Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3139312e362e34392e302f32342d3234203d3e20323633303733.roa
File: 3139312e362e34392e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier: 4wXLHYB9mIDUn9aFq3vSet6EaD2AL8pt1WVO0iuxTK4=
Subject key identifier: 4B:C2:07:1C:11:B9:42:71:F8:C8:05:89:76:EE:B2:93:F8:DE:61:4C
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 555DBAD31AFBAE858BE3CFE053B9AF13B5A9F0FB
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3139312e362e34392e302f32342d3234203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:11 +0000
ROA not before: Fri 22 Dec 2023 20:20:11 +0000
ROA not after: Fri 20 Dec 2024 20:25:11 +0000
asID: 263073
IP address blocks: 191.6.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:5d:ba:d3:1a:fb:ae:85:8b:e3:cf:e0:53:b9:af:13:b5:a9:f0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:11 2023 GMT
Not After : Dec 20 20:25:11 2024 GMT
Subject: CN=4BC2071C11B94271F8C8058976EEB293F8DE614C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:65:0b:d7:ff:03:af:2e:f2:69:83:5a:72:
d8:f1:d6:ac:ec:75:ed:a6:d8:48:0c:34:00:bc:81:
82:da:02:6a:c3:c7:39:e3:74:c2:59:19:5f:17:de:
2f:5c:5a:5d:12:bd:5c:75:12:dd:1a:2c:47:74:bd:
41:52:82:90:36:cd:6a:48:04:3b:22:13:b0:63:20:
b2:55:58:e1:e9:fd:77:9f:18:f6:70:a0:1e:bb:6c:
3d:c1:5c:0d:55:b9:d9:e2:12:17:2d:67:5a:16:82:
1a:a1:14:cc:ec:34:27:80:d7:63:d6:7a:64:1c:ea:
2a:59:88:07:75:e3:c9:04:b1:fb:9b:71:bd:4a:22:
af:ba:99:3e:95:c0:a5:c7:37:c8:06:b1:a3:43:5e:
8a:0e:da:ba:03:41:7d:55:cc:93:3a:f1:16:34:34:
83:d4:c6:51:e7:91:48:d2:9d:bb:da:95:da:33:10:
d0:2b:9d:68:c3:63:b0:79:1b:0f:79:b6:3d:b3:2f:
7a:e2:c1:30:5e:de:ba:90:ca:b6:8d:60:94:01:61:
f4:c6:01:6f:bc:a6:a0:7b:43:07:0c:2b:b2:6d:78:
40:bf:22:45:fc:a3:13:8c:18:c1:65:55:9b:cc:61:
a1:96:b2:fc:5e:cf:a7:32:e4:32:82:a2:05:8a:7f:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C2:07:1C:11:B9:42:71:F8:C8:05:89:76:EE:B2:93:F8:DE:61:4C
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3139312e362e34392e302f32342d3234203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.6.49.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9d:85:9a:2c:b6:af:90:78:e2:fa:bc:92:96:4c:c8:40:5f:
1d:5e:56:93:1e:97:76:6d:5a:3d:12:8f:b7:8f:74:fa:f2:a6:
1d:7f:41:67:0b:e7:ee:eb:ab:9e:92:9e:db:18:fd:ab:8a:5b:
ea:d5:1c:25:a9:47:b4:d3:4e:86:4e:dc:4c:8e:66:43:49:36:
70:1f:eb:a1:cf:8d:c2:7e:fe:1b:fc:c6:99:42:8e:85:1e:8d:
78:bd:8b:6b:0e:88:8e:fb:52:82:bf:d4:89:88:73:c2:5b:05:
18:82:f3:6b:97:eb:fa:1b:cf:f7:09:d8:d0:29:33:7c:d5:5e:
48:d7:0c:7c:0d:b3:35:54:bf:42:23:86:68:79:7f:3a:52:bf:
3d:c3:dc:95:d1:5e:67:49:5f:83:b4:d0:11:ec:c1:fb:25:0a:
69:32:25:bc:c6:05:a5:4e:02:1e:be:1b:3f:a0:9f:84:2b:0c:
3a:3d:c0:c0:ee:8d:81:31:ea:06:25:71:5c:a0:cc:af:01:51:
dd:fb:65:ff:9b:6b:bd:2a:cb:f5:ae:18:81:66:85:f1:c0:9a:
97:cb:62:fa:96:e5:56:82:45:e8:0c:33:a7:63:4b:4b:c6:cc:
7c:9d:43:56:7d:fa:e3:4e:33:69:9c:7b:53:10:d7:6a:45:62:
46:5c:47:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org