Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3139312e3234332e39312e302f32342d3234203d3e203238323130.roa
File: 3139312e3234332e39312e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: tYD7+VBiv84ufkODT6Y8q9UCR2x8JhSJEZGeVoUfrA8=
Subject key identifier: BD:F9:27:9C:2F:1A:DA:C0:E8:D4:78:76:84:9C:53:F7:1B:E3:86:3A
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 1B28858CA36E0E1923C6B2A572EFB0C04D4D2C6A
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3139312e3234332e39312e302f32342d3234203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:26 +0000
ROA not before: Wed 28 Feb 2024 13:58:26 +0000
ROA not after: Wed 26 Feb 2025 14:03:26 +0000
asID: 28210
IP address blocks: 191.243.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:28:85:8c:a3:6e:0e:19:23:c6:b2:a5:72:ef:b0:c0:4d:4d:2c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:26 2024 GMT
Not After : Feb 26 14:03:26 2025 GMT
Subject: CN=BDF9279C2F1ADAC0E8D47876849C53F71BE3863A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:b1:31:37:0d:59:fd:21:8f:73:4c:51:02:
e4:04:c4:71:4d:6a:99:03:26:e2:73:38:8c:21:d8:
b7:de:bf:00:25:0b:d3:4d:c7:b0:7e:6a:c3:6e:84:
4e:dd:8c:f9:ce:63:97:04:6b:91:eb:86:1f:0e:9a:
c6:de:7d:c8:f4:d3:e5:60:fb:13:84:8c:09:42:84:
2c:4e:3a:18:94:bf:b9:d4:d1:ef:84:46:d4:ef:64:
d1:5d:1c:c1:5f:0a:91:f9:5e:6c:3c:fe:6e:da:ca:
3f:4e:47:b9:89:8e:71:50:fa:4a:bb:cf:2f:2b:1f:
fd:ff:81:bf:40:50:f8:a6:b4:12:39:89:29:f0:f7:
66:bd:39:6e:4d:61:ed:e6:22:14:5e:be:10:88:27:
16:92:f5:4c:7c:28:aa:27:b8:4b:54:dc:b4:38:71:
98:f8:a8:06:ad:95:cd:52:8b:d1:69:69:da:89:29:
42:87:36:40:31:f8:63:a1:6b:cb:72:1c:50:93:c4:
ba:d8:23:1a:bf:d1:30:5a:2f:d0:82:49:a7:44:e2:
a7:62:5f:70:9c:47:8f:e3:df:6b:3d:7a:80:cd:60:
89:b2:34:cf:f9:5b:18:85:72:a0:9c:a3:96:42:63:
ed:99:0c:4f:3f:e7:75:0d:b7:81:b5:56:f4:f3:a7:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:27:9C:2F:1A:DA:C0:E8:D4:78:76:84:9C:53:F7:1B:E3:86:3A
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3139312e3234332e39312e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.91.0/24
Signature Algorithm: sha256WithRSAEncryption
00:21:ba:fc:6e:64:27:94:96:4d:c7:9e:9a:9e:13:67:2b:6c:
6d:85:db:9c:87:cd:8b:81:ee:95:69:91:db:4f:ac:bd:a4:5c:
63:cc:4c:79:a4:90:4c:8d:22:d5:ca:88:65:0f:55:e3:d0:f3:
7c:67:0b:cc:be:9c:fa:99:81:74:df:ef:36:ce:5d:56:a5:a9:
9c:eb:41:20:db:97:6f:ff:6f:b7:ef:38:2d:a3:82:41:57:97:
a5:6e:b4:5d:bf:d0:b4:ef:70:52:88:4e:54:d4:2b:53:15:d7:
26:e2:20:e2:3d:dd:bd:92:6b:0d:90:77:02:62:cc:5e:b7:9a:
8e:cb:4c:08:b2:d3:1e:47:e3:28:01:1f:e5:fe:98:01:fc:c7:
59:2d:56:1b:56:ae:e6:7b:6d:6e:00:0e:53:41:66:c9:b8:bd:
a2:88:fb:30:0c:52:3f:99:4d:38:5f:bb:db:b2:65:95:2c:68:
21:e5:d2:ed:2c:f7:90:8a:c8:25:f7:82:83:a3:d2:0f:0a:97:
54:32:61:c2:9b:ce:4a:9c:9c:0a:ab:a7:eb:5d:24:2f:a5:38:
16:ab:ca:3f:9d:6b:52:9f:1b:28:44:61:48:ea:8a:d4:ac:61:
fa:3a:12:5b:67:ba:bb:56:72:95:da:fa:ba:9d:90:c0:94:53:
22:f2:d5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:27 2025 by rpki-client