Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
File: 3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier: iqIcmB1CnQsMlJH3ogz/ocl2kbD0mmtk36ZAWzLvGhc=
Subject key identifier: F3:4B:A0:1F:E8:25:17:57:E2:4D:64:C1:37:1C:1E:23:21:6C:33:E5
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 3AEA2E73D719E2D0C4CE82876ED6F9E4F81F01C5
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
Signing time: Mon 25 Nov 2024 17:03:55 +0000
ROA not before: Mon 25 Nov 2024 16:58:55 +0000
ROA not after: Mon 24 Nov 2025 17:03:55 +0000
asID: 28667
IP address blocks: 191.242.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ea:2e:73:d7:19:e2:d0:c4:ce:82:87:6e:d6:f9:e4:f8:1f:01:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:58:55 2024 GMT
Not After : Nov 24 17:03:55 2025 GMT
Subject: CN=F34BA01FE8251757E24D64C1371C1E23216C33E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:a5:f6:0b:96:0e:54:09:c4:6d:af:24:ed:
91:96:6d:e9:d1:3e:9c:3f:5d:18:dd:14:30:d5:98:
7c:51:41:36:7f:09:0d:3d:4f:7e:d6:e9:84:e5:23:
6d:f6:1c:09:c0:50:26:30:d4:ea:e9:31:68:93:c7:
d0:25:9b:aa:c5:71:50:b7:ac:c0:57:e1:b3:d8:ea:
ef:f5:ed:b7:8c:c5:c0:31:38:6b:7d:29:a4:cd:23:
62:e7:bb:a0:36:63:80:6b:0e:78:94:59:03:ce:9d:
f9:36:a3:aa:3c:5d:9c:6b:ca:4b:1a:90:91:1f:6e:
1b:da:69:6c:8e:b8:3f:67:b8:b1:10:c5:fd:96:ed:
ec:e2:b0:e9:ac:42:f6:ef:f8:1f:ca:b9:cd:3a:a3:
7d:4c:a8:5d:90:46:04:50:23:d3:d4:46:b8:22:dc:
80:1d:d3:82:8c:02:66:5e:ec:5f:9e:65:5a:73:1c:
8a:04:dd:9f:b2:f7:cd:4e:95:f0:30:c7:30:3a:57:
8a:e8:b9:ee:d7:19:eb:bf:5c:bf:d8:69:3f:8d:c6:
48:46:2f:97:ef:92:49:03:f3:e9:6a:93:83:14:23:
94:64:f2:8a:90:bb:ae:75:0c:43:99:41:bc:f9:4e:
bd:8c:f4:3c:66:a2:51:33:9d:31:fd:ab:c1:22:80:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4B:A0:1F:E8:25:17:57:E2:4D:64:C1:37:1C:1E:23:21:6C:33:E5
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.128.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:7e:9e:53:cd:ca:48:be:74:42:54:ab:da:09:9f:c6:dd:d4:
69:d3:6a:c4:c2:6a:12:64:7e:e0:06:7a:d7:fe:2c:8a:92:91:
39:9a:f5:d9:80:9c:a1:04:60:31:2e:0d:75:55:7f:19:e6:18:
30:55:d2:f6:66:d3:3a:8f:15:2c:93:a0:a3:6d:ad:7d:0e:75:
d0:bf:84:4d:e8:1b:3a:02:76:53:f8:4a:76:3e:e0:15:62:ab:
cd:50:18:b8:0c:e6:b0:5b:26:c9:d9:20:f7:45:6d:80:dc:2d:
19:da:59:72:36:aa:54:af:95:d9:2f:cd:aa:b1:ef:82:3c:e8:
12:90:23:e6:32:f4:85:09:ed:3d:ce:68:74:19:ec:e4:ed:9b:
f1:cc:07:35:02:52:48:40:07:27:5b:9c:3b:03:3b:06:0b:5e:
8c:a8:66:c8:99:35:cb:9b:b4:72:83:65:ce:2c:fc:73:8e:e5:
a0:fe:5e:6a:f4:ff:cd:16:ce:5b:bc:c7:f6:cc:cf:8d:ba:79:
9f:41:18:89:d8:6f:2c:42:de:f5:9d:84:d8:8d:e9:77:75:7e:
be:48:f9:9e:5e:98:d1:8b:47:17:a9:fe:e7:85:cb:67:2e:7b:
d6:8b:c1:e5:d8:cb:85:86:07:79:0d:03:88:93:d5:0e:c3:a1:
0e:1a:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:09:33 2025 by rpki-client