Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e37312e302f32342d3234203d3e203631393031.roa
File: 3139312e352e37312e302f32342d3234203d3e203631393031.roa (raw, json)
Hash identifier: iE/+svnUddloaXy7A9ZiboJntlbJGgMYlNrra51XkV4=
Subject key identifier: B9:42:F7:F8:8F:63:49:7D:C7:0D:66:9E:88:01:47:FB:C1:CF:DC:4B
Certificate issuer: /CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Certificate serial: 7A1291F2C9C02CACB67618DC9C933979BA7E164B
Authority key identifier: 67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e37312e302f32342d3234203d3e203631393031.roa
Signing time: Tue 12 Mar 2024 18:12:57 +0000
ROA not before: Tue 12 Mar 2024 18:07:57 +0000
ROA not after: Tue 11 Mar 2025 18:12:57 +0000
asID: 61901
IP address blocks: 191.5.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:12:91:f2:c9:c0:2c:ac:b6:76:18:dc:9c:93:39:79:ba:7e:16:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Validity
Not Before: Mar 12 18:07:57 2024 GMT
Not After : Mar 11 18:12:57 2025 GMT
Subject: CN=B942F7F88F63497DC70D669E880147FBC1CFDC4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:a5:e6:2b:82:60:d8:3b:97:a3:a0:f3:27:
76:c5:a4:f8:e7:ab:f6:1c:90:cc:71:2c:9d:11:d6:
d6:2b:22:7b:46:f6:48:c8:f3:d0:40:5f:44:d7:83:
b0:8d:4d:33:98:0a:ce:0a:93:c2:00:41:8e:7c:05:
e1:b4:a6:18:73:6b:73:99:74:72:9f:6f:0f:00:e3:
46:ba:c2:03:f0:5e:f7:ea:bb:7e:ea:20:fb:be:14:
76:33:c7:b5:eb:78:6a:5f:3f:87:f2:af:c3:65:35:
5a:65:16:5b:6e:07:aa:84:dd:f4:a7:1a:bd:66:fc:
7f:ef:b0:0a:50:29:e5:23:46:48:63:f3:dd:1f:40:
57:2e:1e:46:29:d4:9b:11:04:cb:0c:02:af:34:46:
b3:1e:53:19:3a:1f:e0:1e:5d:2b:31:f0:c8:f8:8c:
0b:bd:22:ac:11:0e:de:8e:a5:f1:a3:b7:e8:94:13:
c9:09:6f:4f:86:ba:5d:8b:ae:08:ef:18:2c:c0:de:
7a:12:26:b5:75:65:fa:a9:f4:4d:3d:0b:0d:68:04:
f5:52:f1:cf:09:c7:4e:2a:21:cb:8a:c7:be:8a:e6:
d8:3c:f6:8e:fc:a5:28:ee:a5:97:e6:0d:9d:cd:2a:
84:d3:8d:7a:20:c9:b3:1e:fb:2f:0d:1b:65:9b:02:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:42:F7:F8:8F:63:49:7D:C7:0D:66:9E:88:01:47:FB:C1:CF:DC:4B
X509v3 Authority Key Identifier:
keyid:67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e37312e302f32342d3234203d3e203631393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.5.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9b:f2:b4:c9:55:1b:d8:16:45:c2:30:21:10:f2:1e:11:e9:
50:f7:d0:9a:ae:4f:91:53:43:11:df:d7:ea:1b:41:de:64:2b:
e5:58:ec:7c:3a:0a:cd:7c:28:91:c3:28:17:ea:a3:ec:56:de:
f1:32:5f:8e:1a:74:9b:2d:ce:f5:4b:e7:e0:4e:e5:d5:0e:9c:
64:68:47:88:90:d4:6b:17:e9:f7:0f:8f:c2:01:51:98:ec:5a:
03:08:6b:c1:3b:a8:44:23:5f:72:5b:32:a4:87:94:7c:a1:16:
3a:9e:88:56:98:5a:60:89:2c:c2:5d:72:94:bb:3b:77:5c:5e:
55:e2:b7:ce:a9:6b:52:73:02:4c:c1:e2:08:23:ee:57:64:99:
8d:94:65:84:cf:f6:e9:4b:18:f0:84:b9:3f:68:ce:c4:c0:8e:
03:b2:d4:c1:75:b8:e0:c2:c4:75:ce:a8:33:fc:e3:d9:1a:38:
9c:fd:97:e0:76:d6:60:6d:94:36:e2:e1:77:d5:a2:e7:d6:64:
a1:b8:c1:95:61:04:97:64:7c:64:58:41:05:9a:68:fa:72:f2:
9e:45:9d:6a:76:34:45:a2:ce:82:d7:82:3f:5d:d5:9a:35:bc:
25:a9:10:fc:37:c7:9e:d8:7e:8d:13:57:bb:cc:fc:fa:0f:26:
d8:6e:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org