Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139322e302f32322d3232203d3e203631373139.roa
File: 3133312e302e3139322e302f32322d3232203d3e203631373139.roa (raw, json)
Hash identifier: 5dZsfjdOTFkdmFH4OyyvTTGdmlo5vCRzMFWBh4lWRXE=
Subject key identifier: 85:28:87:DA:54:BD:F7:38:7C:3B:0D:77:44:5E:37:9F:5D:41:E1:0E
Certificate issuer: /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial: 1B4899B9D28CC514351911526AF5852BC6A6C058
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139322e302f32322d3232203d3e203631373139.roa
Signing time: Wed 11 Dec 2024 11:15:58 +0000
ROA not before: Wed 11 Dec 2024 11:10:58 +0000
ROA not after: Wed 10 Dec 2025 11:15:58 +0000
asID: 61719
IP address blocks: 131.0.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:48:99:b9:d2:8c:c5:14:35:19:11:52:6a:f5:85:2b:c6:a6:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Validity
Not Before: Dec 11 11:10:58 2024 GMT
Not After : Dec 10 11:15:58 2025 GMT
Subject: CN=852887DA54BDF7387C3B0D77445E379F5D41E10E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:ba:e8:f3:ab:79:58:f5:6b:fd:06:47:12:
4e:d0:03:a4:8a:9a:6e:64:ac:00:92:00:d1:7a:9f:
01:a6:3c:92:19:08:8b:1c:20:0c:20:9e:d9:08:37:
6c:27:4b:f9:d4:55:d2:5d:da:4e:4a:73:04:89:d9:
10:4c:e7:70:1b:14:7c:7a:b0:f8:13:9c:09:b2:6b:
06:cd:87:86:9c:62:fd:64:c0:84:c8:8a:53:54:92:
e7:77:57:64:0c:36:13:8f:bd:6b:c5:65:20:ad:cd:
20:76:64:a7:2c:35:c3:50:56:2d:64:7c:94:08:31:
8e:6f:8d:f6:16:4e:21:68:9d:ac:46:10:74:22:0d:
25:11:69:61:ca:e1:7d:c3:2e:44:2d:bf:12:13:20:
45:4f:0e:3f:7e:bf:a4:5e:7c:0c:53:08:66:47:1b:
9a:97:ef:ab:f3:b5:ac:72:9b:6f:a2:42:2b:f6:01:
1a:b9:45:5e:79:a0:c8:eb:21:03:e3:e3:17:e2:50:
39:c9:6d:7e:58:9c:c6:84:40:3d:db:2a:a5:47:fa:
17:d9:47:5c:c8:83:e5:58:18:46:08:05:7b:27:cb:
05:51:c4:b9:c4:f7:02:cc:1e:fd:9c:9a:9c:25:9f:
66:22:a3:a5:37:ab:4e:c2:8b:bd:c0:08:20:a8:df:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:28:87:DA:54:BD:F7:38:7C:3B:0D:77:44:5E:37:9F:5D:41:E1:0E
X509v3 Authority Key Identifier:
keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139322e302f32322d3232203d3e203631373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.192.0/22
Signature Algorithm: sha256WithRSAEncryption
34:93:47:08:57:55:74:8a:40:a5:ee:31:b6:3f:91:47:2e:bc:
90:20:6a:25:a9:db:e9:60:91:29:a8:32:dc:38:13:91:5b:b8:
e6:12:ad:e3:26:04:fd:3e:cf:79:b4:1b:e8:7d:e9:1f:7d:32:
e4:d6:5d:d8:d8:bb:89:26:bf:23:ce:a8:94:5a:d2:4c:21:47:
70:b0:a6:f2:85:f9:bb:67:1f:b2:94:99:23:c2:b5:97:85:e6:
f7:b0:e3:59:0d:16:13:93:cf:cd:72:f9:78:0c:d9:c6:fe:0e:
9b:06:62:71:ae:d7:19:29:fd:39:69:49:28:0f:e3:cc:f3:e0:
ea:63:d5:8b:ee:7e:f6:fb:70:17:a3:dc:2a:69:44:93:41:8a:
a0:95:4e:9f:1c:7a:ed:37:35:cd:24:5b:0f:2e:c7:6d:82:68:
38:1a:86:22:0b:30:f1:63:7a:4d:ce:dd:1f:c3:59:a0:31:b5:
76:57:9c:dd:58:1f:b4:b2:46:f3:b9:da:63:92:ad:eb:dc:47:
da:4d:64:31:3b:af:48:a8:9e:ee:8a:86:40:ff:a4:b4:29:a2:
56:05:a6:24:a5:bb:a5:60:2f:b9:4c:7a:3c:6e:42:ac:d0:32:
c6:94:46:8f:2a:42:3d:68:18:68:6e:a4:8d:a0:a2:b5:ba:8d:
fa:ef:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:37:17 2025 by rpki-client