Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233352e302f32342d3234203d3e20323633343834.roa
File: 3139312e3234322e3233352e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier: 9NRwtO4h1bMLzdXO4YnQr5SVkLnDeOIOK6quoqoD6+8=
Subject key identifier: 67:90:59:E7:AE:22:31:2A:BC:28:AD:DD:D6:C4:AF:7A:88:37:4E:24
Certificate issuer: /CN=1698795302C7E2A145BFA93BF0B8C9B149DFD43D
Certificate serial: 35E43D3CD0666B2BAC8C32069315EDE14BFA451E
Authority key identifier: 16:98:79:53:02:C7:E2:A1:45:BF:A9:3B:F0:B8:C9:B1:49:DF:D4:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233352e302f32342d3234203d3e20323633343834.roa
Signing time: Wed 04 Dec 2024 14:43:51 +0000
ROA not before: Wed 04 Dec 2024 14:38:51 +0000
ROA not after: Wed 03 Dec 2025 14:43:51 +0000
asID: 263484
IP address blocks: 191.242.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e4:3d:3c:d0:66:6b:2b:ac:8c:32:06:93:15:ed:e1:4b:fa:45:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698795302C7E2A145BFA93BF0B8C9B149DFD43D
Validity
Not Before: Dec 4 14:38:51 2024 GMT
Not After : Dec 3 14:43:51 2025 GMT
Subject: CN=679059E7AE22312ABC28ADDDD6C4AF7A88374E24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:35:03:f6:1b:d4:a7:68:53:34:68:ce:f0:
21:f6:d4:67:96:2b:96:ed:c9:b2:c1:eb:33:7a:b4:
c6:92:bb:19:af:1e:be:f0:0c:56:36:46:f0:e7:8b:
67:eb:09:f1:88:d8:4c:01:c5:d9:cc:0b:10:cf:fb:
29:f4:7a:af:fe:7e:f9:12:6d:94:47:00:e2:28:29:
cf:2e:f2:0d:3d:17:76:55:9a:74:bc:7c:21:15:ed:
13:e9:96:c7:b8:25:e4:f9:03:da:63:36:b4:dd:56:
78:fb:b9:67:bb:3c:12:db:9a:f8:3c:c4:00:28:60:
2f:1d:68:fd:e5:d9:4f:03:6d:70:5a:3e:8b:e7:56:
05:18:74:df:c6:64:f5:5a:e2:5f:60:a7:15:6d:22:
79:c7:36:10:af:6c:84:22:07:7c:c9:f9:1a:54:2c:
d5:3c:3e:27:5d:20:40:79:3a:35:52:20:d9:50:68:
5a:0d:f9:52:8e:55:7e:3c:73:66:d3:da:ee:86:32:
63:39:74:6a:4e:a1:cc:d0:84:ea:c4:da:7d:be:b3:
90:ef:9f:d1:60:6a:98:90:4b:41:d2:5b:7c:21:cd:
c4:92:68:f8:41:91:c2:d2:9a:af:b2:01:63:b0:47:
4f:17:5b:23:67:dd:14:f9:ed:d7:58:ff:78:14:c8:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:90:59:E7:AE:22:31:2A:BC:28:AD:DD:D6:C4:AF:7A:88:37:4E:24
X509v3 Authority Key Identifier:
keyid:16:98:79:53:02:C7:E2:A1:45:BF:A9:3B:F0:B8:C9:B1:49:DF:D4:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233352e302f32342d3234203d3e20323633343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.235.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b3:d9:1b:f2:a8:a0:99:39:e8:12:4e:ee:7e:21:9f:0a:44:
06:e2:9c:96:25:80:d3:b2:14:51:c1:59:d8:78:58:f8:8c:21:
53:e1:fa:fe:35:e6:13:f4:9a:78:a4:41:c6:14:8a:08:cd:a0:
8f:33:f1:83:90:a1:61:4c:8e:24:d5:3c:77:a8:ce:43:b3:09:
30:80:8a:54:39:33:23:a8:b7:90:91:f9:07:e2:57:59:db:8d:
6f:7e:81:b8:fe:c2:e8:ad:7a:ee:8d:48:51:20:89:5f:4d:45:
42:c7:9e:45:b1:2b:77:a6:63:dc:c9:34:f3:61:38:e1:94:f1:
cc:ec:4a:c9:fd:47:3a:f0:47:93:b5:aa:2f:de:6b:99:92:d2:
54:ed:fd:f3:5f:3d:02:61:21:5e:c3:b0:e6:31:0b:fc:47:ba:
bf:f3:36:ec:08:48:c9:c0:60:fc:e3:f3:68:a3:ce:db:03:f3:
58:2d:2a:1d:cb:5d:21:74:e5:5e:52:4d:e0:1e:b9:8d:88:7b:
6e:0c:25:ad:e3:7f:53:76:97:e2:f2:2a:25:d6:d2:58:9b:d7:
01:4f:04:d4:8a:3b:79:a2:aa:f3:21:91:22:e3:f7:c3:7d:51:
28:07:34:a1:2d:f9:0b:54:cd:4b:f1:8b:ad:11:63:e5:63:f9:
b0:48:e8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:27:22 2025 by rpki-client