Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3139312e352e3232302e302f32322d3332203d3e203533323138.roa
File: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier: 0wZwBdWsHnVkpxMrkgatFHVIycknH7b2NpcQFFf45JM=
Subject key identifier: 8C:BF:94:7D:CF:02:7B:AA:B0:68:D9:40:0E:53:87:B1:6D:E6:14:B1
Certificate issuer: /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial: 77A9041B6A81FAF087E0DFE353CB55FCA7A157D3
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3139312e352e3232302e302f32322d3332203d3e203533323138.roa
Signing time: Mon 16 Sep 2024 19:22:14 +0000
ROA not before: Mon 16 Sep 2024 19:17:14 +0000
ROA not after: Mon 15 Sep 2025 19:22:14 +0000
asID: 53218
IP address blocks: 191.5.220.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a9:04:1b:6a:81:fa:f0:87:e0:df:e3:53:cb:55:fc:a7:a1:57:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Validity
Not Before: Sep 16 19:17:14 2024 GMT
Not After : Sep 15 19:22:14 2025 GMT
Subject: CN=8CBF947DCF027BAAB068D9400E5387B16DE614B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:d5:66:f3:69:8d:0e:5a:78:84:45:30:5b:
e0:f6:cb:60:55:cf:da:67:58:77:0e:54:9d:20:fb:
7f:3a:35:89:77:4d:2b:51:4b:3c:c9:a8:c9:f4:be:
31:3e:fa:fc:18:d8:ed:3f:9c:ab:be:eb:79:39:ed:
e6:20:3a:6d:9c:cd:9e:2e:c0:c6:47:7b:85:59:1f:
af:c7:42:6f:ad:61:bc:13:54:6c:ee:a7:ea:f7:ec:
1a:ec:94:76:55:d8:37:01:dd:49:f2:da:1d:e4:be:
26:b3:b5:7a:3d:a8:ec:80:ac:ac:a9:66:cd:a6:07:
ad:2a:3b:17:8e:ea:32:35:57:5f:9a:d4:24:ab:22:
9f:6c:0d:29:9b:c7:6c:a9:85:6d:43:ed:c4:ec:0e:
00:d8:7c:bc:ca:f5:68:0c:55:b8:c1:49:18:6b:61:
3e:6c:e1:9b:5a:d2:85:e9:e0:4e:8d:88:5d:09:47:
12:52:fd:7a:67:92:cc:08:af:93:07:2b:3a:6f:4a:
5b:68:5e:47:dd:93:dc:a7:33:94:c4:37:8a:6d:bf:
b5:85:60:04:49:82:d2:4b:75:74:d8:34:f6:c8:2f:
fe:d8:7c:f2:b3:36:e0:c5:32:80:a5:c5:57:1e:cb:
cc:a8:05:e8:ca:4c:4c:e9:50:da:eb:71:90:50:af:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BF:94:7D:CF:02:7B:AA:B0:68:D9:40:0E:53:87:B1:6D:E6:14:B1
X509v3 Authority Key Identifier:
keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3139312e352e3232302e302f32322d3332203d3e203533323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.5.220.0/22
Signature Algorithm: sha256WithRSAEncryption
91:66:fe:09:a0:6a:75:bd:ca:37:ed:5b:c8:21:5b:80:47:ae:
35:0d:f5:7f:6c:3a:88:5d:24:53:77:32:c2:20:31:65:ac:8d:
45:dc:12:21:f4:84:69:40:45:07:75:02:7c:03:24:92:f6:eb:
c0:02:1c:eb:5a:45:00:f7:50:70:ed:f1:0a:f1:14:67:e8:4f:
9e:eb:83:cb:16:18:16:93:ee:1b:af:30:7d:13:a0:1c:ad:4f:
f5:e3:9b:f1:d7:fe:a9:98:7f:f3:28:dc:72:aa:95:dc:41:d1:
5d:59:2e:ff:0f:92:7d:d9:21:ae:da:a1:19:c6:9a:c4:47:cf:
1d:19:2a:2f:23:ba:4e:09:87:99:30:68:cd:bc:06:a6:41:27:
b6:1f:23:db:60:ac:65:54:54:af:0f:f9:0e:48:a5:6a:f0:0c:
4c:18:92:11:14:68:09:75:88:7a:fa:ed:c9:20:87:69:e5:fe:
0d:ed:3c:6e:73:c5:be:b6:a8:dd:41:22:ce:08:a5:f6:b8:02:
bb:07:d9:c3:e5:cf:bc:c2:fb:f9:2d:79:56:ad:fe:13:de:71:
35:ed:d8:e4:e2:54:e8:75:fd:4b:85:d3:c2:7f:0b:df:9d:72:
e1:82:16:8a:d8:9c:d3:32:52:89:0d:60:0b:11:fc:e6:27:26:
f1:cd:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:30 2025 by rpki-client