Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e302e302f32332d3332203d3e20323633333436.roa
File: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (raw, json)
Hash identifier: dk4B0gt3xtrzpqeQPsPPmX3X8Bi3YSdbr9PQbjrctok=
Subject key identifier: BE:21:7A:0A:AA:90:B4:B5:00:6D:E5:DE:8D:62:2B:EA:34:9D:77:4B
Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial: 57BF22A37769E8A4F4B581AE825E06427CD36F5C
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e302e302f32332d3332203d3e20323633333436.roa
Signing time: Tue 14 Jan 2025 13:39:02 +0000
ROA not before: Tue 14 Jan 2025 13:34:02 +0000
ROA not after: Tue 13 Jan 2026 13:39:02 +0000
asID: 263346
IP address blocks: 191.37.0.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bf:22:a3:77:69:e8:a4:f4:b5:81:ae:82:5e:06:42:7c:d3:6f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Validity
Not Before: Jan 14 13:34:02 2025 GMT
Not After : Jan 13 13:39:02 2026 GMT
Subject: CN=BE217A0AAA90B4B5006DE5DE8D622BEA349D774B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:bc:60:ea:33:4b:43:e9:73:8a:ad:5d:de:
9f:42:c4:13:8c:95:43:20:f9:5c:2c:7b:83:d4:e0:
47:08:fb:ae:46:21:6f:78:b1:93:b9:79:2d:3e:b9:
27:bf:f8:ca:9d:22:37:c7:df:00:c4:5c:52:80:5f:
c9:65:a0:fd:fe:42:3a:0e:32:82:fd:9c:db:29:42:
e6:91:14:e3:66:f8:bf:ae:ed:9a:a8:27:43:d5:5b:
56:0e:9f:f9:b9:77:d4:c0:33:ab:ab:f5:c1:f2:33:
cf:14:9c:af:f4:72:79:6e:7d:ab:f4:46:a5:3b:c0:
fc:ce:b2:6c:9b:95:c5:2a:8c:4f:8e:9b:dc:aa:25:
3a:ab:f0:6a:5a:b1:4f:80:5c:5c:e8:58:87:53:7a:
67:52:3d:82:b8:3b:02:dd:14:3f:37:5a:58:9e:4b:
df:b3:91:3e:96:63:94:b0:95:5f:7c:a9:cb:37:07:
79:af:3c:36:43:45:39:3a:bb:bc:7e:eb:0a:05:01:
d1:7a:3d:3f:78:22:1c:48:df:8e:10:cf:8a:be:82:
68:65:39:24:9b:a8:10:8e:af:56:e2:44:1c:af:cc:
90:a9:3a:8a:c0:30:4f:9f:6a:92:82:34:41:8a:a0:
aa:82:44:97:bb:df:01:65:4d:4a:c4:af:75:8a:e0:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:7A:0A:AA:90:B4:B5:00:6D:E5:DE:8D:62:2B:EA:34:9D:77:4B
X509v3 Authority Key Identifier:
keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e302e302f32332d3332203d3e20323633333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.0.0/23
Signature Algorithm: sha256WithRSAEncryption
94:7b:fd:b3:f1:26:36:75:cf:ff:d9:15:75:2b:72:7c:01:c1:
0d:f5:38:e2:2e:05:da:f1:ab:c4:a6:d8:6c:5c:16:ff:11:02:
0b:e2:ae:b1:e3:33:42:52:bf:84:a8:a9:4d:20:f1:8b:6e:e4:
ef:fa:be:ab:0d:aa:cb:27:f2:96:dd:41:95:e3:fe:11:48:b5:
28:8b:d1:12:4e:f7:67:e5:33:0f:6b:0d:87:ce:b0:3b:cd:5a:
f0:9f:ae:5a:87:c0:87:78:73:54:5f:be:c7:f5:96:6a:b4:fb:
49:28:bd:14:4d:dd:5f:34:42:21:f4:e8:7f:c9:9f:04:cf:ac:
1d:89:06:a8:a4:1b:77:3d:42:d1:ac:bc:27:5c:92:0d:6a:59:
5c:c7:9d:7a:e6:c0:06:27:41:20:d6:19:df:1a:ff:ca:d6:ff:
2a:21:9b:4f:37:73:8b:71:6e:bd:48:cd:af:04:d1:b3:df:b7:
d2:15:71:75:53:75:ed:e9:97:ec:b0:9c:a5:f4:28:14:46:3b:
1c:bb:6d:32:df:68:a4:3e:39:2a:1f:cf:6b:aa:b4:46:a7:c3:
c5:5c:7d:8c:de:6f:5b:22:34:7e:b1:a9:8b:0a:1b:79:f3:08:
4a:e3:35:0d:b1:d2:25:aa:6e:d1:dd:41:a0:8a:c4:12:6c:c1:
59:08:a8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:44 2025 by rpki-client