Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa
File: 3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (raw, json)
Hash identifier: YxW33lW8ebcHyuj8KamtO/HSZK/MyK0QGmuoWnQZxqo=
Subject key identifier: 82:5F:3F:A2:C8:61:6B:57:27:D6:8E:4C:BD:FC:B0:38:D5:DE:13:94
Certificate issuer: /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial: 318A669C3F2CA5D9F7C765D155F771EAF03689F0
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access: rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa
Signing time: Fri 16 Feb 2024 11:44:55 +0000
ROA not before: Fri 16 Feb 2024 11:39:55 +0000
ROA not after: Fri 14 Feb 2025 11:44:55 +0000
asID: 263321
IP address blocks: 191.7.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8a:66:9c:3f:2c:a5:d9:f7:c7:65:d1:55:f7:71:ea:f0:36:89:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Validity
Not Before: Feb 16 11:39:55 2024 GMT
Not After : Feb 14 11:44:55 2025 GMT
Subject: CN=825F3FA2C8616B5727D68E4CBDFCB038D5DE1394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:18:d0:da:b8:d4:51:90:a6:cb:f5:e0:5d:
b6:27:2f:78:a2:8c:09:62:06:62:53:ae:56:50:27:
e4:0b:d6:3c:1f:a3:6d:be:55:af:2b:47:fe:5e:1d:
5f:4b:8a:92:41:61:a4:4a:f6:03:82:59:3f:c4:5f:
16:67:b9:7c:3b:73:10:3c:e5:13:17:34:f6:37:72:
e2:63:7b:17:34:f6:32:fd:47:73:fd:82:90:91:c4:
99:6e:14:31:bd:3d:8a:20:a9:61:6f:bb:5b:6b:7d:
93:50:bf:75:bf:9e:ae:72:d1:9c:fa:9b:21:86:dc:
5e:22:12:2b:de:27:8c:7b:8d:c4:61:12:3b:c0:ab:
9c:d0:b9:c5:91:4d:62:b4:ff:29:c7:96:1f:f5:f7:
61:07:30:10:1c:98:de:5d:ea:6f:c5:6c:da:dd:6f:
41:df:fb:fa:79:46:dd:c8:cd:0a:f6:7b:3c:49:7b:
62:8d:cd:ac:a3:29:42:ca:09:17:ed:84:f5:33:3a:
6a:18:c6:db:6a:3b:f2:98:23:12:fe:c4:49:4f:75:
89:e0:24:6e:48:17:49:51:47:72:04:64:da:c0:a0:
bc:76:37:e1:79:06:14:3a:e3:bc:c1:03:2a:09:1c:
47:f0:21:63:fe:e6:03:8d:41:87:44:58:0a:63:e9:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5F:3F:A2:C8:61:6B:57:27:D6:8E:4C:BD:FC:B0:38:D5:DE:13:94
X509v3 Authority Key Identifier:
keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.7.136.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:14:4b:6b:4c:68:58:e4:e2:f2:c4:a6:20:9e:5e:45:d0:78:
71:a4:d4:e6:f6:18:ad:0c:d0:d6:e4:e0:70:76:53:ec:6d:74:
dc:07:af:c1:f2:1c:65:fe:5b:6d:c9:9e:99:84:22:25:e3:e4:
39:0e:6b:0a:27:69:a7:6d:53:5f:c1:8a:bb:79:13:65:5a:e7:
4a:4e:16:fd:cc:8c:76:cc:bc:21:a9:fe:7b:1b:fe:94:80:51:
70:40:26:2d:88:69:89:05:1b:5e:30:c6:09:92:08:38:5d:02:
c4:88:93:e5:82:fb:60:f2:a7:2d:e4:fe:59:fd:9c:8c:8a:f7:
f4:ea:9a:54:fa:a3:86:72:11:fa:2b:6c:40:af:c4:b7:ec:1b:
bb:df:5d:20:92:48:b3:17:cc:1b:de:4d:c7:90:38:18:4f:a7:
0a:e1:71:4e:a0:32:02:15:eb:31:f2:de:f5:fe:94:5f:9a:44:
77:50:35:8c:2d:d7:4e:8a:6d:ca:e6:bf:6f:bb:11:99:73:90:
f1:b4:a4:13:6c:e3:33:4d:f6:9d:47:08:53:9c:65:b9:3d:41:
4c:9f:dc:b9:d7:35:96:c1:e8:f2:98:b9:29:b9:a2:a1:f0:59:
d3:65:59:ba:17:ea:7e:df:57:14:4b:d0:9f:3e:34:74:92:4e:
33:18:8c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:21 2025 by rpki-client