Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa
File: 3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa (raw, json)
Hash identifier: ixqq2sqwxFeQ+e84tF5E4J1wNEpg9pki+/P0JOXnCk4=
Subject key identifier: 3F:84:2F:D9:85:A5:E4:34:2F:EE:23:F9:BE:21:32:F7:7C:7F:14:3C
Certificate issuer: /CN=8F4A398C9662CBF5257471CEB03BBF2C61BC55E0
Certificate serial: 4D6CAF1711BE5138CAA80C6096422DB215C7479B
Authority key identifier: 8F:4A:39:8C:96:62:CB:F5:25:74:71:CE:B0:3B:BF:2C:61:BC:55:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa
Signing time: Mon 26 Feb 2024 13:30:44 +0000
ROA not before: Mon 26 Feb 2024 13:25:44 +0000
ROA not after: Mon 24 Feb 2025 13:30:44 +0000
asID: 262496
IP address blocks: 191.240.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6c:af:17:11:be:51:38:ca:a8:0c:60:96:42:2d:b2:15:c7:47:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F4A398C9662CBF5257471CEB03BBF2C61BC55E0
Validity
Not Before: Feb 26 13:25:44 2024 GMT
Not After : Feb 24 13:30:44 2025 GMT
Subject: CN=3F842FD985A5E4342FEE23F9BE2132F77C7F143C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:5f:58:8c:95:8a:d3:d9:6b:ea:60:bf:0d:
0b:3f:0a:d1:04:a3:6e:64:db:32:d0:83:98:82:4d:
43:66:df:da:29:28:6f:4a:8f:0a:be:b4:06:4f:60:
b1:5c:f1:26:23:7d:b8:51:90:3d:22:ae:44:27:23:
d6:81:40:08:bb:bb:d1:56:9d:b6:b0:b7:24:82:f9:
bf:83:0a:5b:fc:63:76:b2:a1:d0:44:c7:8e:86:5f:
7b:90:02:57:32:23:9a:1d:a3:d4:30:e9:59:fb:cb:
02:49:4e:97:55:a1:11:14:ac:e2:17:df:67:d9:12:
29:a4:2c:54:01:3a:16:40:5e:4e:6e:ef:13:72:94:
75:00:50:46:cc:2f:d6:44:ee:92:e0:59:f7:e0:03:
8f:3c:57:88:4f:d6:9f:69:d2:79:8b:59:5e:13:5e:
3d:63:de:af:8c:66:22:54:9d:8c:ff:b5:71:e5:d0:
1d:72:fe:4c:62:33:4b:84:b0:10:f3:7a:2b:05:ac:
ab:bc:0a:0e:ff:5c:d2:af:35:cd:78:34:0d:12:16:
7f:fd:08:c6:2e:80:cc:9a:d9:5c:f4:1b:a2:fe:d4:
f7:08:01:c1:1a:e3:9c:3d:52:1f:4a:e6:7c:a1:61:
66:6c:97:57:ed:fd:00:68:22:a7:ff:94:06:ab:51:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:84:2F:D9:85:A5:E4:34:2F:EE:23:F9:BE:21:32:F7:7C:7F:14:3C
X509v3 Authority Key Identifier:
keyid:8F:4A:39:8C:96:62:CB:F5:25:74:71:CE:B0:3B:BF:2C:61:BC:55:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.240.168.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:a2:65:64:d8:20:fa:8a:05:53:df:fb:fe:d2:94:30:5c:a6:
a8:14:2b:5d:34:b3:4a:8e:fb:22:47:ee:86:e2:98:f3:3e:83:
91:64:c0:12:f7:e6:e5:a1:5f:b1:25:8c:36:eb:38:7f:d3:fe:
4a:c9:6a:04:4f:a6:2e:35:c3:36:6c:4b:e6:b7:36:6f:fa:65:
a9:cc:d5:99:eb:9a:34:b4:98:a3:9a:20:6b:45:8e:c5:ad:93:
e2:0f:f6:af:cc:d5:75:37:16:bf:13:d9:be:e5:bd:e2:54:a9:
71:be:80:a8:9a:5a:63:46:af:2a:cf:4e:e6:3e:a4:be:fe:f5:
ae:b7:d8:14:70:70:f1:bc:37:46:f1:aa:26:63:94:2f:f6:09:
30:6b:d2:e3:1b:26:45:fc:00:12:a8:8e:a7:12:c9:e6:c1:32:
a4:54:a5:1d:33:91:3c:24:fa:52:f0:20:26:93:76:02:d8:09:
8d:a7:f7:ce:09:9f:2b:82:3a:b4:68:c6:59:2d:ac:54:73:82:
9f:48:a3:97:0f:a1:53:c9:ed:6f:9a:42:97:f7:b1:31:67:ad:
19:d0:c3:07:71:be:8d:e4:19:a3:2a:a7:66:3d:f4:3e:64:cc:
79:b9:26:d3:66:cd:fd:db:bb:cf:5a:c7:8e:bd:24:fe:f8:80:
22:3f:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org