Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31372e302f32342d3234203d3e20323632343835.roa
File: 3139312e372e31372e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier: qNu1QS7LpciYB/9NFO4d0k1Ki6tnM6I25rHziy9Y6f0=
Subject key identifier: EC:A9:40:85:87:A5:34:65:FB:FC:03:0B:5E:9A:FA:1E:70:46:96:1C
Certificate issuer: /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial: 73417D7DC9FB9D50D9E9CC1714EEA30F4C0A5016
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31372e302f32342d3234203d3e20323632343835.roa
Signing time: Sat 27 Jul 2024 21:13:25 +0000
ROA not before: Sat 27 Jul 2024 21:08:25 +0000
ROA not after: Sat 26 Jul 2025 21:13:25 +0000
asID: 262485
IP address blocks: 191.7.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:41:7d:7d:c9:fb:9d:50:d9:e9:cc:17:14:ee:a3:0f:4c:0a:50:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Validity
Not Before: Jul 27 21:08:25 2024 GMT
Not After : Jul 26 21:13:25 2025 GMT
Subject: CN=ECA9408587A53465FBFC030B5E9AFA1E7046961C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:d7:05:02:29:d8:a6:a8:e0:b0:78:c1:c6:
b8:78:dc:0c:bd:6c:6b:52:c2:59:fe:73:70:fc:c2:
86:f2:1a:9a:c5:63:af:70:c0:96:ae:cc:1e:b5:90:
50:cc:90:4c:54:79:e2:d8:2f:0e:74:d6:a7:8a:95:
83:58:9a:43:ca:95:9e:76:72:7b:d7:9b:0c:b8:48:
59:cc:ab:08:69:fe:bd:07:30:41:5c:07:b3:24:44:
9a:06:a9:71:2e:15:cd:ac:f6:a0:9d:f7:7b:56:c4:
3c:dd:40:25:1a:0e:73:54:94:ef:2c:2c:98:9d:01:
f4:21:93:4b:4a:a0:e6:7f:fe:ea:7b:2d:57:01:93:
ae:54:dc:e4:8f:a6:d8:99:16:73:f0:9b:a6:80:aa:
cf:2a:a4:11:25:c3:67:50:c0:88:77:d2:40:e2:20:
67:ab:da:f9:9d:5b:28:dc:c1:dc:1b:10:5c:ad:d5:
27:c0:2a:dd:66:f7:d4:6e:71:50:98:71:7c:94:76:
2c:9e:f1:35:94:81:b6:c2:8c:72:40:54:6d:11:1b:
fd:2e:6c:f8:2b:64:e0:f5:84:8b:8b:ec:d7:80:d2:
a3:bd:6e:ef:dc:86:b8:04:11:ba:00:51:cb:32:3f:
8d:8a:c2:40:59:88:72:7e:f8:ca:0a:38:71:46:05:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A9:40:85:87:A5:34:65:FB:FC:03:0B:5E:9A:FA:1E:70:46:96:1C
X509v3 Authority Key Identifier:
keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3139312e372e31372e302f32342d3234203d3e20323632343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.7.17.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1e:39:98:3d:db:92:7c:0e:9c:da:9f:7a:1f:a7:d1:3e:98:
6f:54:9a:7e:00:97:ed:eb:68:66:7a:0f:c7:21:9f:2d:07:da:
ba:28:9c:81:65:96:78:67:8a:fd:a2:81:3a:62:37:e1:3c:b1:
41:5d:aa:5e:65:8c:7f:36:c5:f0:55:b1:e5:72:a8:5c:10:ce:
72:76:3b:08:de:6b:70:5b:fc:b9:7c:e6:20:f6:32:cd:40:61:
27:c7:44:61:cb:4f:2a:ff:d6:0f:ff:68:1f:f5:30:50:14:a9:
ae:1a:ef:0e:51:d1:fb:f4:c5:b8:cb:f7:30:ef:8e:08:23:5c:
49:98:cc:79:97:83:a3:87:fd:82:58:1c:a0:7d:17:8b:5d:7d:
b4:17:4e:cb:8e:c0:ae:60:ff:4e:e2:6a:04:f6:1b:b2:f6:2f:
e3:7e:51:3c:b0:e6:fc:39:76:26:72:9b:3e:04:d6:b0:f2:52:
49:03:d1:b5:26:07:96:61:dd:1f:ef:e1:24:d8:ec:1b:b6:d1:
1f:dc:cb:3c:60:6d:20:8e:6a:01:9c:c6:d0:5e:f9:00:4f:ba:
99:99:6a:72:3f:97:9b:ed:84:eb:b3:9a:64:f2:d6:24:33:f1:
32:7a:ca:06:ea:72:86:38:90:fc:96:90:26:26:e7:41:13:45:
57:e7:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:45:42 2025 by rpki-client