Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3139312e35322e3232342e302f32302d3230203d3e203238353938.roa
File: 3139312e35322e3232342e302f32302d3230203d3e203238353938.roa (raw, json)
Hash identifier: XIBfS+YJpsQY8/c90OSlg/MqyuAZPQLIzH2H6Krvv7g=
Subject key identifier: FE:D1:AB:E2:AF:77:83:FD:50:FE:69:0F:08:BB:5D:76:14:AE:15:3C
Certificate issuer: /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial: 0A07E7ABA28B1AA489518FA9105F3408D24871E8
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3139312e35322e3232342e302f32302d3230203d3e203238353938.roa
Signing time: Tue 24 Oct 2023 22:02:00 +0000
ROA not before: Tue 24 Oct 2023 21:57:00 +0000
ROA not after: Tue 22 Oct 2024 22:02:00 +0000
asID: 28598
IP address blocks: 191.52.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:07:e7:ab:a2:8b:1a:a4:89:51:8f:a9:10:5f:34:08:d2:48:71:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Validity
Not Before: Oct 24 21:57:00 2023 GMT
Not After : Oct 22 22:02:00 2024 GMT
Subject: CN=FED1ABE2AF7783FD50FE690F08BB5D7614AE153C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:82:1b:19:8c:32:60:8e:8c:86:12:a9:c9:
37:60:22:30:a3:e4:e4:28:ef:fe:06:c4:19:3c:1d:
3f:64:f1:12:84:ce:e3:1b:6e:85:11:89:14:ce:05:
d5:31:1a:9e:03:9d:49:60:21:65:67:2c:d6:ef:f3:
c1:aa:19:df:9b:0f:cc:47:5f:5e:5d:3f:af:44:5e:
0c:30:0a:88:1e:1c:2b:24:2f:31:79:7f:7d:17:b0:
6b:76:42:74:fc:f0:a7:d0:69:7c:13:de:5b:94:f5:
d4:7f:c4:f9:d5:eb:87:9f:22:5f:e5:ac:3c:f7:33:
d7:b8:f3:4d:a4:ba:c6:8d:f7:69:ed:df:c2:b7:01:
59:ec:6a:10:32:d5:4b:f9:80:fb:8e:b7:ef:75:a2:
51:00:27:74:44:fb:12:03:72:75:55:35:c5:3c:44:
99:8a:bd:56:68:a2:e5:20:ec:a1:56:2f:2c:0c:98:
d2:bb:c2:a3:ee:a0:6f:64:55:af:8e:9e:20:21:99:
1b:32:b5:70:64:a1:38:c5:b7:fe:79:bc:56:40:5e:
c9:35:1d:7d:90:81:1b:ab:18:4f:27:af:7f:19:cc:
1b:60:98:2d:03:46:4b:88:cb:11:ba:41:41:26:33:
63:01:01:33:0f:33:51:9d:87:64:c6:94:0c:f7:e9:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D1:AB:E2:AF:77:83:FD:50:FE:69:0F:08:BB:5D:76:14:AE:15:3C
X509v3 Authority Key Identifier:
keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3139312e35322e3232342e302f32302d3230203d3e203238353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.52.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:1f:eb:09:31:65:27:73:c7:66:50:fd:1c:73:2e:80:00:e4:
3c:a8:8f:98:0b:df:29:5f:97:6f:ff:19:84:82:62:68:a8:e8:
08:66:c9:0d:57:9c:7d:0b:9d:75:cd:10:8b:b9:7f:c0:07:d7:
1e:4a:be:08:b9:e8:44:2f:69:8e:f6:66:36:75:e9:10:8e:8d:
25:40:9d:73:a8:c2:9c:9a:b6:e1:ef:cc:c8:6d:12:c7:fd:5d:
a9:6f:c4:d9:ee:4a:d1:b5:51:a4:46:52:72:67:41:1d:33:42:
49:69:68:d1:7e:32:6e:36:9e:22:a1:25:89:12:39:b9:f6:dd:
26:69:7d:d0:e0:e8:f0:c3:18:18:e5:f0:57:95:d7:d5:db:77:
09:dd:dd:65:c8:01:a0:2a:7e:20:c2:69:a2:41:34:29:4e:64:
f2:80:c0:ff:95:66:bc:98:cc:f4:45:3e:01:ae:a8:37:c0:0a:
33:12:8f:77:e6:7e:d3:fd:53:51:ff:58:30:77:9c:3b:a4:d4:
3f:65:ee:df:f6:fb:6d:f4:68:84:6d:00:de:f0:2b:fd:bb:ce:
4f:89:83:d9:53:80:4c:83:86:12:1b:38:82:a2:dd:f8:d4:46:
76:53:12:9d:b8:7f:95:9d:df:41:b9:ab:57:da:64:23:8c:9a:
76:00:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:06:50 2025 by rpki-client