:66:ad:cb:0c:c4:7d:28:1b:06:33:de:
7e:dd:2d:e8:48:1c:95:bf:15:3d:03:b5:a6:4e:2c:3a:d5:ba:
01:fd:95:61:14:8e:4f:e2:4c:3b:2b:8e:30:8b:90:26:27:12:
1a:34:11:c0:d1:21:d5:96:55:04:15:d0:72:40:69:a9:0a:98:
5d:3f:4f:98:1e:c2:fc:23:63:71:25:5a:cc:53:2b:6c:d5:f8:
8c:37:40:c6:10:20:6e:e8:84:77:0e:07:c0:1e:9f:27:18:a9:
37:db:bd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org