Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3132382e302f32342d3234203d3e20323633353336.roa
File: 3139312e352e3132382e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier: bPufdyVpplF9ksK+z9cnCvmbRSNlyT0TUVcquM7SpWU=
Subject key identifier: A1:75:0C:11:E2:39:CD:8B:DC:CC:E4:E1:54:40:95:21:D6:F7:C2:9A
Certificate issuer: /CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Certificate serial: 77A3FB8819BEBF89AB409C7F9F7F97A6EE88AE3A
Authority key identifier: B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3132382e302f32342d3234203d3e20323633353336.roa
Signing time: Wed 05 Jul 2023 17:21:43 +0000
ROA not before: Wed 05 Jul 2023 17:16:43 +0000
ROA not after: Wed 03 Jul 2024 17:21:43 +0000
asID: 263536
IP address blocks: 191.5.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a3:fb:88:19:be:bf:89:ab:40:9c:7f:9f:7f:97:a6:ee:88:ae:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
Validity
Not Before: Jul 5 17:16:43 2023 GMT
Not After : Jul 3 17:21:43 2024 GMT
Subject: CN=A1750C11E239CD8BDCCCE4E154409521D6F7C29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:78:7e:b8:6f:91:51:63:77:cf:75:1d:47:
5f:bd:a3:14:5c:44:8a:ad:38:ea:38:fc:36:44:2c:
64:f9:b2:30:5f:c9:68:e3:4f:bd:08:2c:9d:11:b5:
e6:d2:46:64:5c:4b:76:6b:bf:ab:49:2d:f8:d1:8b:
b4:dd:6a:45:87:11:9a:65:e7:76:36:c4:3a:44:6c:
7a:e0:56:c9:c3:fd:1f:b1:74:e3:bd:3a:1b:93:30:
5f:53:c8:fa:55:f7:af:aa:06:fb:0b:55:bd:fd:fc:
35:b8:f6:4e:9a:62:07:50:c7:0d:b8:db:ff:c0:14:
a8:c0:3f:5a:69:f2:5e:b8:b5:65:96:98:81:8c:61:
6c:0f:5a:27:cf:fc:ef:50:df:77:95:49:0f:46:a4:
44:27:df:fa:08:48:67:ed:52:ba:e0:1f:40:78:bc:
27:6e:ad:7c:a9:29:a8:31:9d:f4:02:df:4d:d7:13:
9b:e9:1d:83:a2:db:dd:2e:cb:4e:3b:1c:b7:ec:ae:
76:b2:e4:2b:c1:7c:11:91:11:3f:b8:3f:79:fb:f3:
9c:44:ef:2e:99:b1:e2:dd:e1:88:5a:eb:1c:1a:5d:
4d:0c:d1:73:91:a6:5d:21:bf:d2:c2:58:07:c1:cf:
e5:26:ed:46:7b:48:75:f9:c5:d4:f0:a8:63:de:8b:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:75:0C:11:E2:39:CD:8B:DC:CC:E4:E1:54:40:95:21:D6:F7:C2:9A
X509v3 Authority Key Identifier:
keyid:B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/3139312e352e3132382e302f32342d3234203d3e20323633353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.5.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c9:20:e1:9e:30:c2:60:cb:18:8d:bd:a9:17:50:bd:3a:df:
b9:78:51:bf:2e:d0:0e:88:09:59:ee:99:f7:00:bf:09:d0:df:
36:9f:e5:98:39:6f:0e:1d:83:7d:6c:21:f4:34:8f:56:88:27:
e9:28:cf:3b:b3:f0:d3:dc:62:93:c6:b2:7b:de:ee:27:34:35:
44:8c:23:30:82:ba:48:03:bd:e9:71:00:11:c7:90:76:f6:86:
72:e0:5a:04:f7:47:15:78:e6:9f:8e:f8:67:cf:3e:9c:5b:80:
cc:c2:84:e7:66:35:07:c4:59:d3:87:81:63:21:54:fa:ea:88:
a9:36:e2:68:ab:8e:48:06:be:b6:81:dd:8a:fb:76:72:38:76:
d2:13:39:03:f9:46:16:40:c5:18:cd:8b:1c:5b:73:f6:c6:9d:
c1:21:1f:7e:9a:90:d0:f6:85:af:31:f4:13:e7:f4:0c:39:1d:
d0:7b:13:82:d1:46:82:58:08:75:8a:14:fb:2a:37:75:b3:7d:
a0:85:5c:28:c1:33:e7:bf:f8:ae:6a:42:08:99:10:54:ca:c3:
b7:7f:7f:25:93:d7:49:cc:99:31:fa:f2:15:5d:39:6d:06:88:
70:5d:17:32:74:a4:7f:55:3c:b5:35:cc:be:80:bd:a7:00:bf:
fb:da:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:10:33 2025 by rpki-client