Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/1/3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa
File: 3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa (raw, json)
Hash identifier: CawON+TJ7nPG6r5WFXWEPMNxaX4rAAFEdpnyF8qzONg=
Subject key identifier: BD:CD:08:6B:88:29:23:D4:DF:15:8A:F9:5D:4E:A0:93:60:F6:DB:87
Certificate issuer: /CN=DD85E9016462548924C73F398566FA23310FB32E
Certificate serial: 3F6FFDC5B2B4830F85EC708B9A65A8ADBE20FE94
Authority key identifier: DD:85:E9:01:64:62:54:89:24:C7:3F:39:85:66:FA:23:31:0F:B3:2E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD85E9016462548924C73F398566FA23310FB32E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/1/3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa
Signing time: Thu 04 Apr 2024 04:15:04 +0000
ROA not before: Thu 04 Apr 2024 04:10:04 +0000
ROA not after: Thu 03 Apr 2025 04:15:04 +0000
asID: 263509
IP address blocks: 191.243.176.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6f:fd:c5:b2:b4:83:0f:85:ec:70:8b:9a:65:a8:ad:be:20:fe:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD85E9016462548924C73F398566FA23310FB32E
Validity
Not Before: Apr 4 04:10:04 2024 GMT
Not After : Apr 3 04:15:04 2025 GMT
Subject: CN=BDCD086B882923D4DF158AF95D4EA09360F6DB87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:fe:d4:94:9a:c9:29:41:66:e4:d6:bb:cc:
8a:58:1c:1d:3b:58:5d:b3:22:a4:bd:9c:37:0b:3f:
bf:17:6d:93:80:c7:f5:13:66:4b:28:3f:91:77:b0:
7c:6f:94:c7:90:73:48:e4:db:69:f2:4b:73:ec:e2:
06:a4:57:77:58:f7:e3:e5:54:6d:a4:19:58:86:e1:
d4:77:e5:1c:94:e6:e8:d0:0a:2c:f1:9d:b8:bd:ce:
c8:3b:25:be:04:b7:11:7b:54:ac:7b:cb:a5:1a:3e:
d0:70:8e:36:58:bf:63:19:0c:6c:f4:4f:7e:34:f0:
47:67:0b:03:48:3f:05:79:16:e7:06:b3:b5:18:b1:
23:2a:ad:be:eb:48:55:f1:e0:49:d0:a7:4f:ec:cb:
cd:60:f3:3a:9e:b9:7a:f9:1c:c5:b2:37:99:c3:d9:
ba:1f:06:f7:6d:da:56:28:a8:c4:e9:a3:df:33:46:
01:c9:10:0b:84:bc:af:30:19:d5:49:82:ab:a0:8b:
1a:eb:a8:2b:7c:e7:86:a1:29:fc:40:a1:e2:b7:9b:
a4:7d:0a:ec:08:c2:aa:e9:eb:24:49:f0:ad:cc:2d:
60:0b:cf:ce:60:88:63:80:b9:55:0d:67:29:3b:e8:
68:43:27:a9:68:74:c4:bb:d4:9b:6d:d3:40:62:8e:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CD:08:6B:88:29:23:D4:DF:15:8A:F9:5D:4E:A0:93:60:F6:DB:87
X509v3 Authority Key Identifier:
keyid:DD:85:E9:01:64:62:54:89:24:C7:3F:39:85:66:FA:23:31:0F:B3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/1/DD85E9016462548924C73F398566FA23310FB32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD85E9016462548924C73F398566FA23310FB32E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/1/3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.176.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:9e:e1:3e:d2:f0:5d:de:97:af:5c:e1:7f:d2:ad:8b:89:4e:
72:09:81:78:19:77:2a:43:89:d8:56:6d:d7:a6:fa:94:cb:15:
2b:28:4a:29:77:e9:81:88:a2:76:9f:39:2a:6b:d7:f0:5f:a1:
63:72:e9:5e:98:9a:b4:10:3f:65:7a:50:0a:32:ae:84:68:0c:
19:95:b8:fc:f1:1b:67:0c:a8:e6:5e:b0:5b:15:71:7d:67:28:
bb:1c:c8:c5:86:e7:8d:05:dd:0a:eb:42:5c:6c:56:07:25:e1:
c7:8b:10:aa:67:88:19:21:3f:32:ab:ad:8d:e9:2a:70:32:22:
df:70:30:7d:b9:db:6d:e0:90:7f:e4:ae:39:aa:e0:c9:c9:1e:
45:55:e5:0f:1c:d6:26:ae:56:e0:b2:7f:ae:3a:b9:61:4b:20:
d5:51:4e:dc:82:e8:dd:db:70:d1:32:02:11:b5:02:ad:83:72:
4e:48:e4:2b:a0:3a:9f:62:cc:b2:69:25:8c:75:37:80:04:f0:
35:5c:b5:81:dd:3a:5a:62:7a:38:cc:eb:0f:81:87:aa:13:00:
8b:ba:27:7b:c2:14:b5:e3:54:8a:93:ff:58:ce:d6:bb:b0:31:
c5:f0:e4:5d:e7:db:1c:f8:92:59:e5:1b:f6:0e:22:9b:40:34:
3e:33:07:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:32:18 2025 by rpki-client