Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa
File: 3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier: T1hjjPDtbbgB6zEwqF6GbBZbbbUe8/hnBkei00Wm1Bg=
Subject key identifier: 7D:D4:A0:DC:3F:3A:A3:62:12:E1:5C:E2:EC:A1:81:A4:76:C0:52:8E
Certificate issuer: /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial: 3449C5E57FB741EA1DA8C5358EF494337E66D8BF
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa
Signing time: Thu 04 Jan 2024 22:00:00 +0000
ROA not before: Thu 04 Jan 2024 21:55:00 +0000
ROA not after: Thu 02 Jan 2025 22:00:00 +0000
asID: 263512
IP address blocks: 191.243.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:49:c5:e5:7f:b7:41:ea:1d:a8:c5:35:8e:f4:94:33:7e:66:d8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Validity
Not Before: Jan 4 21:55:00 2024 GMT
Not After : Jan 2 22:00:00 2025 GMT
Subject: CN=7DD4A0DC3F3AA36212E15CE2ECA181A476C0528E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:38:48:01:fe:37:cd:10:d3:66:47:97:9f:
73:12:58:92:8a:ab:5c:8a:91:18:42:eb:f1:2e:af:
de:0d:d1:60:4f:bd:fd:cc:79:7e:a4:fe:13:3a:c1:
a0:51:b4:d0:e1:0a:27:74:e0:af:20:2d:b1:96:10:
1c:bb:c8:b4:4b:88:71:d3:a8:c0:24:bd:dd:6a:9e:
97:45:fb:fe:f5:ab:87:94:89:d0:31:bf:11:1b:ad:
0b:4b:4e:9d:88:90:dd:2d:87:8f:4f:23:81:7a:bc:
ed:76:cb:df:f6:e1:93:7d:18:fa:0c:ae:d3:3e:b9:
13:7b:33:f6:6d:9c:48:2e:74:90:75:fc:2d:a5:8d:
07:e0:6e:fe:20:34:73:7a:21:ae:05:52:66:84:42:
9d:dc:48:a2:d4:05:76:21:5e:16:10:bf:94:1b:99:
df:bf:df:88:b1:4c:7d:c6:ed:35:b7:77:47:6c:dd:
a5:73:4f:19:65:30:6a:48:9c:13:61:c1:a2:a1:32:
e2:88:85:47:57:75:2b:44:64:a1:11:08:7d:13:6d:
a9:bf:fe:25:32:a9:98:fd:6e:e0:67:53:8b:ff:61:
72:fd:1d:fe:42:c1:f6:3a:3a:2f:74:74:84:78:ca:
94:0c:e6:ec:0e:07:f1:57:85:ab:35:8c:91:ef:6b:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D4:A0:DC:3F:3A:A3:62:12:E1:5C:E2:EC:A1:81:A4:76:C0:52:8E
X509v3 Authority Key Identifier:
keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230332e302f32342d3234203d3e20323633353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.203.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f7:80:e9:dc:50:56:11:18:7c:b3:a3:03:6a:f9:45:09:9b:
c3:84:1b:cb:ad:37:31:19:70:8f:65:33:3e:56:c1:11:b6:20:
46:94:17:5c:c0:af:0e:62:77:a0:96:6a:a7:d7:f7:d2:19:b8:
9f:cc:41:86:78:3c:17:07:68:13:e4:c5:65:1e:50:2d:c4:fb:
67:66:ff:83:ec:cb:8f:1e:66:4a:d9:23:34:83:06:a2:65:c0:
20:ab:56:a4:0c:01:15:5e:b2:d5:a4:1f:77:24:ac:a5:6c:b0:
64:5b:30:9f:67:54:2a:99:34:a5:4a:11:39:a5:b0:9b:d4:08:
79:79:01:fe:b4:e0:95:81:ce:6d:16:1c:00:aa:f1:35:d7:20:
d1:1c:08:77:8f:36:e8:8f:b6:f5:c6:6b:d6:90:42:60:0b:51:
e3:63:42:c0:aa:a9:b6:b5:1f:0a:7a:60:2d:1d:3a:8e:01:f4:
ff:2b:00:53:20:85:7f:98:7e:1c:3a:54:5c:b0:ed:a4:f3:4a:
60:b5:9a:1b:68:8d:c9:a5:63:3c:a8:33:a5:ad:b6:ed:b6:d3:
60:95:b6:b8:f1:3c:c4:e3:1f:e5:b1:7f:7b:7c:3e:2f:36:df:
94:fd:53:2e:e5:9c:63:4f:24:8d:25:a7:b7:1f:b9:37:73:b3:
f1:24:e0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:17 2025 by rpki-client