Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa
File: 3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa (raw, json)
Hash identifier: tdRJSni9f9zZUn7SJt15xtUoMLyBRap69ecteMAdSbA=
Subject key identifier: DD:40:CE:B3:43:13:CD:5A:AE:59:6D:F7:47:1A:07:18:62:D0:1B:FE
Certificate issuer: /CN=35F51181E5E9E18B41B49E6409FA12C4899C586F
Certificate serial: 3126E87011E6365BA633EDFF85AEBB5AB93CABC3
Authority key identifier: 35:F5:11:81:E5:E9:E1:8B:41:B4:9E:64:09:FA:12:C4:89:9C:58:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa
Signing time: Thu 04 Apr 2024 07:11:18 +0000
ROA not before: Thu 04 Apr 2024 07:06:18 +0000
ROA not after: Thu 03 Apr 2025 07:11:18 +0000
asID: 263336
IP address blocks: 191.36.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:26:e8:70:11:e6:36:5b:a6:33:ed:ff:85:ae:bb:5a:b9:3c:ab:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35F51181E5E9E18B41B49E6409FA12C4899C586F
Validity
Not Before: Apr 4 07:06:18 2024 GMT
Not After : Apr 3 07:11:18 2025 GMT
Subject: CN=DD40CEB34313CD5AAE596DF7471A071862D01BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:92:fa:80:22:8e:3f:d5:77:c8:c9:1c:b8:
ac:31:7f:ca:e1:15:03:94:49:4d:7c:dc:16:f5:4f:
0b:11:5d:10:4b:df:46:19:5b:eb:08:61:34:3b:21:
a9:d9:b6:e1:c0:59:17:d7:09:dd:da:97:b8:f4:e5:
85:47:93:7b:6b:f6:7b:bd:d3:3b:9e:f3:89:db:96:
ef:c5:54:4b:d5:73:f9:26:c7:8f:f0:22:fc:5b:a7:
46:90:86:3a:10:f6:5a:89:52:b7:8b:1e:e1:fb:87:
99:8e:4c:fb:06:46:53:13:b9:f4:a5:bd:a0:68:3a:
01:da:ed:40:74:02:aa:02:a6:ba:8d:61:e4:f4:76:
31:19:8b:bd:fc:b5:e1:99:dd:e9:ff:7d:9f:b6:fd:
77:b6:65:33:e1:3b:b6:a6:a3:d3:2c:11:8d:27:be:
1e:34:03:e8:57:d1:3a:8a:f7:ae:4b:31:0e:44:8a:
bc:65:a7:19:fb:22:e8:a1:b0:2b:6c:a4:e4:8b:ea:
0c:2b:30:1b:e9:97:c7:b1:83:de:e4:40:48:35:fb:
de:76:e5:24:d8:95:6f:39:64:fa:9f:06:d1:a1:aa:
74:41:f2:6a:8b:c5:92:d6:d5:01:b1:72:96:87:8a:
12:8a:14:cf:4d:e9:60:c4:e4:59:c9:78:30:4d:14:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:40:CE:B3:43:13:CD:5A:AE:59:6D:F7:47:1A:07:18:62:D0:1B:FE
X509v3 Authority Key Identifier:
keyid:35:F5:11:81:E5:E9:E1:8B:41:B4:9E:64:09:FA:12:C4:89:9C:58:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F51181E5E9E18B41B49E6409FA12C4899C586F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/1/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.36.168.0/21
Signature Algorithm: sha256WithRSAEncryption
05:af:87:42:42:13:87:99:db:12:8e:ea:f6:20:f6:ab:9c:ea:
95:2e:88:c8:91:b6:fb:83:f9:55:b6:ed:0c:1e:b5:0a:cf:f0:
a3:72:7c:90:0d:32:ef:e6:12:0b:9a:3d:89:72:5f:bf:11:14:
71:e4:3b:31:67:59:9c:1f:13:70:59:61:d9:c6:b4:28:0a:1d:
7e:05:8d:ca:4b:b7:db:82:cb:1b:c4:d1:70:ee:4f:00:dc:55:
ff:db:6d:be:09:69:27:3a:ae:82:69:ac:53:87:89:57:63:b1:
dd:4b:6d:be:62:56:6f:89:b7:f8:8c:71:47:1c:14:2a:43:97:
06:72:0b:6f:51:1c:ad:58:8a:99:fc:f9:c6:16:cf:49:bd:0c:
f9:b5:81:f5:f3:41:0d:98:32:3d:8e:3d:22:17:0d:ed:12:8a:
f4:e0:e7:01:a4:b0:fe:bc:4e:5f:d6:ee:27:9c:8f:3d:ba:d2:
ad:83:cb:c1:ff:c2:e9:f8:f1:a4:ea:f4:a1:3c:8e:25:00:31:
af:65:f1:c7:6e:02:70:c3:4b:a5:b5:6d:a9:9e:f7:e9:ed:88:
38:ae:41:1b:28:24:cb:19:99:53:c2:2c:81:6e:c9:57:7c:dd:
3f:56:7c:42:eb:0e:73:54:cd:ae:2a:bd:77:36:33:a6:c1:4f:
69:f3:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:29:28 2025 by rpki-client