Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38362e302f32342d3234203d3e20323731313131.roa
File: 3139322e3134302e38362e302f32342d3234203d3e20323731313131.roa (raw, json)
Hash identifier: 8NUi89VzcmdQIgqM5flW/lfryZkqbtIqZ47XlZWJUdo=
Subject key identifier: 3A:25:B9:3F:FF:EC:67:D4:44:63:BE:0C:84:19:2B:42:D2:5D:64:74
Certificate issuer: /CN=3AD5972290586B5BEB9106DC1754301150A63C87
Certificate serial: 08C6ED0E14E1AB355B091990293E29263D41D833
Authority key identifier: 3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38362e302f32342d3234203d3e20323731313131.roa
Signing time: Wed 20 Mar 2024 19:28:57 +0000
ROA not before: Wed 20 Mar 2024 19:23:57 +0000
ROA not after: Wed 19 Mar 2025 19:28:57 +0000
asID: 271111
IP address blocks: 192.140.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c6:ed:0e:14:e1:ab:35:5b:09:19:90:29:3e:29:26:3d:41:d8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AD5972290586B5BEB9106DC1754301150A63C87
Validity
Not Before: Mar 20 19:23:57 2024 GMT
Not After : Mar 19 19:28:57 2025 GMT
Subject: CN=3A25B93FFFEC67D44463BE0C84192B42D25D6474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:42:66:43:5d:3a:d1:8d:48:52:25:b1:c0:
21:bb:b9:6c:d8:d0:c5:3e:27:29:14:9b:ec:d2:0b:
1c:bf:9f:44:85:16:e4:98:a9:88:58:a4:5a:e0:05:
ed:c1:88:af:41:d9:8f:53:d9:49:0a:25:6e:97:6c:
e1:66:58:46:b9:a9:95:d2:61:88:6b:39:68:b1:ff:
49:83:39:5b:47:69:9d:4b:c3:83:b2:68:9c:4d:41:
3f:e4:fa:73:f7:97:30:91:35:dd:28:5f:6a:df:01:
84:53:55:a4:4a:1e:6d:d0:b4:7f:94:80:7d:89:c2:
9f:d7:02:5a:92:e2:11:0d:00:b9:3e:82:52:45:bb:
81:e6:d3:a1:a5:e4:9d:1e:a9:14:c8:59:70:41:f9:
c4:12:24:84:50:33:50:cf:0d:50:e6:b5:65:e3:60:
e1:b4:92:cb:79:4d:ae:f1:ed:56:01:11:83:ff:0e:
e5:28:c2:9a:d1:19:b6:11:d2:bc:a7:be:da:2e:ec:
cf:15:4d:09:13:6f:69:f3:b0:2e:4c:c9:a5:7f:d5:
ee:bd:7f:85:09:8d:4e:9d:71:33:cf:0f:08:25:5a:
3f:50:f5:76:64:b6:b1:4a:0e:21:27:c8:59:9d:aa:
bc:3e:7d:c2:3d:80:4f:49:c2:89:f2:ac:ce:af:d5:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:25:B9:3F:FF:EC:67:D4:44:63:BE:0C:84:19:2B:42:D2:5D:64:74
X509v3 Authority Key Identifier:
keyid:3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38362e302f32342d3234203d3e20323731313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.86.0/24
Signature Algorithm: sha256WithRSAEncryption
44:89:42:01:b0:e9:0f:0a:30:ea:9e:db:d5:78:58:9f:12:ae:
12:5a:f8:02:eb:6b:80:f6:3f:d7:f7:b7:f6:34:fb:c5:a8:c0:
99:41:24:a6:d7:37:47:97:e3:48:31:7b:27:92:11:b5:9b:65:
eb:bf:65:a6:7d:78:e3:09:4a:ca:26:0b:4d:ae:17:6f:3b:7f:
42:75:88:ea:89:06:aa:5c:d6:ae:e0:ea:08:63:c9:b1:78:18:
a9:38:0f:74:bd:f2:c6:c0:83:bb:3b:d8:08:86:0f:d0:26:bd:
ab:85:a4:98:6d:bf:3f:d9:f3:a1:7e:a4:af:de:a6:c1:37:cd:
6a:61:2d:1a:df:89:74:89:be:c3:e8:82:64:fc:2b:c5:a4:bb:
ce:b1:b6:08:ea:dc:f3:33:b0:71:85:7a:1f:6d:0d:05:ae:e5:
98:25:e2:6a:ba:39:17:f0:91:09:0a:3c:54:24:26:1b:67:6a:
cc:52:79:57:1d:27:26:9d:9e:b6:40:7d:24:17:d4:8d:3b:07:
67:b8:97:3e:ce:75:e8:a6:8f:45:99:e4:c3:cc:e1:94:49:0c:
32:26:53:48:9d:6f:7a:a8:2e:6c:fa:64:4d:67:ea:80:8c:ce:
68:1f:72:5a:e6:76:60:58:ea:e5:48:44:93:b7:9d:eb:d1:af:
36:70:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:46 2025 by rpki-client