Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/3139322e3134312e31322e302f32322d3232203d3e20323637343531.roa
File: 3139322e3134312e31322e302f32322d3232203d3e20323637343531.roa (raw, json)
Hash identifier: ZWjVqkL4knRO/viWMSF7xzyDl5oJlq5MBW3u/YFhdzQ=
Subject key identifier: 7A:11:D2:09:5E:F7:A7:F3:04:4C:78:DD:B9:5D:62:7F:C1:82:B7:63
Certificate issuer: /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial: 11BA1980DF9D6E1A6AF16C10D3BF89BC4423FACF
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/3139322e3134312e31322e302f32322d3232203d3e20323637343531.roa
Signing time: Mon 13 Mar 2023 15:55:05 +0000
ROA not before: Mon 13 Mar 2023 15:50:05 +0000
ROA not after: Mon 11 Mar 2024 15:55:05 +0000
asID: 267451
IP address blocks: 192.141.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ba:19:80:df:9d:6e:1a:6a:f1:6c:10:d3:bf:89:bc:44:23:fa:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Validity
Not Before: Mar 13 15:50:05 2023 GMT
Not After : Mar 11 15:55:05 2024 GMT
Subject: CN=7A11D2095EF7A7F3044C78DDB95D627FC182B763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:ac:3c:06:d8:61:2e:70:e7:0d:e7:e1:ff:
51:a1:66:e8:33:a5:2b:f6:25:6f:8a:7b:40:c6:ca:
12:72:2d:a4:a9:26:ef:ae:0d:36:2d:e0:e0:e7:94:
b4:3e:b0:5e:20:6d:97:38:da:06:c2:07:03:77:29:
bd:1d:fd:5e:31:d5:76:6d:fb:c8:0b:bd:40:3a:4c:
68:55:c3:0a:cf:c4:d4:29:69:42:f6:3a:52:d5:4d:
c8:03:99:da:5e:76:b9:c9:d6:b5:38:78:9f:3c:2b:
9d:1d:55:1b:3a:5b:58:4a:5c:54:7c:a1:24:fe:a7:
36:bf:38:58:98:03:3d:aa:cf:5f:1c:1a:a1:bf:94:
43:09:f4:e0:1e:98:da:8b:e7:ef:ab:00:b9:b7:77:
08:cc:91:9f:ef:a4:a7:24:6c:45:b6:3e:a1:c0:ed:
f0:66:a6:0b:fa:59:6d:94:56:73:53:a5:58:e0:38:
7b:90:28:a2:a0:9d:73:4a:04:86:ce:15:15:37:0e:
f3:b3:e9:34:cf:bf:28:a8:71:10:90:b1:00:77:e6:
fc:89:6c:32:60:9b:68:02:c6:32:cd:58:b5:cf:73:
8b:51:c4:5c:23:87:2d:7b:2e:ca:3f:69:94:91:9b:
43:8b:55:a3:e2:76:67:7b:03:a9:5a:d2:1c:2c:64:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:11:D2:09:5E:F7:A7:F3:04:4C:78:DD:B9:5D:62:7F:C1:82:B7:63
X509v3 Authority Key Identifier:
keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/3139322e3134312e31322e302f32322d3232203d3e20323637343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:0f:67:e7:af:e9:5e:f8:11:78:f6:59:5c:d0:2b:9d:c7:15:
19:87:46:2e:f6:b0:e8:ed:b1:13:71:3d:95:6b:cb:aa:62:47:
58:37:be:42:02:c6:bd:84:c4:bf:db:90:8a:e0:02:ad:c6:a8:
04:02:2e:05:99:db:1e:36:00:7c:da:8d:ec:fe:2c:83:53:1e:
5d:34:f4:df:2c:ef:48:44:91:f9:91:4d:73:7c:8a:2e:c2:fe:
20:b7:6b:95:5a:9a:4c:22:f8:ed:a7:43:29:ad:64:85:70:53:
e3:4c:c0:87:96:dd:4c:82:f7:20:48:66:80:2c:75:38:c4:0e:
5b:ed:62:c5:6b:83:9c:72:e7:76:24:bb:16:4f:0e:ce:bc:d2:
a1:2a:a6:2c:ca:56:52:e8:e2:0f:5e:c1:0f:be:ed:dd:68:91:
f9:5c:a9:b1:fb:c6:da:5e:86:77:5e:88:55:52:4d:19:09:e3:
2e:d5:08:a5:fa:11:b5:1e:54:01:1c:79:df:c7:03:a0:42:3c:
58:fe:d2:30:fc:d0:58:fa:77:81:f0:55:3f:d7:4c:a5:ff:9a:
27:d1:07:de:17:29:c3:bc:01:56:5a:6f:0f:c3:bb:b6:84:60:
dc:3a:39:8d:04:ce:dc:26:db:37:4c:d5:f9:3f:ed:dc:83:00:
09:f3:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:34 2025 by rpki-client