Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3139312e362e34382e302f32312d3231203d3e20323633303733.roa
File: 3139312e362e34382e302f32312d3231203d3e20323633303733.roa (raw, json)
Hash identifier: iG/zpyQ5m+2mXmnVo2JnMudg5KzkhJddMYRHrWPqWBs=
Subject key identifier: 0D:E2:8A:92:23:48:ED:ED:F8:5C:F2:D4:EF:AE:0C:8D:A2:CD:E8:0D
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 432ABD22081CDD260849D7E26654E2EA5F3075BA
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3139312e362e34382e302f32312d3231203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:05 +0000
ROA not before: Fri 22 Dec 2023 20:20:05 +0000
ROA not after: Fri 20 Dec 2024 20:25:05 +0000
asID: 263073
IP address blocks: 191.6.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:2a:bd:22:08:1c:dd:26:08:49:d7:e2:66:54:e2:ea:5f:30:75:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:05 2023 GMT
Not After : Dec 20 20:25:05 2024 GMT
Subject: CN=0DE28A922348EDEDF85CF2D4EFAE0C8DA2CDE80D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:7e:3f:d1:6b:57:9a:c2:06:6e:e8:d1:5f:
e1:28:f9:2e:00:ce:65:d7:13:33:2d:ac:a8:12:1f:
45:4a:a2:f6:e4:b6:fe:4e:2c:90:14:98:90:38:2d:
46:37:aa:54:b2:43:9d:59:0e:60:91:ff:b0:df:93:
8c:d9:6c:0e:62:b8:6f:ff:1a:50:d1:aa:ed:fa:d4:
d7:07:95:f7:da:c6:27:2e:13:63:a6:dd:92:d3:bf:
c4:43:a7:64:3c:20:e9:40:81:2c:9a:24:90:1c:0f:
86:99:50:ce:47:e4:e3:0f:c0:ff:59:e8:2b:99:d3:
e0:14:02:7a:55:d5:83:85:c2:63:44:d1:d5:1f:8c:
d1:3b:bc:99:95:7e:4e:22:3e:1a:9c:98:76:e9:4c:
1f:76:a0:7a:2a:58:39:0e:d9:c8:ed:ae:b6:45:f0:
a7:53:21:69:a6:9c:be:7e:84:4f:5d:e7:87:d1:ef:
fd:a6:e4:de:f6:e6:0f:cb:97:58:a7:83:4b:b7:5f:
fc:c9:86:28:cb:06:f0:92:24:25:82:43:e7:c6:7a:
41:2b:1c:70:85:54:dd:5a:88:04:ab:72:07:cb:4f:
60:5f:8c:1a:5f:44:ba:e6:5e:b0:d6:0b:65:00:a4:
6c:40:04:72:8e:18:12:83:37:3e:82:35:5e:d6:07:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E2:8A:92:23:48:ED:ED:F8:5C:F2:D4:EF:AE:0C:8D:A2:CD:E8:0D
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3139312e362e34382e302f32312d3231203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.6.48.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:a9:ed:78:ad:4a:1c:0a:05:7e:13:92:cf:11:41:21:fa:49:
1a:59:49:13:b7:19:72:cc:df:26:f6:5d:15:54:c2:2f:02:e9:
af:b8:11:ec:06:c4:ec:17:e1:9a:f0:d9:06:bd:2e:af:f0:50:
04:3d:14:b8:75:8c:7a:84:ca:7a:eb:1f:08:67:60:dc:ae:0c:
44:43:30:58:ab:9b:d6:01:f3:c6:d6:94:f2:f8:44:51:e9:fb:
15:ee:e5:a6:67:01:4b:88:f0:d5:f9:a1:b5:c4:54:dd:09:1a:
d5:33:e0:67:a5:13:82:84:08:ee:44:32:8a:4f:c1:fe:5e:b1:
02:c6:88:c2:12:cd:a9:b9:18:71:11:d4:29:e9:0b:8e:5f:8c:
ff:a4:8a:c4:ac:a1:83:14:d6:c9:ef:6b:90:1e:2a:23:4b:84:
7a:b5:6d:2f:f0:80:60:35:13:ff:74:e1:86:ea:54:21:2d:97:
56:a8:a3:01:e0:65:b0:8e:e1:71:5f:ec:6c:4f:5e:00:52:a1:
5f:a9:bd:52:0f:8c:f9:88:10:d2:73:5b:06:02:0b:77:12:e4:
39:5c:00:59:fb:7c:13:56:6b:92:22:5d:1a:2c:19:10:67:fd:
4c:78:ae:e7:63:7c:1c:e8:fc:98:ca:cd:6f:bd:ac:16:64:2f:
ae:0b:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org