Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3139312e3234332e38392e302f32342d3234203d3e203238323130.roa
File: 3139312e3234332e38392e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: OwEijqlQreBTotiTzC25Ju67jUxwb987xTgHCjlx6zI=
Subject key identifier: 36:EF:16:6C:6E:F5:51:7D:64:54:6A:C6:C0:12:E9:F7:63:9C:AE:BA
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 653DD443173639453028DCAD130AA394B9B5E6EA
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3139312e3234332e38392e302f32342d3234203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:23 +0000
ROA not before: Wed 28 Feb 2024 13:58:23 +0000
ROA not after: Wed 26 Feb 2025 14:03:23 +0000
asID: 28210
IP address blocks: 191.243.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3d:d4:43:17:36:39:45:30:28:dc:ad:13:0a:a3:94:b9:b5:e6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:23 2024 GMT
Not After : Feb 26 14:03:23 2025 GMT
Subject: CN=36EF166C6EF5517D64546AC6C012E9F7639CAEBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:49:c6:39:f4:7f:52:fd:21:72:9d:86:f2:
82:1c:6b:b3:c1:c7:b1:19:15:06:f1:0b:f8:9b:53:
61:ba:6c:b5:87:59:5f:21:de:6f:a5:70:15:94:ff:
10:b9:99:fa:e3:27:e9:ba:a8:42:4e:47:26:e1:61:
59:35:80:83:c3:a2:5e:6f:c3:02:e2:8a:84:1b:14:
b8:0a:94:bc:34:d2:8a:e9:48:4d:16:11:1f:05:b0:
cf:bb:69:81:00:4b:b8:55:f8:ba:5b:b0:a1:1f:4c:
4a:a2:8a:f5:cb:3d:02:78:17:ea:95:d7:0b:5a:d1:
3d:80:95:0c:6b:64:0b:d1:ad:f9:2f:5a:8a:6a:eb:
ad:41:dc:22:2f:24:15:db:fd:92:e2:6e:9d:b7:6c:
65:cb:28:a8:40:25:5a:97:00:1e:4c:98:c4:56:7e:
48:d4:17:67:70:c3:e5:23:19:a6:5b:50:5e:9d:8e:
bb:90:d0:1d:7c:08:53:92:29:ea:97:e6:9e:93:87:
5c:a6:b6:fc:56:5c:d1:d5:b0:19:4d:50:76:65:ff:
92:89:ed:79:c0:4e:c9:e0:cd:25:36:ac:db:c1:a5:
46:d7:0a:83:1b:03:af:74:3f:be:98:a8:6c:48:56:
de:91:94:80:51:4d:6e:84:01:0f:98:94:99:bd:60:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EF:16:6C:6E:F5:51:7D:64:54:6A:C6:C0:12:E9:F7:63:9C:AE:BA
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3139312e3234332e38392e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.89.0/24
Signature Algorithm: sha256WithRSAEncryption
13:93:9e:53:38:58:b4:89:d0:0e:7e:fd:df:c0:ae:cf:9a:e5:
28:0b:cb:aa:4a:56:c1:c9:ef:64:1d:2a:30:e8:bd:27:da:6d:
a2:e4:73:cf:c8:d9:fa:21:d1:04:13:74:46:47:c6:42:96:68:
ba:33:4f:73:a4:95:1c:37:eb:1a:ae:c9:aa:50:51:29:31:77:
43:8d:ff:4e:c8:d6:18:9b:1d:88:0b:12:e4:67:ab:03:00:85:
f2:b0:0e:8d:9c:2a:3a:39:a3:56:2e:22:fe:46:34:b0:49:1a:
8d:63:2d:f1:0c:39:3e:9d:9c:7e:04:bc:76:fc:1b:7a:b7:57:
e5:3d:85:2c:e9:aa:2d:c4:aa:52:22:aa:5e:40:93:e5:68:08:
ac:d6:63:69:9b:dc:61:ce:10:35:28:d6:0f:83:54:9e:91:43:
b2:28:36:e3:b7:bb:da:60:6c:40:d0:1a:76:01:e8:d7:a2:fb:
ce:0b:ca:97:7a:87:c1:e2:d6:f4:c7:00:d1:53:8d:e3:98:e6:
f0:02:d7:ad:35:84:ed:6a:20:88:b5:50:c3:bb:f8:91:55:63:
56:e6:7c:42:ba:1d:0b:e5:10:53:9a:c8:4d:75:79:25:2b:4e:
d7:4d:8a:42:a4:75:6d:e5:b4:66:97:7a:ea:1d:8b:38:b0:cf:
f4:ee:56:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:17 2025 by rpki-client