Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa
File: 3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa (raw, json)
Hash identifier: 8j4ewQXZMDAFY3LAyT1lA6vLGY1y/f+gpF+yTzWcS10=
Subject key identifier: 3B:4E:0C:6F:83:69:2B:14:A9:01:F5:98:9E:E9:54:74:0D:85:5A:37
Certificate issuer: /CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
Certificate serial: 4FC8D7B40E91D61C8F3872CFC9A0D1EC1799CC67
Authority key identifier: C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa
Signing time: Mon 22 Jan 2024 13:46:23 +0000
ROA not before: Mon 22 Jan 2024 13:41:23 +0000
ROA not after: Mon 20 Jan 2025 13:46:23 +0000
asID: 263143
IP address blocks: 191.242.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c8:d7:b4:0e:91:d6:1c:8f:38:72:cf:c9:a0:d1:ec:17:99:cc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
Validity
Not Before: Jan 22 13:41:23 2024 GMT
Not After : Jan 20 13:46:23 2025 GMT
Subject: CN=3B4E0C6F83692B14A901F5989EE954740D855A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:ed:24:10:e7:b5:0a:c7:48:6a:a8:98:92:
df:57:09:f8:99:b2:ef:0d:dd:c9:c0:64:a0:1b:e7:
6b:71:52:fa:1e:54:a2:0b:f6:f9:eb:2f:d7:1a:72:
57:32:ce:27:cb:2f:97:d6:93:dd:42:18:75:e4:67:
db:ce:48:be:41:2d:fb:ee:37:79:d4:65:d8:f8:2f:
e9:26:97:6c:ad:85:72:72:de:14:b5:58:75:f6:b1:
34:4b:94:0a:2e:e5:e9:77:c3:10:bc:8c:1f:ad:f6:
fb:b3:8c:69:ef:56:f0:f2:64:be:7b:1f:14:f7:0a:
75:01:b5:42:9b:cd:63:1b:f9:2f:05:68:48:58:4e:
fe:a0:9b:f3:52:8a:b4:de:f8:8b:36:9b:4a:0a:1d:
a3:8c:c8:c6:be:6c:06:60:93:68:a2:6d:b4:f8:d7:
b4:8e:33:34:9e:e3:18:f9:48:98:65:3e:09:66:7e:
a4:1d:fa:66:ec:72:8a:14:b6:0d:4f:e7:8a:91:08:
cf:8f:9b:4e:e5:de:3e:3f:74:cb:d2:07:a5:3a:39:
95:82:12:24:07:6e:fa:29:b0:d4:ee:d4:b0:51:b8:
ec:35:fc:e0:70:05:c7:26:1b:22:0f:84:54:f2:f5:
20:b2:cf:0d:55:80:65:6a:15:56:4e:d5:5c:e3:5c:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4E:0C:6F:83:69:2B:14:A9:01:F5:98:9E:E9:54:74:0D:85:5A:37
X509v3 Authority Key Identifier:
keyid:C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.196.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e2:8a:63:5c:07:e0:c8:7f:82:00:d8:24:e1:08:f2:c3:fa:
82:74:b3:10:78:2b:c8:3e:53:00:99:0c:3a:11:88:71:40:43:
d3:f7:80:b1:3d:b4:10:d3:29:46:09:15:9d:46:db:01:f7:f5:
07:2b:90:f6:90:1a:8c:0b:d4:96:2e:c5:8b:4b:8a:ac:22:5d:
65:b8:3e:70:b3:3a:73:f1:8f:dc:90:52:07:50:5e:e6:c6:6a:
48:99:a9:ed:f8:a0:fc:2f:4c:4e:26:28:d9:c9:09:49:e1:87:
fd:1c:f6:f9:a2:fc:af:37:3b:40:95:4b:20:60:68:97:a1:94:
f1:ea:1f:55:1d:20:39:6b:8d:96:cd:fb:00:ee:46:6d:61:00:
c9:b3:c7:ff:2b:a3:4a:5a:cc:ce:64:84:78:6c:08:72:a6:2c:
9a:4a:29:89:e5:05:d7:a9:52:ab:cd:d4:e5:6e:3e:cd:d3:99:
9c:39:5f:d8:de:d5:0a:e1:ea:84:16:0f:c5:33:64:38:d5:bf:
25:ae:3e:b2:b8:52:a8:9b:bc:b8:e9:34:0b:71:10:3e:4b:2e:
f4:03:60:cf:f3:55:2e:e3:3e:cd:a3:eb:d6:c5:51:de:bd:59:
2a:8c:fd:50:63:dc:1f:60:27:04:dc:84:f4:8c:92:32:6f:e3:
bc:ba:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org