Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa
File: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (raw, json)
Hash identifier: PI4tiYQjhdRtvamM0cIvntF7oFvMwhQTQE2EMhf7tLI=
Subject key identifier: 52:24:06:E3:B3:AE:C2:E0:D1:26:89:6C:AC:6E:D1:25:C7:2D:68:0B
Certificate issuer: /CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
Certificate serial: 0F45A1FD19A65877A6B747BC79848EDE8E2D97C6
Authority key identifier: B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa
Signing time: Tue 13 Feb 2024 23:58:00 +0000
ROA not before: Tue 13 Feb 2024 23:53:00 +0000
ROA not after: Tue 11 Feb 2025 23:58:00 +0000
asID: 267546
IP address blocks: 191.241.88.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:45:a1:fd:19:a6:58:77:a6:b7:47:bc:79:84:8e:de:8e:2d:97:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
Validity
Not Before: Feb 13 23:53:00 2024 GMT
Not After : Feb 11 23:58:00 2025 GMT
Subject: CN=522406E3B3AEC2E0D126896CAC6ED125C72D680B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:1a:83:0a:56:4a:1b:c9:13:e4:b9:9d:0e:
a8:ed:64:70:81:77:ae:00:74:92:e5:44:de:f5:5d:
46:06:85:ab:7b:cf:ec:4f:54:a6:5b:34:d4:d8:cd:
dc:d9:f4:f0:5b:30:0d:af:5d:67:2f:50:70:17:f4:
c6:27:9d:8c:52:5c:57:bb:0a:f4:37:8b:28:d6:8d:
52:00:dd:e0:de:62:fe:e0:25:37:7f:d1:88:6c:69:
b6:5b:08:51:a8:84:f0:dc:a9:a3:5e:6d:b2:d0:fc:
a9:52:0d:35:af:79:1a:a3:9d:4e:5e:86:ce:a2:d7:
b9:97:ed:42:9c:27:7e:59:d3:9d:ab:3f:c7:df:df:
c1:d1:d4:ee:5c:1d:1a:14:9f:57:6e:4d:49:34:c6:
91:55:61:37:5b:10:40:6e:be:45:c4:2a:9e:73:b0:
6a:38:8f:b8:4f:4d:99:09:ad:8d:18:40:e5:a5:5a:
e8:69:eb:c9:cf:33:81:c0:d0:64:da:45:78:86:22:
c5:e3:c0:20:31:1d:44:fe:6c:94:d0:df:a9:9c:7a:
3a:15:c9:a0:02:fb:32:38:3c:a4:d6:d4:8e:a1:ec:
73:81:54:2d:f3:0c:0c:d4:f9:1a:44:53:7b:16:2d:
5f:72:7e:b8:54:57:d0:51:d8:6b:a6:1e:e0:b1:30:
cf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:24:06:E3:B3:AE:C2:E0:D1:26:89:6C:AC:6E:D1:25:C7:2D:68:0B
X509v3 Authority Key Identifier:
keyid:B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.88.0/21
Signature Algorithm: sha256WithRSAEncryption
13:c1:56:47:45:09:63:3f:5d:2c:af:3b:6f:3a:8a:12:03:c9:
12:e8:63:35:59:cf:9a:e5:ad:af:a4:01:e7:9d:8e:4e:a8:1c:
6f:e7:0d:06:e9:ae:2e:4e:bb:04:04:7b:7b:2c:40:41:d3:32:
d9:6b:b7:2d:e0:e1:00:3a:fb:e0:7d:2d:eb:95:6c:9e:9d:8a:
e4:68:d8:d0:39:8b:09:aa:4c:69:d9:5d:7d:3e:54:51:0a:7f:
b7:a8:cf:7b:1c:3a:a1:02:4e:31:57:a3:eb:09:c3:9a:93:d2:
73:dc:98:5c:42:90:13:49:84:cf:6b:00:56:72:60:78:53:02:
0f:ba:2a:1a:63:47:af:3e:4b:a9:6a:e4:c6:0a:b0:fd:c2:3d:
e1:c4:c2:20:a8:b0:b9:41:e4:33:72:59:ec:a7:18:61:45:1c:
ad:9c:ef:58:78:a4:ea:6a:8a:67:c2:48:7b:09:25:6f:41:08:
b8:90:18:36:b3:f2:a2:c1:8f:18:55:7b:16:c4:39:8a:46:87:
a6:8d:a9:d9:78:34:83:46:6e:96:c6:07:40:fb:a9:34:b0:49:
37:d0:fe:82:b0:af:c7:51:5f:5a:83:cf:dc:bc:da:d3:dd:76:
62:96:77:12:e4:2d:30:f8:7c:9a:61:ed:50:20:5a:4c:f7:4e:
45:f5:a1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:33 2025 by rpki-client