Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/3139302e3131322e3133322e302f32322d3234203d3e20323730333338.roa
File: 3139302e3131322e3133322e302f32322d3234203d3e20323730333338.roa (raw, json)
Hash identifier: qgOyJLe0lNv63aP2tgO87ymsCHaAw2l6S/EvbkEzvoU=
Subject key identifier: 34:AE:D9:68:EF:1E:4B:A7:80:5E:33:12:AB:F8:10:FE:2F:BD:77:91
Certificate issuer: /CN=F8E687DD8DCDC71D1F3E606509438410F90FA13F
Certificate serial: 50C48B96BDD7DF1B0BD2E024620F5F95B0E58F4A
Authority key identifier: F8:E6:87:DD:8D:CD:C7:1D:1F:3E:60:65:09:43:84:10:F9:0F:A1:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8E687DD8DCDC71D1F3E606509438410F90FA13F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/3139302e3131322e3133322e302f32322d3234203d3e20323730333338.roa
Signing time: Tue 07 Nov 2023 16:58:28 +0000
ROA not before: Tue 07 Nov 2023 16:53:28 +0000
ROA not after: Tue 05 Nov 2024 16:58:28 +0000
asID: 270338
IP address blocks: 190.112.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c4:8b:96:bd:d7:df:1b:0b:d2:e0:24:62:0f:5f:95:b0:e5:8f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8E687DD8DCDC71D1F3E606509438410F90FA13F
Validity
Not Before: Nov 7 16:53:28 2023 GMT
Not After : Nov 5 16:58:28 2024 GMT
Subject: CN=34AED968EF1E4BA7805E3312ABF810FE2FBD7791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:65:4d:4b:71:9a:52:f8:1a:20:2f:d1:d6:
f7:94:a5:db:ad:d8:e6:1a:01:06:90:6b:26:d2:fb:
36:d6:50:a7:80:62:6d:87:f0:45:c8:b8:f6:cf:37:
d0:1b:9e:dd:2a:41:3e:2c:40:b3:06:1a:86:b3:e3:
9d:fa:81:81:ce:1f:9a:ef:b4:d1:3b:ba:13:20:7b:
36:9f:e1:d8:67:30:5c:cf:da:e0:93:62:46:cd:84:
d0:93:88:39:88:28:ce:19:ec:8b:7a:9b:37:6f:69:
fb:79:81:85:d1:57:e9:c7:c9:e6:b4:a0:a6:52:90:
a7:43:4a:0a:08:e8:cb:9e:9d:73:b9:5a:ca:26:31:
79:4d:4a:25:76:db:75:0f:22:14:fb:97:a6:ed:ec:
93:bd:c4:8d:c9:ad:97:cb:81:3a:ee:00:a8:ea:db:
bc:24:59:4c:94:53:93:39:7b:50:08:9f:02:39:8f:
93:61:13:90:bf:95:65:17:36:9c:cb:ea:bd:fe:f5:
15:ec:6c:7a:52:a7:d1:a7:73:af:5b:6b:cb:d7:2b:
00:55:4d:1f:d6:dc:a2:99:53:1a:da:b8:6a:d7:c2:
83:c5:40:6d:a6:36:c7:bf:54:0c:98:78:48:45:09:
1f:f8:f1:1b:26:45:90:62:ca:a5:f1:14:f8:52:96:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AE:D9:68:EF:1E:4B:A7:80:5E:33:12:AB:F8:10:FE:2F:BD:77:91
X509v3 Authority Key Identifier:
keyid:F8:E6:87:DD:8D:CD:C7:1D:1F:3E:60:65:09:43:84:10:F9:0F:A1:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/F8E687DD8DCDC71D1F3E606509438410F90FA13F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8E687DD8DCDC71D1F3E606509438410F90FA13F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/3139302e3131322e3133322e302f32322d3234203d3e20323730333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.132.0/22
Signature Algorithm: sha256WithRSAEncryption
04:25:e0:ea:94:2e:48:97:eb:cc:6b:4e:8f:a1:86:4c:8b:58:
47:73:e7:4c:57:63:4a:c8:31:84:ff:0b:3f:50:66:a2:23:5b:
8e:0a:1a:2b:82:02:ad:fc:fa:b2:ac:83:b8:ca:15:86:ed:c2:
b1:31:3c:33:0d:c1:d4:56:01:13:61:1e:88:39:92:fa:fe:5d:
66:2b:b2:fe:bc:3d:53:50:0a:9c:b4:19:c9:48:3c:a2:73:f4:
56:17:9d:a3:94:f6:dc:69:b4:a6:2c:e3:66:e4:88:c7:1b:1a:
85:3a:b3:57:8a:97:65:6c:70:c0:5e:7d:d3:aa:af:43:97:ac:
aa:4b:47:f6:cb:e8:98:62:71:73:d4:50:3e:0f:1a:6c:4d:21:
54:88:2b:73:3c:3d:74:e9:e1:6d:60:d2:51:38:c1:9e:4f:25:
88:70:c5:5a:0d:18:ce:12:22:8e:46:2b:99:26:b0:a3:8a:87:
08:46:c8:83:29:e3:a1:99:7b:27:40:4c:44:ab:35:17:90:a9:
83:b4:cd:b0:1c:98:11:69:c7:72:5f:3d:dd:3a:42:7d:cb:ee:
7c:96:b6:b3:21:ab:ab:7d:6d:2e:79:40:f7:d1:cc:a8:f7:c7:
c6:2f:b6:70:8e:42:81:3c:6f:81:f6:8e:c8:cb:c2:93:88:85:
02:80:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:09 2025 by rpki-client