Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3139312e362e35322e302f32342d3234203d3e20323633303733.roa
File: 3139312e362e35322e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier: XOIHGHBQ/8ZFVmmFCdjbVpizSSCsUjfs2uDGB2ULOGk=
Subject key identifier: D5:F9:44:DB:DA:5E:BF:91:C0:E8:67:9E:CC:1F:CE:37:0F:4A:D8:AD
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 7AE1AC2C70B5FE9DA4B014DA392758309D703941
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3139312e362e35322e302f32342d3234203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:11 +0000
ROA not before: Fri 22 Dec 2023 20:20:11 +0000
ROA not after: Fri 20 Dec 2024 20:25:11 +0000
asID: 263073
IP address blocks: 191.6.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e1:ac:2c:70:b5:fe:9d:a4:b0:14:da:39:27:58:30:9d:70:39:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:11 2023 GMT
Not After : Dec 20 20:25:11 2024 GMT
Subject: CN=D5F944DBDA5EBF91C0E8679ECC1FCE370F4AD8AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:58:06:79:c4:72:a2:19:7c:41:e2:16:01:
ba:e6:39:7a:e6:40:fc:bd:22:5d:a0:ca:36:c6:37:
23:6b:e9:ea:5a:f2:f7:34:2e:70:a7:41:6d:2c:b0:
2b:e3:e3:49:19:17:e7:95:36:6b:5a:c6:f2:e3:24:
08:08:3a:49:82:88:56:42:01:d1:21:14:13:59:92:
4f:9a:9f:4a:bd:8b:65:59:67:a1:bf:21:3a:39:e0:
ec:fe:33:f6:01:18:c9:1d:a1:54:a6:e9:9d:4d:5c:
26:dc:6b:bb:a5:32:b6:42:3c:54:c2:a5:14:34:5f:
41:8d:c2:04:94:99:3e:8a:86:e3:7d:66:4e:29:37:
00:f6:c5:db:ab:79:10:c8:e4:9f:bc:26:89:c6:b7:
70:df:19:8e:e1:85:6a:51:4b:32:ee:4b:f3:e3:ff:
e7:11:9b:41:75:dd:52:f0:d0:35:59:14:0d:72:32:
03:fd:3b:56:3d:08:17:d7:55:4e:30:e3:db:70:76:
70:3c:ed:dd:50:c5:2a:49:02:ec:aa:d5:6d:21:9f:
fb:9d:dc:4c:a7:6f:5f:6c:f8:75:d5:d5:92:6f:a5:
4a:35:65:09:7b:67:47:e0:89:9b:03:59:33:3a:98:
98:a1:d9:09:36:bd:de:97:1f:eb:57:85:31:f6:be:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F9:44:DB:DA:5E:BF:91:C0:E8:67:9E:CC:1F:CE:37:0F:4A:D8:AD
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3139312e362e35322e302f32342d3234203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.6.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a9:a5:87:a2:fc:b6:ec:b8:9d:e7:c6:6d:79:38:29:44:84:
33:5e:97:e3:7f:c7:1d:bf:7a:ef:d9:3f:21:45:ea:12:18:3b:
34:f6:da:94:96:6e:cc:53:22:f9:ed:ca:b0:41:a9:dd:98:cc:
07:20:c6:ce:d9:5a:cf:b8:aa:26:34:30:0a:c4:4f:09:bd:79:
1b:da:d7:3d:31:49:c2:22:c6:af:7d:29:8d:85:ad:47:1b:c8:
dd:3c:08:7a:18:9e:ff:86:d4:87:c5:98:31:67:1f:68:a4:f1:
5a:30:91:05:51:57:eb:a9:fe:39:15:02:2f:cc:90:e8:b9:30:
c1:0e:37:8e:0c:ed:35:2d:e2:67:b9:50:a4:8d:03:ec:98:98:
1a:9c:ce:3e:1b:ca:84:9e:ea:4c:1e:cb:e9:1c:52:b7:7e:ca:
1f:a7:87:30:66:56:ce:0e:8d:fd:07:ec:b5:8f:96:5c:ee:f8:
57:c9:9e:fb:d9:c9:0f:b5:54:fc:a6:fb:5d:75:23:33:6f:0e:
f4:64:d2:cf:b6:55:1d:5c:1a:81:4b:38:1d:02:42:7f:e2:83:
3a:f5:d5:ac:54:a1:bc:c1:b1:53:18:98:c2:7e:56:14:b4:0d:
33:8f:8e:98:48:33:cc:fa:6e:f5:11:b7:e9:66:82:27:ee:ce:
2a:fc:1f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org